Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

cor_ctf's profile picture

Crusaders of Rust

2,826 subscribers

82,107 Aufrufe • vor 1 Jahr •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

11 Kommentare

Profilbild von Renwa
Renwavor 1 Jahr

Sorry I don't understand where is the TikTok version

Profilbild von Quentin Minster Picavet
Quentin Minster Picavetvor 1 Jahr

@u1f383 Nice trip down memory lane reading this blog post. Awesome work!

Profilbild von Marshall';--🐼🍌
Marshall';--🐼🍌vor 1 Jahr

@u1f383 @laomaiweng Sorry, what's the point of saying 0-click with a Kernel exploit?

Profilbild von Sean Heelan
Sean Heelanvor 1 Jahr

@u1f383 @laomaiweng Nice work =)

Profilbild von Raziel Oren
Raziel Orenvor 1 Jahr

@u1f383 @laomaiweng Wouldn't have happened in Rust

Profilbild von felco
felcovor 1 Jahr

@u1f383 @laomaiweng nasty

Profilbild von Puppenspieler
Puppenspielervor 1 Jahr

@u1f383 @laomaiweng @grok what is This

Profilbild von prasincs ⚓️🇺🇸🇳🇵
prasincs ⚓️🇺🇸🇳🇵vor 1 Jahr

@u1f383 @laomaiweng Wow and solid reference back to Eternal Blue

Profilbild von Daniel || KGeN
Daniel || KGeNvor 1 Jahr

@u1f383 @laomaiweng Awesome 👍

Profilbild von Keizen
Keizenvor 1 Jahr

@u1f383 @laomaiweng Awesome 👏

Profilbild von Lenny Waters
Lenny Watersvor 1 Jahr

@u1f383 @laomaiweng Wow, thank you, bro.

Ähnliche Videos

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802
0:34

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,901 Aufrufe • vor 2 Jahren

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.
1:22

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

#StopCopCity

58,431 Aufrufe • vor 3 Jahren

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!
1:31

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

Principal Aikens

15,814 Aufrufe • vor 3 Jahren

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️
1:59

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

D3VID 🐢

310,061 Aufrufe • vor 3 Monaten

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015
0:30

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

Cruz Oxenreider

14,075 Aufrufe • vor 1 Jahr

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :
2:15

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

Sivaangi Krish FP

112,182 Aufrufe • vor 3 Jahren

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:
0:31

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

Jenny Qu

15,165 Aufrufe • vor 6 Monaten

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.
1:12

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Houman David Hemmati, MD, PhD

21,431 Aufrufe • vor 7 Monaten

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay
0:56

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

Jibran Ilyas

75,756 Aufrufe • vor 2 Jahren

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!
1:04

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

Varkey Foundation

16,286 Aufrufe • vor 2 Jahren

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.
0:49

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

Kangleipak Information Bureau

21,769 Aufrufe • vor 2 Jahren

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉
1:15

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

OKX

94,230 Aufrufe • vor 2 Jahren

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!
0:33

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

aizk ✡️

244,001 Aufrufe • vor 4 Monaten

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer
2:22

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Derby Theatre

18,763 Aufrufe • vor 2 Jahren

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point
3:48

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

JackoBee🐝

300,769 Aufrufe • vor 22 Tagen

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning
0:28

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

U.S. Department of Education

11,952 Aufrufe • vor 3 Jahren