Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

I found a Remote Code Execution in MECCHA CHAMELEON! If you play a map, that map can abuse a few cool neat bugs to write arbitrary files with (semi-)arbitrary content anywhere on your system, eventually leading to RCE 🧮 🧵 Want to know how? Read this thread 👇

PinkDraconian

12,031 subscribers

40,822 views • 6 days ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 views • 1 year ago

today, on the DL, Notion released WORKERS. workers are a generic code execution environment that let you build interfaces within Notion the first interface we're exposing is the ability to make your own custom agent tools you can now make a tool for a custom agent that executes arbitrary code... and if you can execute arbitrary code, you can do pretty much anything!

today, on the DL, Notion released WORKERS. workers are a generic code execution environment that let you build interfaces within Notion the first interface we're exposing is the ability to make your own custom agent tools you can now make a tool for a custom agent that executes arbitrary code... and if you can execute arbitrary code, you can do pretty much anything!

Sam Catania

82,317 views • 6 months ago

I found a map that lets you watch the Eminem Concert with ANY skin 😭😭 (Map Code is 8244-8226-3592 if you want to try it out! 🧡)

I found a map that lets you watch the Eminem Concert with ANY skin 😭😭 (Map Code is 8244-8226-3592 if you want to try it out! 🧡)

Xgamer360

1,098,291 views • 1 month ago

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

nafiez

21,360 views • 8 months ago

The Rhythm In Anything (TRIA) An AI system to map arbitrary sound to high-fidelity drum recordings! Mind-blowing 🤯 we've probably watched this video a thousand times now 🥁 [SOUND: ON🎵]

The Rhythm In Anything (TRIA) An AI system to map arbitrary sound to high-fidelity drum recordings! Mind-blowing 🤯 we've probably watched this video a thousand times now 🥁 [SOUND: ON🎵]

Gradio

34,299 views • 1 year ago

SEO content in one click? Yes, you read that right. Here's how you can automate your SEO content with a single prompt. Want to know more?

SEO content in one click? Yes, you read that right. Here's how you can automate your SEO content with a single prompt. Want to know more?

Julian Goldie SEO

52,602 views • 1 year ago

stopped in this local bar to play ping pong, found a handkerchief with a map that seems pizza related

stopped in this local bar to play ping pong, found a handkerchief with a map that seems pizza related

