Profile for joern
- Display name
- joernchen
- Username
- @joern@threatactor.club
- Role
- admin
About joern
Fields
- Website
- https://0day.click
- Threema
- https://threema.id/K8J68WTX
Bio
Your mom's favorite hacker!
My other account is @joernchen
- Joined
- Posts
- 724
- Followed by
- 1139
- Following
- 264
Stats
Recent public posts
exclude boosts
`open("|command-here")` has officially been deprecated and will be released in the next version. In Ruby 4.0 it will be removed for good, closing a common attack vector for getting remote command execution via `Kenrel.open()`.
https://github.com/ruby/ruby/pull/7915#event-10053443655
https://bugs.ruby-lang.org/issues/19630#change-103966
#ruby #security
The #cccamp23 orga is still looking for 15-20x 2-person sleeping tents for artists during the event - in the best case incl. sleeping mat/sleeping bag (will also be accepted individually).
If you can spare these things temporarily, please get in touch via email with the subject "Tent-for-artists" to camp2023-orga@cccv.de and write what you can bring in which amount for how long /co
Boosting wanted @c3cert @c3auti @jugendhackt @c3assemblies @haecksen @c3loc @C3Kidspace @c3infodesk
derp
Want to help test the #CCCamp23 app for iOS and macOS? Sign up for TestFlight here: https://testflight.apple.com/join/HdrPYxM5
Remember me warning about Jean Pereira, an #infosec fraud? Well, there's a video detailing just how much he is overplaying his hand. https://youtu.be/duLJUpptSik
Muhahahah brilliant
Wissen ja die wenigsten:
Considering giving a talk titled: „I made my hobby my profession so I needed a new hobby. Now I’m cuddling grown men in pyjamas trying to choke them out or break their limbs - for fun“
Against earlier statements it looks like I'll be at the CCC Camp with my family. See you all there!
#SchreinerManja und den manischen #Radweg-Wahn der #CDU stoppen? Komm morgen an die Demo! Gemeinsam zum roten Rathaus. 14 Uhr, Eberswalder Straße.
#ADFC #ChanginCities #FridaysForFuture #DerKlimablog #Klimakatastrophe #Zukunft #Sicherheit #Gesundheit
Well, I inadvertently discovered a zero-day RCE in acme.sh and got a Chinese CA to shut down overnight: https://github.com/acmesh-official/acme.sh/issues/4659
The other shell I got was via some funky LDAP truncation issue. Check out the write up at https://0day.click/recipe/pash/
Last Christmas I popped a shell¹ on http://hg.mozilla.org
Here's the fix:
https://hg.mozilla.org/hgcustom/version-control-tools/rev/0b02dd442661b4ada84e4c6dea58ab62cb8fbaca
Can you explain the bug?
FAQ:
- This is an authenticated vuln
- I'll post a writeup in the next days
- Yes, RTFM helps ... as usual
¹) actually it was two shells
What could possibly go wrong?
![$ python -c 'import yaml;y = yaml.safe_load(open("lol.yaml"));print(y["A"])'
Aaaaah
$ ruby -ryaml -e 'x = YAML.safe_load(File.read("lol.yaml"));puts x["A"]'
LOL!
$](https://threatactor.club/fileserver/016C9XGNWH2G8F4WAXXE00JYE9/attachment/original/01F5PYQBM7RZ2B8KA51W9RHYHW.png)
Unpopular take: .zip domains were a marketing gag targeting security people.
It’s that time of the year again
We found some injection bugs in Go's html/template. That's to say stdlib-level XSS 