Alexandre Borges<p>Pwning Solana for Fun and Profit - Exploiting a Subtle Rust Bug for Validator RCE and Money-Printing:</p><p><a href="https://anatomi.st/blog/2025_06_27_pwning_solana_for_fun_and_profit" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">anatomi.st/blog/2025_06_27_pwn</span><span class="invisible">ing_solana_for_fun_and_profit</span></a></p><p><a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://infosec.exchange/tags/exploiting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>exploiting</span></a> <a href="https://infosec.exchange/tags/exploitation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>exploitation</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/informationsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>informationsecurity</span></a> <a href="https://infosec.exchange/tags/rce" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>rce</span></a> <a href="https://infosec.exchange/tags/web3" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>web3</span></a> <a href="https://infosec.exchange/tags/rust" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>rust</span></a></p>
Administered by:
#exploiting
0 posts0 participants0 posts today
Jury orders #NSO to pay $167 million for hacking #WhatsApp users
The verdict is a major victory for opponents of #exploit sellers.
A jury has awarded WhatsApp $167 million in punitive damages in a case the company brought against Israel-based #NSOGroup for #exploiting a software #vulnerability that hijacked the #phones of thousands of users.
https://arstechnica.com/security/2025/05/jury-orders-nso-to-pay-167-million-for-hacking-whatsapp-users/
Ars Technica · Jury orders NSO to pay $167 million for hacking WhatsApp users
The citizens of Springfield Illinois told Kristi Noem to get the F out of their town and they don’t want her there! Secretary of Homeland Security Kristi Noem is #exploiting the unaliving of Emma Schaefer for her political agenda in Springfield Illinois! 
1st #Amendment … this is how you do it.
IF YOU THINK #TECHNOLOGY SHOULD BE USED MORE RESPONSIBLY, NOT FOR #TAPPING #PRIVACY or #SURVEILLANCE......and should be used to improve quality of all lives and make #cool #toys 4everyone instead of making bombs and #exploiting instead of sharing....
#Corruption, #graft, illegal #commerce w #enemy powers - #musk is all about adding more #billions to his fortune by #exploiting his illegal role in destruction of federal government while at the same time profiting from international investments funneling who knows how much into his businesses. #Chinese investors privately take stakes in Musk’s companies. #Asset managers have been promoting tech mogul’s ties to #Trump to lure #capital to #xAI, #Neuralink and #SpaceX https://www.ft.com/content/66857e1e-a217-4ddd-8332-d9f0f75aa459?accessToken=zwAAAZYbp22xkc9mhX4eohdN3dODMtnw91qkWQE.MEQCIDfgx1CbdgLb2pqFh-9VR1VRX-awTUOx7gda2fNoLYyGAiB4CTS3xIYSCYJzeM_XEuEcg-I0ZAa_12l57mRQQuuJmA&segmentId=66857e1e-a217-4ddd-8332-d9f0f75aa459
Financial Times · Chinese investors privately take stakes in Elon Musk’s companies
radare 
Ready for the Advent of Radare?
--> https://radare.org/advent #aor24
Starting tomorrow, December 1st we will release every day a new article with general knowledge, tricks, scripts and challenges to solve with radare2 covering topics from #reverseengineering #forensics #firmwareanalysis #debugging #exploiting #binaryanalysis #lowlevel #assembly
Replied in thread
@alterelefant exactly that is the idea...
#Exploiting the #Precarat of #WorkingPoor and outsorcing the #PTSD with them...
https://infosec.space/@kkarhan/113172409216324259
- One doesn't need #slavery or #ForcedLabour in the books if declining a job results in one being #penalized with #poverty, #homelessness, #starvation and #death by lack of income.
I mean, we all know that these jobs are literally only taken by #marginalized folks that can't get a job that pays #MinimumWage or better - more often than not have to do #CareWork...
Infosec.SpaceKevin Karhan :verified: (@kkarhan@infosec.space)Because #subcontracting and #externalizing #Moderation of #AntisocialMedia like #NSAbook / #StasiBook / #Facebook solely serves as a means to prevent people from successfully suing for #MentalHealthCare coverage due to the #HostileWorkEnvoirment and #ContentModerator job that induces #PTSD in many people...
Espechally with literal & grossly indecent and gratuitious displays of #violence, #torture and #murder on display...
https://www.youtube.com/watch?v=VPSZFUiElls&t=2416s
CVE-2024-38063 - Remotely #Exploiting The Kernel Via #IPv6
https://malwaretech.com/2024/08/exploiting-CVE-2024-38063.html
malwaretech.com · Exploiting the Windows Kernel via Malicious IPv6 Packets (CVE-2024-38063) – MalwareTechPerforming a root cause analysis and building proof-of-concept for the recent August 2024 CVSS 9.0 TCP/IP RCE vulnerability
Continued thread
The #Twisted #Logic #Behind #Trump’s #Racist #Attacks on #KamalaHarris’s #Blackness.
