There seems to have been a recent uptick in phishers using goo.gl URLs. Yes, even without new URLs being accepted by registering expired domains with an old reference.

1y ago·view thread

comment

The risky.biz podcast episode got pulled too: https://bsky.app/profile/patrick.risky.biz/post/3lmioqiobks2... …

1y ago·view thread

1 pts

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails(elttam.com)

1y ago·discuss

2 pts

Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com)

1y ago·1 comments

3 pts

Escaping Ruby's Gem:SafeMarshal Sandbox(nastystereo.com)

1y ago·discuss

1 pts

RubyGem's Gem:SafeMarshal buffer overrun with length larger than fit into a byte(github.com)

1y ago·discuss

1 pts

CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons(pentesterlab.com)

1y ago·discuss

1 pts

Shiny Vulnerabilities in R's Most Popular Web Framework(nastystereo.com)

1y ago·discuss

1 pts

PentesterLab: Web Hacking and Security Code Review 600 exercises and 700 videos(pentesterlab.com)

1y ago·discuss

2 pts

Cross-Site Post Requests Without a Content-Type Header – CSRF Attack(nastystereo.com)

1y ago·discuss

2 pts

Execute commands by sending JSON? Ruby deserialization vulnerabilities(github.blog)

1y ago·discuss

3 pts

JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review(pentesterlab.com)

1y ago·discuss

2 pts

Chosen-Prefix Collisions on AES-Like Hashing(eprint.iacr.org)

1y ago·discuss

comment

Once again GTFOBins[0] proving to be a valuable resource. [0] https://gtfobins.github.io/

1y ago·view thread

2 pts

Ruby 3.4 Universal RCE Deserialization Gadget Chain(nastystereo.com)

1y ago·1 comments

comment

Thanks for the feedback, fixed!

1y ago·view thread

3 pts

Ruby's String Slice is Broken(nastystereo.com)

1y ago·2 comments

68 pts

Evaluate Markdown code blocks within Vim(github.com)

1y ago·18 comments

1 pts

SQL Injection Polyglot Payloads(nastystereo.com)

1y ago·discuss