Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Still "Lab", but working fully remotely without any hardcoded offsets, bypassing ASLR on standard Ubuntu + Nginx deployment via an LFI primitive. There's still lots of room for improvement but I'm already out of tea and who cares? Just patch.

hkashfi's profile picture

Hamid Kashfi

10,485 subscribers

25,038 Aufrufe • vor 1 Monat •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

And they say country's changin' And we must all adjust But I still think there's lots of room For old outlaws like us.
1:20

And they say country's changin' And we must all adjust But I still think there's lots of room For old outlaws like us.

Travis Tritt

305,130 Aufrufe • vor 3 Jahren

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.
0:30

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.

thaidn

33,104 Aufrufe • vor 1 Monat

I set this area aside while I was working on other levels but this room is almost finished now! It's still missing a little bit of polish, but that said, there's a lot of details and FX here I'm really proud of! #indiedev #GameMaker
0:56

I set this area aside while I was working on other levels but this room is almost finished now! It's still missing a little bit of polish, but that said, there's a lot of details and FX here I'm really proud of! #indiedev #GameMaker

Brandon Beau.🦇

10,889 Aufrufe • vor 2 Jahren

There's still cards available and still time to get them. I'm not everyone's cup of tea. But who cares!! Follow the link in the QR code to my private game for tomorrow's England Vs. Netherlands match and win the CASH jackpot, AND I'll come round to yours and have a cup of tea. Invite your friends whilst you're at it. You can ask me anything you want and I'll spill the tea Lionesses England Match Bingo
1:55

There's still cards available and still time to get them. I'm not everyone's cup of tea. But who cares!! Follow the link in the QR code to my private game for tomorrow's England Vs. Netherlands match and win the CASH jackpot, AND I'll come round to yours and have a cup of tea. Invite your friends whilst you're at it. You can ask me anything you want and I'll spill the tea Lionesses England Match Bingo

Katie Price

71,363 Aufrufe • vor 1 Jahr

Working on remaking the tea oasis for ver. 2 (still a work-in-progress) This time it's fully 3D instead of just parallax #pixelart #gamedev #GameMaker
0:20

Working on remaking the tea oasis for ver. 2 (still a work-in-progress) This time it's fully 3D instead of just parallax #pixelart #gamedev #GameMaker

Brandon Beau.🦇

11,441 Aufrufe • vor 2 Jahren

Now running with buttery smooth 3800 fps. Still lot's of room for improvement, but I think I'll leave it at that.
0:55

Now running with buttery smooth 3800 fps. Still lot's of room for improvement, but I think I'll leave it at that.

Dominic Szablewski

66,889 Aufrufe • vor 2 Jahren

👀Insurrection Prime + Divinity Cheese is still working as of today's Destiny 2 patch 🧑‍🌾Checkpoint is already available on most of my bots for you farmers out there 🎬Clip featuring Jobbo who is currently doing helps
0:43

👀Insurrection Prime + Divinity Cheese is still working as of today's Destiny 2 patch 🧑‍🌾Checkpoint is already available on most of my bots for you farmers out there 🎬Clip featuring Jobbo who is currently doing helps

Luckstruck9 🔜 GCX 2026🌴

240,663 Aufrufe • vor 14 Tagen

Hi all, we have been working on our Cutscene system and wanted to a preview with some WIP anims and model. Hoping this will help connect people with out characters. Lots of room for improvement but this is what we have so far! #mecha #indiegaming #IronwingValiant
0:30

Hi all, we have been working on our Cutscene system and wanted to a preview with some WIP anims and model. Hoping this will help connect people with out characters. Lots of room for improvement but this is what we have so far! #mecha #indiegaming #IronwingValiant

TigerTeam

14,789 Aufrufe • vor 4 Monaten

many people left the fandom and been trying to drag itzy down, but one thing’s for sure, there still are lots of people out there who still believe and support itzy, and this win is definitely for those people who stayed. CONGRATS ITZY! 🎉
0:58

many people left the fandom and been trying to drag itzy down, but one thing’s for sure, there still are lots of people out there who still believe and support itzy, and this win is definitely for those people who stayed. CONGRATS ITZY! 🎉

