Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

Crusaders of Rust

2,826 subscribers

82,107 views • 1 year ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

11 Comments

Renwa1 year ago

Sorry I don't understand where is the TikTok version

Quentin Minster Picavet1 year ago

@u1f383 Nice trip down memory lane reading this blog post. Awesome work!

Marshall';--🐼🍌1 year ago

@u1f383 @laomaiweng Sorry, what's the point of saying 0-click with a Kernel exploit?

Sean Heelan1 year ago

@u1f383 @laomaiweng Nice work =)

Raziel Oren1 year ago

@u1f383 @laomaiweng Wouldn't have happened in Rust

felco1 year ago

@u1f383 @laomaiweng nasty

Puppenspieler1 year ago

@u1f383 @laomaiweng @grok what is This

prasincs ⚓️🇺🇸🇳🇵1 year ago

@u1f383 @laomaiweng Wow and solid reference back to Eternal Blue

Daniel || KGeN1 year ago

@u1f383 @laomaiweng Awesome 👍

Keizen1 year ago

@u1f383 @laomaiweng Awesome 👏

Lenny Waters1 year ago

@u1f383 @laomaiweng Wow, thank you, bro.

Related Videos

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,901 views • 2 years ago

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

#StopCopCity

58,431 views • 3 years ago

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

Principal Aikens

15,814 views • 3 years ago

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

D3VID 🐢

310,061 views • 3 months ago

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

Cruz Oxenreider

14,075 views • 1 year ago

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

Sivaangi Krish FP

112,182 views • 3 years ago

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

Jenny Qu

15,165 views • 6 months ago

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Houman David Hemmati, MD, PhD

21,431 views • 7 months ago

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

Jibran Ilyas

75,756 views • 2 years ago

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

Varkey Foundation

16,286 views • 2 years ago

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

Kangleipak Information Bureau

21,769 views • 2 years ago

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

OKX

94,230 views • 2 years ago

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

aizk ✡️

244,001 views • 4 months ago

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Derby Theatre

18,763 views • 2 years ago

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

JackoBee🐝

300,769 views • 22 days ago

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

U.S. Department of Education

11,952 views • 3 years ago