Загрузка видео...

Не удалось загрузить видео

На главную

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

cor_ctf's profile picture

Crusaders of Rust

2,826 subscribers

82,107 просмотров • 1 год назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 11

Фото профиля Renwa
Renwa1 год назад

Sorry I don't understand where is the TikTok version

Фото профиля Quentin Minster Picavet
Quentin Minster Picavet1 год назад

@u1f383 Nice trip down memory lane reading this blog post. Awesome work!

Фото профиля Marshall';--🐼🍌
Marshall';--🐼🍌1 год назад

@u1f383 @laomaiweng Sorry, what's the point of saying 0-click with a Kernel exploit?

Фото профиля Sean Heelan
Sean Heelan1 год назад

@u1f383 @laomaiweng Nice work =)

Фото профиля Raziel Oren
Raziel Oren1 год назад

@u1f383 @laomaiweng Wouldn't have happened in Rust

Фото профиля felco
felco1 год назад

@u1f383 @laomaiweng nasty

Фото профиля Puppenspieler
Puppenspieler1 год назад

@u1f383 @laomaiweng @grok what is This

Фото профиля prasincs ⚓️🇺🇸🇳🇵
prasincs ⚓️🇺🇸🇳🇵1 год назад

@u1f383 @laomaiweng Wow and solid reference back to Eternal Blue

Фото профиля Daniel || KGeN
Daniel || KGeN1 год назад

@u1f383 @laomaiweng Awesome 👍

Фото профиля Keizen
Keizen1 год назад

@u1f383 @laomaiweng Awesome 👏

Фото профиля Lenny Waters
Lenny Waters1 год назад

@u1f383 @laomaiweng Wow, thank you, bro.

Похожие видео

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802
0:34

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,901 просмотров • 2 лет назад

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.
1:22

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

#StopCopCity

58,431 просмотров • 3 лет назад

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!
1:31

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

Principal Aikens

15,814 просмотров • 3 лет назад

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️
1:59

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

D3VID 🐢

310,061 просмотров • 3 месяцев назад

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015
0:30

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

Cruz Oxenreider

14,075 просмотров • 1 год назад

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :
2:15

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

Sivaangi Krish FP

112,182 просмотров • 3 лет назад

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:
0:31

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

Jenny Qu

15,165 просмотров • 6 месяцев назад

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.
1:12

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Houman David Hemmati, MD, PhD

21,431 просмотров • 7 месяцев назад

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay
0:56

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

Jibran Ilyas

75,756 просмотров • 2 лет назад

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!
1:04

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

Varkey Foundation

16,286 просмотров • 2 лет назад

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.
0:49

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

Kangleipak Information Bureau

21,769 просмотров • 2 лет назад

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉
1:15

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

OKX

94,230 просмотров • 2 лет назад

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!
0:33

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

aizk ✡️

244,001 просмотров • 4 месяцев назад

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer
2:22

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Derby Theatre

18,763 просмотров • 2 лет назад

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point
3:48

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

JackoBee🐝

300,769 просмотров • 22 дней назад

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning
0:28

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

U.S. Department of Education

11,952 просмотров • 3 лет назад