Tessera
Folgen

root

@ro0ot.bsky.social

Non-descriptive.

7 Posts38 Follower257 Folgt
Mathy Vanhoef@vanhoefm.bsky.social · 2y ago

For more info and a demol video, see the article by @simonmigliano.bsky.social at top10vpn.com/research/tun... IT admins can request access to our code to test servers (code is not yet public to prevent abuse): github.com/vanhoefm/tun... Academic paper: papers.mathyvanhoef.com/usenix2025-t...

New Protocol Vulnerabilities: CVE-2024-7595/7596 & CVE-2025-23018/23019

Over 4.2 million VPN servers, private home routers and other network hosts are vulnerable to hijacking due using tunneling protocols without security.

top10vpn.com

root@ro0ot.bsky.social · 2y ago

Trouble cracking password hashes? Remember that #hashcat can stack (combine) rules. Just use: ▪️-r 1.rule -r 2.rule You can even add more rules, but it will quickly use a lot of memory. Save the rules that cracked a hash with: ▪️--debug-mode=1 --debug-file=found.rule

Shows the contents of 123.rule, that adds the number 1, 2 and 3 after a word and abc.rule, that adds a, b and c after a word. The third command shows hashcat being used with 123.rule and abc.rule used with the word hashcat as wordlist. The output generates hashcat1a, hashcat2a etc until hashcat3c as final output on the last line.
Filippo Valsorda@filippo.abyssdomain.expert · 2y ago

I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission. The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system(). It's RCE, not auth bypass, and gated/unreplayable.

Filippo Valsorda@filippo.abyssdomain.expert · 2y ago

This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library. Looks like this got caught by chance. Wonder how long it would have taken otherwise.