We just dropped 3 more challenges for today, we don't plan to release more for today. More to come tomorrow at 9am! #BSidesSF #CTF
Check out our Chrome Extension challenge, "moa-station", at ctf.bsidessf.net.
You are in for a punny time until launch!
Join us at ctf.bsidessf.net/register, the #BSidesSF #CTF kicks off at 4:00pm PDT tomorrow!
What's in the cards for this year? Join us next week at ctf.bsidessf.net and find out! #CTF #BSidesSF
This shitpost may be a little too niche, but it's how the scraping struggle be these days (turn video audio on).
Looks like DEF CON talks are up on YouTube! If you want to see a fun talk on crawling online markets for the spicy silicon, check mine out here: youtu.be/QgeEHdAmJDg
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
my immediate reaction to this site
