Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Still "Lab", but working fully remotely without any hardcoded offsets, bypassing ASLR on standard Ubuntu + Nginx deployment via an LFI primitive. There's still lots of room for improvement but I'm already out of tea and who cares? Just patch.

Hamid Kashfi

10,485 subscribers

25,038 views • 2 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

And they say country's changin' And we must all adjust But I still think there's lots of room For old outlaws like us.

And they say country's changin' And we must all adjust But I still think there's lots of room For old outlaws like us.

Travis Tritt

305,130 views • 3 years ago

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.

Attacks always get better. Here's a new nginx RCE that bypasses ASLR, tested on the latest nginx 1.30 and 1.31. This still requires a non-default config, but unlike some previous bugs, it does not depend on any additional vulnerabilities or external helpers to get to RCE. We reported the bug on May 15. F5 has confirmed it, and hopefully a patch will land soon. This is getting ridiculous 😅. We have enough nginx bugs to do an entire week of MAD Bugs on it. Who could have thought nginx is starting to feel like the new Linux kernel? This is the funniest time in computer hacking. And yet the world is completely unprepared for this new reality.

thaidn

33,104 views • 2 months ago

I set this area aside while I was working on other levels but this room is almost finished now! It's still missing a little bit of polish, but that said, there's a lot of details and FX here I'm really proud of! #indiedev #GameMaker

I set this area aside while I was working on other levels but this room is almost finished now! It's still missing a little bit of polish, but that said, there's a lot of details and FX here I'm really proud of! #indiedev #GameMaker

Brandon Beau.🦇

10,889 views • 2 years ago

There's still cards available and still time to get them. I'm not everyone's cup of tea. But who cares!! Follow the link in the QR code to my private game for tomorrow's England Vs. Netherlands match and win the CASH jackpot, AND I'll come round to yours and have a cup of tea. Invite your friends whilst you're at it. You can ask me anything you want and I'll spill the tea Lionesses England Match Bingo

There's still cards available and still time to get them. I'm not everyone's cup of tea. But who cares!! Follow the link in the QR code to my private game for tomorrow's England Vs. Netherlands match and win the CASH jackpot, AND I'll come round to yours and have a cup of tea. Invite your friends whilst you're at it. You can ask me anything you want and I'll spill the tea Lionesses England Match Bingo

Katie Price

71,363 views • 1 year ago

👀Insurrection Prime + Divinity Cheese is still working as of today's Destiny 2 patch 🧑‍🌾Checkpoint is already available on most of my bots for you farmers out there 🎬Clip featuring Jobbo who is currently doing helps

👀Insurrection Prime + Divinity Cheese is still working as of today's Destiny 2 patch 🧑‍🌾Checkpoint is already available on most of my bots for you farmers out there 🎬Clip featuring Jobbo who is currently doing helps

Luckstruck9 🔜 GCX 2026🌴

241,213 views • 26 days ago

Hi all, we have been working on our Cutscene system and wanted to a preview with some WIP anims and model. Hoping this will help connect people with out characters. Lots of room for improvement but this is what we have so far! #mecha #indiegaming #IronwingValiant

Hi all, we have been working on our Cutscene system and wanted to a preview with some WIP anims and model. Hoping this will help connect people with out characters. Lots of room for improvement but this is what we have so far! #mecha #indiegaming #IronwingValiant

TigerTeam

14,789 views • 5 months ago

many people left the fandom and been trying to drag itzy down, but one thing’s for sure, there still are lots of people out there who still believe and support itzy, and this win is definitely for those people who stayed. CONGRATS ITZY! 🎉

many people left the fandom and been trying to drag itzy down, but one thing’s for sure, there still are lots of people out there who still believe and support itzy, and this win is definitely for those people who stayed. CONGRATS ITZY! 🎉

엘

45,908 views • 8 months ago

Here it is! Buying a Ronin Monke on Ronin market, using ETH from Base! I also tested Arbitrum + Ethereum and it worked. If you have a ton of tokens, it will take some time to load and you might get some error saying some tokens didn't load but you can ignore that. Still lots of room for improvement, but it works!

Here it is! Buying a Ronin Monke on Ronin market, using ETH from Base! I also tested Arbitrum + Ethereum and it worked. If you have a ton of tokens, it will take some time to load and you might get some error saying some tokens didn't load but you can ignore that. Still lots of room for improvement, but it works!

Jihoz.ron

15,832 views • 10 months ago

Wow, got a lot of new followers today. Thanks to everyone, new and old!😄 To celebrate, I want to share the new feature I'm working on: grabbing and throwing small enemies! Still kinda jank but I'm already liking how it's turning out. #indiegame #indiedev

Wow, got a lot of new followers today. Thanks to everyone, new and old!😄 To celebrate, I want to share the new feature I'm working on: grabbing and throwing small enemies! Still kinda jank but I'm already liking how it's turning out. #indiegame #indiedev

Tinto

30,370 views • 8 months ago

still in the prototype phase, but i'm blown away by how well our dmt hyperspace replication engine is already working... you just paste in your trip report, click a button, wait about 10 minutes, and at the end you have a fully animated video of your experience. 🫠

still in the prototype phase, but i'm blown away by how well our dmt hyperspace replication engine is already working... you just paste in your trip report, click a button, wait about 10 minutes, and at the end you have a fully animated video of your experience. 🫠

Josie Kins

16,121 views • 2 months ago

If you still own any Solana, there's still time to sell it before it goes to zero. I tried to save as many of you as I could – got more hate on this video than any other but I was right yet again An update video on why it has never been more over for $SOL and the rest of crypto

