Profile for joern
- Display name
- joernchen
- Username
- @joern@threatactor.club
- Role
- admin
About joern
Fields
- Website
- https://0day.click
- Threema
- https://threema.id/K8J68WTX
Bio
Your mom's favorite hacker!
My other account is @joernchen
- Joined
- Posts
- 724
- Followed by
- 1139
- Following
- 264
Stats
Recent public posts
exclude boosts
The S in interoperability (https://frederikbraun.de/the-s-in-interoperability.html): A blog post about standards, their proliferation and the issues that arive over time.
https://github.com/v-p-b/von-neumann
Special thanks to @buherator, best sticker I had in a while. 😍😍😍
https://badhost.org it's really bad. :P
I miss shitposting :(
🚨 CVE-2026-48710 ("BadHost"): one character in a Host header bypasses path-based auth across most of the internet's Python AI stack.
In Starlette → FastAPI → vLLM, LiteLLM, TGI, MCP servers, agent harnesses. Found by X41 during a vLLM audit.
Patch shipped after 4 months quietly as CVSS 6.5 scoped as a "web framework problem"; but discoverers say critical.
Fix: Starlette 1.0.1.
Scanner: https://badhost.org
Semgrep+CodeQL: https://github.com/x41sec/poc/tree/master/starlette-host-header
Hat Tip: @marver
Phrack wants your art!
The theme for this issue is retro sci-fi / old-school cybernetic futures.
CRT glow, vector grids, space paranoia, BBS aesthetics, analog cyberpunk, forgotten futures. But we accept all kinds of contributions :)
ANSI, illustration, collage, renders, weird experiments.
Send it to: arts@phrack.org
Deadline June 30th
LLM confessions
I had a major oversight. I wrongly assumed the test program ran and that I saw its output. I now realize I only created the file and never compiled or executed it. This caused me to hallucinate the output and led me down the wrong path.
The test was not executed! I need to re-evaluate based on this new understanding, and re-examine my program output. I will now run and evaluate it.
In my day job I work for an Australian IT company.
I come from a LAN down under.
Aloha! I expect this account to be rather low-traffic.
Patch Starlette now! If you're run it via uvicorn or other common ASGI servers then a host header parsing issue can lead to vulnerabilities leading from auth bypass up until RCE! Examples for affected packages are liteLLM, vllm, etc... Here is the X41 Advisory:
Bling bling ;D
They: "On a scale from 1 to 10: How lazy are you?"
Me: Using the copy fail exploit instead of sudo to avoid having to type my password
You use Claude Code to find vulnerabilities, I find vulnerabilities in Claude Code.
https://greptalks.ai/ is fun, also https://greptalks.ai/rate-my-talk/ for letting it rate your own presentations.
Infosec community right now…
Find a vuln? Your disclosure options:
1. Exploit it! Plant ransomware, steal cryptocurrency
2. Sell it to a broker. Add "journalist hacked" to the muted words list. Ignorance is bliss
3. Sell to your country's military. Patriotic.
4. Tell people who are affected by disclosing it
Maybe AI is what was needed to make Linus‘s Law ("Given enough eyeballs, all bugs are shallow") become effective since now there are enough(?) AI assisted eyeballs.
@joern CVSS? Not even once.