正在加载视频...
视频加载失败
⚠️ We’ve reproduced CVE-2025-49113 in Roundcube. This vulnerability allows authenticated users to execute arbitrary commands via PHP object deserialization. If you're running Roundcube — update immediately!
8 条评论
Kirill Firsov1 年前
Why it took you so long? 🤣
Zentera Systems Inc. ☁️2 年前
Traditional cybersecurity is just a speed bump for modern hackers. We help by creating special protections for your existing critical assets and data that follow NIST best practices. Learn how and get started today.
Alejandro1 年前
where is the exploit?🤔
Timur Yunusov1 年前
About 10 years late to the party, according to Kirill.
DarkShadow1 年前
Authenticated 🤕 Unauthenticated are seriously critical and helpful for hunters to test them.
Choco1 年前
@ROIS_PR
Choco1 年前
@kagoya_inc
0b1d11 年前
Incredible
![MEGA update: 🥳 IT WORKS: we now have a working dial up internet connection on a virtual Windows 3.11 computer running inside a browser over a virtual modem that talks via Websockets to a PPP daemon! So you can open open the computer, browse the web and even open the page you're on itself again at or chat inside mIRC chat app on or browse gopher:// or whatever you like to do Probably the nerdiest challenge I've ever taken on for the totally arbitrary reason that it seemed completely impossible to do this but we did it (now need to test it more so that it works with 250 parallel users at same time, but the prototype works now, so if you ask why it's not live yet) James Baicoianu, probably one of 2 people in the world who knows how to do this, helped fix my setup and created a virtual dial up internet provider for me that we can dial in to Somehow my mouse doesn't work yet, so I had to do it with the keyboard but here we run Winsock to dial up on a virtual modem that runs then emulates a virtual dial up ISP over Websockets [Next todo] - Fix the mouse - Make the 90mb emulated file smaller - See if it doesn't die with 10 or 50 parallel users - Speed up the Em-Dosbox emulator a bit so it's more usable](https://image.24vids.com/tw-1855359096444334315/ext_tw_video_thumb/1855356917952159744/pu/img/BmwDhlswjcHkQBX6.jpg)
![How do you create your payloads in 2025? At MSec Operations we prefer to use DLL sideloading for EDR evasion. This technique allows our malicious code to run within a signed, legitimate executable. Combining this technique with other useful techniques will provide stable execution to fly under the radar. 🛸 The following video demonstrates the use of #RustPack to create such a payload in just a few seconds. The command line usage shows that our input payload is a simple unmodified Apollo C2 executable. We want to clone all the exported functions from the original Windows wininet.dll to create our own library with the same name. The execution of the payload will be delayed by ~5 seconds in this case, without using the Win32 sleep function, but by performing random calculations. ⏲️ Hardware breakpoints are used to bypass the Antimalware Scan Interface (AMSI). Without an AMSI bypass, Apollo would be flagged as a C# assembly when loaded. 🎓 Our payload will only fire on a domain joined system, this basically prevents it from running in e.g. sandbox environments. 🤠 Last but not least, in this example, the encrypted payload itself is stored in a separate file on the target system and not even in the same folder as our malicious DLL. Anyone analysing just the DLL will never be able to find out what the payload is. Automatic sample submissions for cloud analysis usually only upload the executable or DLL, emulators won't see the real payload either. 🤠 Tired of creating such payloads yourself? With #RustPack it's really easy, and payloads always look completely different, even if the same payload is packed twice to avoid signature-based detection Contact us via info[at] for more information! 👍](https://image.24vids.com/tw-1881421688572952651/ext_tw_video_thumb/1881420234654953473/pu/img/J3hM_loRV7uoHe3r.jpg)