Mike Benz

248,905 views • 10 months ago

Here's a copy/paste prompt recipe and vid showing exactly how to ask an LLM for an interactive map with satellite/map layers + a georeferencer that lets you see how old maps correspond with modern geography. Today the computer can’t make good print maps (that's your hill to climb ) but it can, with five bucks and twenty minutes, make good interactive maps. No software/GIS knowledge necessary, you just need a few nouns and an LLM. Scroll to the bottom for the repo/live map if you want those. I'm using Claude Code as an extension in VS Code but you can use the Claude CLI, Cursor, whatever. 1) Let's grab an old cadastral map and see who owned big tracts of a city; I found this an 1854 map of Niagara Falls, NY I found in the Library of Congress: , grabbed the .jp2, saved as a jpg from photoshop. 2) Let's ask Claude Code for a map. You can see exactly what I did in the video but my prompt, sans simple "hey it's busted" debugging, is written out in the following paragraphs. I explain the map-specific nouns in brackets. You can likely dump this whole thing in your LLM window and it'll work; I'd try plan mode + skip permissions. THE PROMPT Make an interactive map with MapLibre GL JS [maplibre is a javascript mapping library, a FOSS version of Mapbox GL JS. This lets us display tiled map data and arbitrary images on the map] Add basemap toggles with Esri satellite, Carto Positron, and OSM [these map layers require no API keys for light usage; Carto Positron is a nice road map layer and OSM is ugly but comprehensive] Add a globe/mercator projection toggle [I think the globe looks better at low zooms] Add a layer panel on the left with visibility checkboxes and delete buttons. Add a search box on the map that flies to results, with deletable pin markers [Makes this easy to get to your area of interest] Include an interactive local georeferencer: drop a JPG, pick ground control points on a zoomable/pannable image viewer, place them on the map, watch it warp with a progress bar centered on the map. [The georeferencer uses math ("affine transform"??) to match points on the old map to points on the new map; generally you click road intersections on the old map, match them on the new map, repeat a dozen times and everything aligns] The georeferenced map overlay defaults to 25% opacity with a slider above the control point list. [I want it easy to see the underlying modern geography] Add Export/import control point buttons [this saves the control points as a JSON so you can save and reimport your work] Add a button to export the warped image as a GeoTIFF with a .prj [In case you want to add the georeferenced image to a real GIS program like QGIS] Look up all relevant docs before starting [Claude sometimes uses outdated stuff] Split everything into separate HTML/CSS/JS files [Claude tends to pile everything in index.html, which is hard to read] Use Optima font, base color #FEFAF6 [I just like this style] Let me test with a local server [it serves it on a simple server so you can nav your host to localhost:8000 and try it out] Log all errors [so you don't have to play telephone with the LLM describing what's busted] 3) Once your LLM finishes, test it out in your browser; if it doesn't work, ask the LLM to check logs. Repeat 'til functional. 4) After this works on your computer, you can show it to everyone by hosting it on GitHub: prompt with "write a README explaining what everything does, add it to a new GitHub repo, deploy using GitHub pages, gimme the live URL" Here's what Claude made for me, try it yourself: • Upload the JPG in the repo, which is linked below • "Add GCP" • Click somewhere recognizable on the old map, like the tip of an island or a road intersection • Click the matching point on the new map • Repeat til you have least 3x points • Hit "georeference" • You'll see the old map atop the new map; if you want a better fit, delete bad points or add a dozen new ones, hit georeference again, repeat Repo: Is this map robust? Human-maintainable? Elegant? Performant? Secure? No, but *your* personal web map need not be. It just needs to work for *your* narrow use case, because it’s *your* map.

Here's a copy/paste prompt recipe and vid showing exactly how to ask an LLM for an interactive map with satellite/map layers + a georeferencer that lets you see how old maps correspond with modern geography. Today the computer can’t make good print maps (that's your hill to climb ) but it can, with five bucks and twenty minutes, make good interactive maps. No software/GIS knowledge necessary, you just need a few nouns and an LLM. Scroll to the bottom for the repo/live map if you want those. I'm using Claude Code as an extension in VS Code but you can use the Claude CLI, Cursor, whatever. 1) Let's grab an old cadastral map and see who owned big tracts of a city; I found this an 1854 map of Niagara Falls, NY I found in the Library of Congress: , grabbed the .jp2, saved as a jpg from photoshop. 2) Let's ask Claude Code for a map. You can see exactly what I did in the video but my prompt, sans simple "hey it's busted" debugging, is written out in the following paragraphs. I explain the map-specific nouns in brackets. You can likely dump this whole thing in your LLM window and it'll work; I'd try plan mode + skip permissions. THE PROMPT Make an interactive map with MapLibre GL JS [maplibre is a javascript mapping library, a FOSS version of Mapbox GL JS. This lets us display tiled map data and arbitrary images on the map] Add basemap toggles with Esri satellite, Carto Positron, and OSM [these map layers require no API keys for light usage; Carto Positron is a nice road map layer and OSM is ugly but comprehensive] Add a globe/mercator projection toggle [I think the globe looks better at low zooms] Add a layer panel on the left with visibility checkboxes and delete buttons. Add a search box on the map that flies to results, with deletable pin markers [Makes this easy to get to your area of interest] Include an interactive local georeferencer: drop a JPG, pick ground control points on a zoomable/pannable image viewer, place them on the map, watch it warp with a progress bar centered on the map. [The georeferencer uses math ("affine transform"??) to match points on the old map to points on the new map; generally you click road intersections on the old map, match them on the new map, repeat a dozen times and everything aligns] The georeferenced map overlay defaults to 25% opacity with a slider above the control point list. [I want it easy to see the underlying modern geography] Add Export/import control point buttons [this saves the control points as a JSON so you can save and reimport your work] Add a button to export the warped image as a GeoTIFF with a .prj [In case you want to add the georeferenced image to a real GIS program like QGIS] Look up all relevant docs before starting [Claude sometimes uses outdated stuff] Split everything into separate HTML/CSS/JS files [Claude tends to pile everything in index.html, which is hard to read] Use Optima font, base color #FEFAF6 [I just like this style] Let me test with a local server [it serves it on a simple server so you can nav your host to localhost:8000 and try it out] Log all errors [so you don't have to play telephone with the LLM describing what's busted] 3) Once your LLM finishes, test it out in your browser; if it doesn't work, ask the LLM to check logs. Repeat 'til functional. 4) After this works on your computer, you can show it to everyone by hosting it on GitHub: prompt with "write a README explaining what everything does, add it to a new GitHub repo, deploy using GitHub pages, gimme the live URL" Here's what Claude made for me, try it yourself: • Upload the JPG in the repo, which is linked below • "Add GCP" • Click somewhere recognizable on the old map, like the tip of an island or a road intersection • Click the matching point on the new map • Repeat til you have least 3x points • Hit "georeference" • You'll see the old map atop the new map; if you want a better fit, delete bad points or add a dozen new ones, hit georeference again, repeat Repo: Is this map robust? Human-maintainable? Elegant? Performant? Secure? No, but your personal web map need not be. It just needs to work for your narrow use case, because it’s your map.

