| GitHub | https://github.com/wvu |
New whitepaper and exploit code from @stephenfewer on 5 new vulnerabilities he chained to achieve unauthenticated RCE on Lorex 2K Indoor Wi-Fi security cameras. The exploit works in two phases and comprises an auth bypass, a stack-based buffer overflow, an out-of-bounds heap read, and a null pointer dereference — and that's just to start (because it was, like, Tuesday for Stephen or whatever) 📈
Rapid7's vulnerability and exploit research team does industry-leading attack research that prioritizes and uncovers risk for organizations worldwide. We’re looking for an experienced vulnerability researcher to contribute to overall research team goals, helping defenders get ahead of the curve on emergent threats and keeping Rapid7 top of mind for industry audiences. You’ll work with a skilled group of technical and cross-team leaders who are highly collaborative and deeply embedded in the security community. About the TeamRapid7 vuln researchers find and disclose zero-day vulnerabilities, write in-depth analyses of n-day bugs, develop Metasploit modules, identify patterns in emerging and established attack surface area,...
TIL: Some surprising code execution sources in bash
https://yossarian.net/til/post/some-surprising-code-execution-sources-in-bash
👉W00t! ANOTHER open req @ GreyNoise! 👀
This one is on the team that built & will continue to innovate our next-gen global observation grid that REDACTS w/bad guys, ruins their days, & helps keep orgs + folks safe.
Hit up bob at greynoise.io if you have q's.
https://boards.greenhouse.io/greynoiseintelligence/jobs/4499845005?gh_jid=4499845005
Caitlin Condon
yossarian (1.3.6.1.4.1.55738)
hrbrmstr 🇺🇦 🇬🇱 🇨🇦
Kim Zetter
poptart
Xeno
Taggart 