He is simultaneously arguing that the #vicepresident is not #BlackEnough and at the same time trying to #claim that she’s #exploiting her #race.
https://newrepublic.com/article/184724/trump-attacks-kamala-harris-blackness-twisted-logic
The New Republic · The Twisted Logic Behind Trump’s Attacks on Kamala Harris’s Blackness He is simultaneously arguing that the vice president is not Black enough and that she’s exploiting her race.
#FarRight #Extremists in #Colorado Attack #Olympian as Part of #Genocidal #Campaign #Targeting #Trans #People.
#Conservative #Activists opposed to trans #Inclusion in #Sports and #CivicLife are #Exploiting the #Controversy, despite the #Athletes not being #Transgender.
#Women #Transgender #LGBTQ #LGBTQIA #Colorado #Conservatives #Extremism #Fascism #Religion #RepublicanParty #Hate #Bigotry #Violence #Genocide #Discrimination #Transphobia #ThePartyOfHate #EmptyThePews
Colorado Times RecorderConservatives Attack Olympian as Part of Anti-Transgender CrusadeConservative anti-transgender activists in Colorado are using recent Olympic controversies to promote their political agenda and ballot initiatives, despite the fact that the athletes involved are not transgender. Algerian boxer...
CVE-2024-29510 – #Exploiting #Ghostscript using format strings 
https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/
Codean Labs · CVE-2024-29510 - Exploiting Ghostscript using format strings — Codean LabsA format string vulnerability in Ghostscript ≤ 10.03.0 which enables attackers to gain Remote Code Execution (#RCE) while also bypassing sandbox protections. CVE-2024-29510 has significant impact on web-applications and other services offering document conversion and preview functionalities as these often use Ghostscript under the hood. We recommend verifying whether your solution (indirectly) makes use of Ghostscript and if so, update it to the latest version!
#Iconv, set the charset to #RCE: #Exploiting the #glibc to #hack the #PHP engine
AmbionicsIconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)A few months ago, I stumbled upon a 24 years old buffer overflow in the glibc, the base library for linux programs. Despite being reachable in multiple well-known libraries or executables, it proved rarely exploitable — while it didn't provide much leeway, it required hard-to-achieve preconditions. Looking for targets lead mainly to disappointment. On PHP however, the bug shone, and proved useful in exploiting its engine in two different ways.
Post- #Exploiting an #F5 Big-IP: root, and now what?
https://offsec.almond.consulting/post-exploiting-f5-BIG-IP.html
Deep diving into F5 Secure Vault
https://offsec.almond.consulting/deep-diving-f5-secure-vault.html
offsec.almond.consultingPost-Exploiting an F5 Big-IP: root, and now what? - Almond Offensive Security Blog
#Exploiting the #NT #Kernel in 24H2: New Bugs in Old Code & Side Channels Against #KASLR
exploits.forsale
Exploiting the NT Kernel in 24H2: New Bugs in Old Code & Side Channels Against KASLR
Continued thread
#Trump claimed today at his speech in front of #law enforcement officers in #Michigan that he called the family of #RubyGarcia, who was killed by a friend of hers who was a *migrant*. Trump claimed he spoke to several of her family members….
Ruby Garcia's sister Mavi Garcia told WOOD TV8 that neither Trump nor any member of his campaign have contacted her or any of her family members, & was upset that Trump was #exploiting migrants.
The Australia, US, France, England, Canada coalition is bombing Yemen, while South Africa takes Israel to the international court of Justice on genocide charges. Not a single western country has supported their claim. All the signatures are from the global south (conceptually).
This is about #colonial legacy and the mindset of #settler societies used to #exploiting the planet and its humans, extracting labor, land and resources as if its their backyard, without repurcussions or consequences.
They’ve begun: Attacks exploiting vulnerability with maximum 10 severity rating
Will attacks be as big as those targeting MOVEit? Maybe not, but they still can be plenty bad.
https://arstechnica.com/security/2023/10/active-attacks-exploiting-ws_ftp-pose-a-grave-threat-to-the-internet/ #Ransomware #hackers #exploiting #fixed #vulnerabilities #enterprise #networks #WS_FTPServer
Ars Technica · They’ve begun: Attacks exploiting vulnerability with maximum 10 severity ratingWill attacks be as big as those targeting MOVEit? Maybe not, but they still can be plenty bad.