正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Say hello to Eternal Tux🐧, a 0-click RCE exploit against the Linux kernel from KSMBD N-Days (CVE-2023-52440 & CVE-2023-4130) Cheers to Pumpkin 🎃 for finding these CVEs + the OffensiveCon talk from gteissier & Quentin Minster Picavet for inspiration!

Crusaders of Rust

2,826 subscribers

82,107 次观看 • 1 年前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

11 条评论

Renwa 的头像

Renwa1 年前

Sorry I don't understand where is the TikTok version

Quentin Minster Picavet 的头像

Quentin Minster Picavet1 年前

@u1f383 Nice trip down memory lane reading this blog post. Awesome work!

Marshall';--🐼🍌 的头像

Marshall';--🐼🍌1 年前

@u1f383 @laomaiweng Sorry, what's the point of saying 0-click with a Kernel exploit?

Sean Heelan 的头像

Sean Heelan1 年前

@u1f383 @laomaiweng Nice work =)

Raziel Oren 的头像

Raziel Oren1 年前

@u1f383 @laomaiweng Wouldn't have happened in Rust

felco 的头像

felco1 年前

@u1f383 @laomaiweng nasty

Puppenspieler 的头像

Puppenspieler1 年前

@u1f383 @laomaiweng @grok what is This

prasincs ⚓️🇺🇸🇳🇵 的头像

prasincs ⚓️🇺🇸🇳🇵1 年前

@u1f383 @laomaiweng Wow and solid reference back to Eternal Blue

Daniel || KGeN 的头像

Daniel || KGeN1 年前

@u1f383 @laomaiweng Awesome 👍

Keizen 的头像

Keizen1 年前

@u1f383 @laomaiweng Awesome 👏

Lenny Waters 的头像

Lenny Waters1 年前

@u1f383 @laomaiweng Wow, thank you, bro.

相关视频

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough? As you might have guessed, the answer is not so much. We chained six unique CVEs from 2023 listed below. • Chrome Renderer RCE : CVE-2023-3079 • Chrome Sandbox Escape : CVE-2023-21674 • LPE in guest OS : CVE-2023-29360 • VMware Info Leak : CVE-2023-34044 • VMware Escape : CVE-2023-20869 • LPE in host OS : CVE-2023-36802

Theori

139,901 次观看 • 2 年前

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

“We’re here2talk Israeli Apartheid; constant home demolitions/raids; to say fuck police brutality from DC to Palestine cross-training w/same forces; & to say #FreePalestine every day for the rest of our lives!” DC after Jenin massacre, 30 killed in Jan 2023 & no one said “boo”.

#StopCopCity

58,431 次观看 • 3 年前

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

The room was packed, the Rancho Spirit was flowing, the cheers were loud & the tears were pouring down with happiness & pride as RCHS alumni CJ Stroud was draft #2 overall in the 2023 NFL draft to the Houston Texans! Look at the turn out of support from the Rancho Family for CJ!

Principal Aikens

15,814 次观看 • 3 年前

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

“I created a trading space for me & my boys, I remember 2022, 2023 & 2024 when I used to take people from the street & teach them how to make money, but as at 2025 I stopped cuz most of these boys are not appreciative” —-Habby Forex 🗣️

D3VID 🐢

310,061 次观看 • 3 个月前

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

We are 93 days away from Alabama Football! Here’s Eddie Jackson taking this interception to the house for 93 yards against A&M in 2015

Cruz Oxenreider

14,075 次观看 • 1 年前

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

This year we saw sivaangi from singer to actor, and a complete entertainer 🤗 Wish you the best 2023 with more songs & all your projects ❤️ Have a tremendous 2023 ✨ #Sivaangi Sivaangi Krishnakumar IG 🔗 for full wrapup video :

Sivaangi Krish FP

112,182 次观看 • 3 年前

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

just spoke at [un]prompted. Dan Guido talked about shipping 200 bugs/week/engineer. nicholas carlini talked about LLMs finding 0-days in production code. i talked about how a 3-integer baseline was embarrassingly hard to beat on 125K kernel commits, and what that means for actually building systems that work. clip from the Q&A below ↓ the 125K commit dataset behind the talk: → bugs that hide for years: → who actually writes them:

Jenny Qu

15,165 次观看 • 6 个月前

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Here’s a clip from when Gavin Newsom used prison inmates at San Quentin as podcast & campaign props. They were clearly told/bribed to say how much they love his prison & beg him to run for president. Watch 👇 Full link in the comments.

Houman David Hemmati, MD, PhD

21,431 次观看 • 7 个月前

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

This clip is from #23rdMarch 2022. I witnessed a thunderous & standing ovation for Prime Minister Imran Khan at the parade ground. The kind of pride people had in their PM was so apparent. The loudest cheers were from our Jawans. Praying for these times to come back! #PakistanDay

Jibran Ilyas

75,756 次观看 • 2 年前

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

🏆Congratulations to Shafina Vohra from the UK, a Top 10 finalist for the #GlobalTeacherPrize 2023 in partnership with UNESCO 🏛️ #Education #Sciences #Culture 🇺🇳 & Dubai Cares ⭐Shafina developed a unique curriculum using LEGO to engage students & enhance cognitive abilities. ✨Keep inspiring, Shafina!

Varkey Foundation

16,286 次观看 • 2 年前

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

To Central Bureau of Investigation (India) The 1st looting of arms was started at #Churachandpur in #Manipur on 3rd May 2023 by volunteers of #ITLF & #Kuki_Zo thugs from a #GunShop owned by a #Meetei Shri N Ibomcha. The video footage is presented here for everyone to judge. A case is filed at MHRC.

Kangleipak Information Bureau

21,769 次观看 • 2 年前

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

A special thank you from @landonorris and @oscarpiastri to our fans in Taiwan! 🧡 Watch them discuss the 2023 season and get excited for the OKX Web3 & McLaren Race Lounge event! Don't miss out! 👉

OKX

94,230 次观看 • 2 年前

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

Today, I crashed my TV (zero click) with Claude code, and heres's how: Knowing it runs linux, I asked Claude think about common vulnerabilities that a basic linux box from 2014 would be susceptible to, given it's only exposed to the local network. We tested a few out (such as heartbleed) and eventually found CVE-2012-5958, a bug in libupnp, a c lib in almost every smart tv from that era. We send a single network packet with one field a few bytes too long, overflowing a stack buffer and crashing the TV. Up next - firmware decompilation, figuring out exactly what the hell these tv manufacturers can see from you with their shady ad programs. Vizio got sued by the FTC in 2017 for secretly tracking everything you watched and selling it to advertisers!

aizk ✡️

244,001 次观看 • 4 个月前

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Get ready for a fantastic festive treat at #DerbyTheatre! 🎁 Our talented cast & creative team are bringing #Cinderella to life with original live music & captivating acting. Join the festivities from 24 Nov - 31 Dec, 2023 📆 🎟 - 🎥 - Grant Archer

Derby Theatre

18,763 次观看 • 2 年前

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

Whenever Schaffrillas would talk about Cars he’d only say that the movie is bad cuz it’s not funny & “there’s no purpose to these characters being sentient cars” I rewatched UnluckyTugs vid on Cars for the anniversary & he does a good job arguing against this dumb view point

JackoBee🐝

300,769 次观看 • 22 天前

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

Parents: Looking for ideas on how to keep your child learning throughout the summer? 📚☀️ Check out these tips from 2023 National Teacher Hall of Fame Inductee Kristen Record, who encourages learning through play & real-life experiences. #TipTuesday #SummerLearning

U.S. Department of Education

11,952 次观看 • 3 年前