K. Reid Wightman  ðŸŒ»  
Discovered a CVSS10 directory traversal in critical infrastructure today. Send memes.
Mar 27 at 8:09pmWeb
Show threadAndrew Zonenberg2d ago
@reverseics is there a system(sprintf("/bin/command %s", ARBITRARY_USER_INPUT)) there too?
Show threadK. Reid Wightman  ðŸŒ»  2d ago
@azonenberg all kinds of crud including overwriting the firmware and writing to some peculiar named pipes. either one is bad.
Show threadT2d ago
@reverseics not quite a meme but
Show threadTodd2d ago
@reverseics ../ is all I got
Show threadHacker Memes2d ago
@reverseics
Show threadK. Reid Wightman  ðŸŒ»  1d ago
@i0null evergreen toot right there...