Evan Applegate

15,772 views • 5 months ago

This bug being laughed is one I reported to Google. It was a small side-issue found during my research. But definitely still a security boundary being crossed. If I perform actions on a site, then I don't want that site being able to steal files I've uploaded on another site

This bug being laughed is one I reported to Google. It was a small side-issue found during my research. But definitely still a security boundary being crossed. If I perform actions on a site, then I don't want that site being able to steal files I've uploaded on another site

PinkDraconian

19,793 views • 4 months ago

introducing deskmate a curated map of good coworking spots in sf and south bay you can add your favorite to the map. expanding to nyc, paris, shanghai, singapore soon! thread with some of my go-to spots 👇

introducing deskmate a curated map of good coworking spots in sf and south bay you can add your favorite to the map. expanding to nyc, paris, shanghai, singapore soon! thread with some of my go-to spots 👇

Amber Shen

45,451 views • 5 months ago

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:

Hakai Offsec

11,409 views • 3 months ago

RedNova: From Arbitrary File Write to Command Execution Using COM in Windows Months ago, I wrote a post ( about the unique method used in the RedSun exploit to turn a file write into command execution by using a COM object that can be triggered by a low-privileged user and runs as SYSTEM. In that post, I mentioned that there are other COM objects that can be used in the same way. I presented one object called CoFilterPipeline and noted that it needs some tricks before it can be weaponized. Now I've written a full blog post on how you can find such objects and how you can weaponize them in exploits like RedSun. The video below shows another COM object with the same behavior (windows 11). It's called PerceptionSimulationCoClass. A low-privileged user can activate it, and it runs as SYSTEM. The video doesn't contain any exploit (it just replaces the COM server as administrator). The goal is only to demonstrate how a file write can be turned into command execution as SYSTEM while being triggered by a low-privileged user.

RedNova: From Arbitrary File Write to Command Execution Using COM in Windows Months ago, I wrote a post ( about the unique method used in the RedSun exploit to turn a file write into command execution by using a COM object that can be triggered by a low-privileged user and runs as SYSTEM. In that post, I mentioned that there are other COM objects that can be used in the same way. I presented one object called CoFilterPipeline and noted that it needs some tricks before it can be weaponized. Now I've written a full blog post on how you can find such objects and how you can weaponize them in exploits like RedSun. The video below shows another COM object with the same behavior (windows 11). It's called PerceptionSimulationCoClass. A low-privileged user can activate it, and it runs as SYSTEM. The video doesn't contain any exploit (it just replaces the COM server as administrator). The goal is only to demonstrate how a file write can be turned into command execution as SYSTEM while being triggered by a low-privileged user.

