Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

cor_ctf's profile picture

Crusaders of Rust

2,826 subscribers

82,107 görüntüleme • 1 yıl önce •via X (Twitter)

Bilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

11 Yorum

Renwa profil fotoğrafı
Renwa1 yıl önce

Sorry I don't understand where is the TikTok version

Quentin Minster Picavet profil fotoğrafı
Quentin Minster Picavet1 yıl önce

@u1f383 Nice trip down memory lane reading this blog post. Awesome work!

Marshall';--🐼🍌 profil fotoğrafı
Marshall';--🐼🍌1 yıl önce

@u1f383 @laomaiweng Sorry, what's the point of saying 0-click with a Kernel exploit?

Sean Heelan profil fotoğrafı
Sean Heelan1 yıl önce

@u1f383 @laomaiweng Nice work =)

Raziel Oren profil fotoğrafı
Raziel Oren1 yıl önce

@u1f383 @laomaiweng Wouldn't have happened in Rust

felco profil fotoğrafı
felco1 yıl önce

@u1f383 @laomaiweng nasty

Puppenspieler profil fotoğrafı
Puppenspieler1 yıl önce

@u1f383 @laomaiweng @grok what is This

prasincs ⚓️🇺🇸🇳🇵 profil fotoğrafı
prasincs ⚓️🇺🇸🇳🇵1 yıl önce

@u1f383 @laomaiweng Wow and solid reference back to Eternal Blue

Daniel || KGeN profil fotoğrafı
Daniel || KGeN1 yıl önce

@u1f383 @laomaiweng Awesome 👍

Keizen profil fotoğrafı
Keizen1 yıl önce

@u1f383 @laomaiweng Awesome 👏

Lenny Waters profil fotoğrafı
Lenny Waters1 yıl önce

@u1f383 @laomaiweng Wow, thank you, bro.

Benzer Videolar

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802
0:34

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,901 görüntüleme • 2 yıl önce

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.
1:22

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

#StopCopCity

58,431 görüntüleme • 3 yıl önce

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!
1:31

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

Principal Aikens

15,814 görüntüleme • 3 yıl önce

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️
1:59

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

D3VID 🐢

310,061 görüntüleme • 3 ay önce

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015
0:30

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

Cruz Oxenreider

14,075 görüntüleme • 1 yıl önce

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :
2:15

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

Sivaangi Krish FP

112,182 görüntüleme • 3 yıl önce

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:
0:31

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

Jenny Qu

15,165 görüntüleme • 6 ay önce

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.
1:12

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Houman David Hemmati, MD, PhD

21,431 görüntüleme • 7 ay önce

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay
0:56

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

Jibran Ilyas

75,756 görüntüleme • 2 yıl önce

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!
1:04

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

Varkey Foundation

16,286 görüntüleme • 2 yıl önce

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.
0:49

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

Kangleipak Information Bureau

21,769 görüntüleme • 2 yıl önce

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉
1:15

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

OKX

94,230 görüntüleme • 2 yıl önce

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!
0:33

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

aizk ✡️

244,001 görüntüleme • 4 ay önce

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer
2:22

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Derby Theatre

18,763 görüntüleme • 2 yıl önce

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point
3:48

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

JackoBee🐝

300,769 görüntüleme • 22 gün önce

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning
0:28

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

U.S. Department of Education

11,952 görüntüleme • 3 yıl önce