엘

45,908 Aufrufe • vor 7 Monaten

"We can be more ruthless!" A solid performance from Aston Villa but there's still room for improvement for Victor Lindelöf... 🎙️ Olivia Buzaglo 📺 TNT Sports & discovery+ UK
1:58

"We can be more ruthless!" A solid performance from Aston Villa but there's still room for improvement for Victor Lindelöf... 🎙️ Olivia Buzaglo 📺 TNT Sports & discovery+ UK

Football on TNT Sports

34,315 Aufrufe • vor 7 Monaten

Physically I'm 30 and working a 9-5, but mentally I'm still here
0:45

Physically I'm 30 and working a 9-5, but mentally I'm still here

‏ً

728,048 Aufrufe • vor 4 Monaten

To those who think I can’t criticize Israel: I do—regularly. Not out of hatred, but out of hope. There’s plenty of room for improvement, and even more potential. #israel #bengurionairport #israelmfa #sharrenhaskel
1:27

To those who think I can’t criticize Israel: I do—regularly. Not out of hatred, but out of hope. There’s plenty of room for improvement, and even more potential. #israel #bengurionairport #israelmfa #sharrenhaskel

Rawan Osman روان عثمان

24,457 Aufrufe • vor 1 Jahr

there's a new Wes Anderson movie out this week, but I'm still waiting for The Midnight Coterie of Sinister Intruders starring Edward Norton as Owen Wilson
2:31

there's a new Wes Anderson movie out this week, but I'm still waiting for The Midnight Coterie of Sinister Intruders starring Edward Norton as Owen Wilson

Parody/Spoof/Satire Clips

52,105 Aufrufe • vor 1 Jahr

Here it is! Buying a Ronin Monke on Ronin market, using ETH from Base! I also tested Arbitrum + Ethereum and it worked. If you have a ton of tokens, it will take some time to load and you might get some error saying some tokens didn't load but you can ignore that. Still lots of room for improvement, but it works!
1:15

Here it is! Buying a Ronin Monke on Ronin market, using ETH from Base! I also tested Arbitrum + Ethereum and it worked. If you have a ton of tokens, it will take some time to load and you might get some error saying some tokens didn't load but you can ignore that. Still lots of room for improvement, but it works!

Jihoz.ron

15,832 Aufrufe • vor 10 Monaten

Not the result we wanted today but lots still to play for and lots of highlights already from 25/26. 👊 Our Goal of the Season vote is now open until 10am tomorrow. 🗳️👇
4:52

Not the result we wanted today but lots still to play for and lots of highlights already from 25/26. 👊 Our Goal of the Season vote is now open until 10am tomorrow. 🗳️👇

Brighton & Hove Albion

40,986 Aufrufe • vor 1 Monat

Wow, got a lot of new followers today. Thanks to everyone, new and old!😄 To celebrate, I want to share the new feature I'm working on: grabbing and throwing small enemies! Still kinda jank but I'm already liking how it's turning out. #indiegame #indiedev
0:22

Wow, got a lot of new followers today. Thanks to everyone, new and old!😄 To celebrate, I want to share the new feature I'm working on: grabbing and throwing small enemies! Still kinda jank but I'm already liking how it's turning out. #indiegame #indiedev

Tinto

30,370 Aufrufe • vor 7 Monaten

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:
0:36

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:

Het Mehta

152,372 Aufrufe • vor 1 Monat

Jonathan Tah on winning the cup, Harry Kane, working with Vincent Kompany and still having room for improvement 🎙️ Archie Rhind-Tutt, Thomas Hitzlsperger
2:05

Jonathan Tah on winning the cup, Harry Kane, working with Vincent Kompany and still having room for improvement 🎙️ Archie Rhind-Tutt, Thomas Hitzlsperger

Bayern & Germany

37,455 Aufrufe • vor 1 Monat