Haidar

13,511 views • 16 days ago

If you want to learn how to draw dense, old-growth forests on your fantasy map for your rpg, book, or just for fun…this one is for you! Here’s a little teaser for the latest tutorial in the Map Effects Learning Archives.

If you want to learn how to draw dense, old-growth forests on your fantasy map for your rpg, book, or just for fun…this one is for you! Here’s a little teaser for the latest tutorial in the Map Effects Learning Archives.

Josh | Map Effects

12,486 views • 1 year ago

$🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉$

🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉

PT SWARM

15,381 views • 1 year ago

CONCEPT: Map Voting for Ranked, Cashout, and Quick Cash. I present to you a “functional” Map Voting UI concept for all Cashout modes. This works the same as the current map selection system in Overwatch. Here is how it works: • Unanimous Vote: If all voting players select the same map, it skips the roulette and instantly locks in. • Mixed Votes: If votes are split, the system rolls a weighted roulette based on the lobby’s percentages. Would you want this feature added?

CONCEPT: Map Voting for Ranked, Cashout, and Quick Cash. I present to you a “functional” Map Voting UI concept for all Cashout modes. This works the same as the current map selection system in Overwatch. Here is how it works: • Unanimous Vote: If all voting players select the same map, it skips the roulette and instantly locks in. • Mixed Votes: If votes are split, the system rolls a weighted roulette based on the lobby’s percentages. Would you want this feature added?

TFVAULT

13,888 views • 14 days ago

obsidian is rlly cool if you write a lot of notes. i usually write down any random thought i have and after years of doing this, it's really cool being able to open the graph view and basically see a map of my brain.

obsidian is rlly cool if you write a lot of notes. i usually write down any random thought i have and after years of doing this, it's really cool being able to open the graph view and basically see a map of my brain.

🐈 bella 🐈

42,114 views • 10 months ago

How to Test and Confirm RCE, Then Exfiltrate Data (no firewall): Step 1: Test if RCE is possible with something like ;whoami Since the app doesn’t return output (blind RCE), you need a side-channel to confirm it. Continued in thread 👇

How to Test and Confirm RCE, Then Exfiltrate Data (no firewall): Step 1: Test if RCE is possible with something like ;whoami Since the app doesn’t return output (blind RCE), you need a side-channel to confirm it. Continued in thread 👇

HackingHub

14,415 views • 1 year ago

If you want to build a great onboarding for your app. Check out how eliza & jake xia did it for Corner 👇 Onboarding: - Killer intro video with music - Asks for a review right after the video ends - Builds your profile based on your tastes - Showcases cool places - Generates a personalized map If you want to succeed, you need to create an experience, not just onboarding. Start building yours today with Anything

César Álvarez

26,426 views • 4 months ago

Daily #Blender Tip: If you have a model that fakes detail using a Normal map, it can be interesting to convert it to ‘real’ geometry that you can continue sculpting on, or for use in 3D printing. This shows you how to do it! #B3D

Daily #Blender Tip: If you have a model that fakes detail using a Normal map, it can be interesting to convert it to ‘real’ geometry that you can continue sculpting on, or for use in 3D printing. This shows you how to do it! #B3D

Jan van den Hemel

75,105 views • 3 years ago

I had a lot of fun compiling the 30 Gemini demos in this video! If you want to play around, here are links to all of them in thread 🧵

I had a lot of fun compiling the 30 Gemini demos in this video! If you want to play around, here are links to all of them in thread 🧵

Alexander Chen

13,196 views • 1 year ago