If you still own any Solana, there's still time to sell it before it goes to zero. I tried to save as many of you as I could – got more hate on this video than any other but I was right yet again An update video on why it has never been more over for $SOL and the rest of crypto

Brandon Hong

270,878 views • 1 year ago

I've made Gaussian Splat Coloring Book for Vision Pro. Still rough on the edges, but working in splats on AVP is super rewarding, and now I'm thinking about full blown Gaussian Splats editor instead of just a coloring book :D

I've made Gaussian Splat Coloring Book for Vision Pro. Still rough on the edges, but working in splats on AVP is super rewarding, and now I'm thinking about full blown Gaussian Splats editor instead of just a coloring book :D

Adam Roszyk

46,384 views • 9 months ago

Q: The rumours are starting to spread. Is everything clear? Is everything okay for you for next year? "Yep, I'm still in contract so everything is 100% clear to me. I'm still focused, I'm still motivated, I still love what I do with all my heart. I'm going to be here for quite some time so get used to it. There's a lot of people that are trying to retire me and that's not even on my thoughts. I'm already thinking of what will be next and planning for the next five years. But yeah, I still plan to be here for some time." F1 2026 || Canada || Lewis Hamilton

Q: The rumours are starting to spread. Is everything clear? Is everything okay for you for next year? "Yep, I'm still in contract so everything is 100% clear to me. I'm still focused, I'm still motivated, I still love what I do with all my heart. I'm going to be here for quite some time so get used to it. There's a lot of people that are trying to retire me and that's not even on my thoughts. I'm already thinking of what will be next and planning for the next five years. But yeah, I still plan to be here for some time." F1 2026 || Canada || Lewis Hamilton

sim 🇧🇷🇲🇽🇸🇳🇫🇷🇭🇹

233,518 views • 1 month ago

BREAKING: We just received an abundance of evidence from the Scottie Scheffler arrest last month: videos and photos. I'm still working through most of it -- but in this clip you can hear Scottie's fear as he gets arrested, and Gillis' explanation of what happened. WAVE

BREAKING: We just received an abundance of evidence from the Scottie Scheffler arrest last month: videos and photos. I'm still working through most of it -- but in this clip you can hear Scottie's fear as he gets arrested, and Gillis' explanation of what happened. WAVE

Ward Jolles

4,582,703 views • 2 years ago

10 years later, I'm still working on Gaffer thanks to the support of the #b3d community :) Version 3.2 just went out, here's what's new... 🧵(1/7) PS: There's an unlimited free trial so you can basically use it for free - or buy it to support another 10 years of development :)

10 years later, I'm still working on Gaffer thanks to the support of the #b3d community :) Version 3.2 just went out, here's what's new... 🧵(1/7) PS: There's an unlimited free trial so you can basically use it for free - or buy it to support another 10 years of development :)

Greg Zaal

28,135 views • 2 years ago

JUST IN – Fauci Now Says A Lab Leak Could Still Be Considered As Coming From Natural Origins "A lab leak could be that someone was out in the wild maybe looking for different types of viruses in bats, got infected, went into a lab, and was being studied in a lab, and then came out of the lab. But if that's the definition of lab leak, then that's still a natural occurrence. The other possibility is someone takes a virus from the environment that doesn't actually spread very well in humans, and manipulates it a bit, and accidentally it escapes or accidentally infects someone and then you get an outbreak."

JUST IN – Fauci Now Says A Lab Leak Could Still Be Considered As Coming From Natural Origins "A lab leak could be that someone was out in the wild maybe looking for different types of viruses in bats, got infected, went into a lab, and was being studied in a lab, and then came out of the lab. But if that's the definition of lab leak, then that's still a natural occurrence. The other possibility is someone takes a virus from the environment that doesn't actually spread very well in humans, and manipulates it a bit, and accidentally it escapes or accidentally infects someone and then you get an outbreak."

Chief Nerd

4,410,104 views • 3 years ago

I've been working on a little Adam / Hazbin Hotel animatic in my spare time. It's still looking very rough as I'm just mapping out my vision (the polish comes later), but I'm having an absolute blast with the concept. Here's a little snippet for you all! :]

I've been working on a little Adam / Hazbin Hotel animatic in my spare time. It's still looking very rough as I'm just mapping out my vision (the polish comes later), but I'm having an absolute blast with the concept. Here's a little snippet for you all! :]

aGoobear ⭐ COMMISSIONS OPEN ⭐

10,303 views • 8 months ago

I've found out that there's a port of Zelda Link's Awakening for PC and I'm amazed with it. This version not only offers widescreen support, but the game now runs at a single screen without any transitions and you can zoom out to see more of the overworld.

I've found out that there's a port of Zelda Link's Awakening for PC and I'm amazed with it. This version not only offers widescreen support, but the game now runs at a single screen without any transitions and you can zoom out to see more of the overworld.

Vinícius Medeiros

1,551,383 views • 2 years ago

The Biden FBI’s collection of congressional phone records is an outrageous violation of the separation of powers. But there is still much we don’t know. Who approved it? Who knew what — and when did they know it? Working with Chairman Chuck Grassley and other senators, I intend to find out.

The Biden FBI’s collection of congressional phone records is an outrageous violation of the separation of powers. But there is still much we don’t know. Who approved it? Who knew what — and when did they know it? Working with Chairman Chuck Grassley and other senators, I intend to find out.

Senator Ron Johnson

54,996 views • 9 months ago