haxor.jpg
- 191.74 KB
(960x1000)
This thread is for all things Cybersecurity General topics: OPSEC, Hacking, Offensive & Defensive security, Breaches, Open Source Intelligence, MalDev, Cryptography, Red-teaming VS Blue-teaming, Reverse engineering, etc. Useful resources: • https://git.hackliberty.org/hackliberty.org/Hack-Liberty-Resources#security • https://github.com/Hack-with-Github/Awesome-Hacking Learn more: • https://picoctf.org/ • https://tryhackme.com/ • https://www.hackthebox.com/ • https://portswigger.net/web-security
>>1156 https://spywarewatchdog.neocities.org/ is supposed to be https://spyware.neocities.org/, apologies.
1744266948987649.png
- 212.22 KB
(700x500)
If anyone is interested, here's how 4chan got hacked through a file upload vulnerability: Apparently the vulnerability stemmed from certain boards allowing PDF uploads without proper file validation—the system didn't verify whether the uploaded file was a legitimate PDF. Once uploaded, the file was processed by an outdated version of Ghostscript (dating back to 2012) to generate a thumbnail. The attacker exploited this by crafting a malicious PDF containing specific PostScript commands, ultimately gaining shell access to the system.
Since we're on the subject, I've read somewhere that the guy who got in was worming inside for about a year, before nuking the site and doxing the mods. Does anyone know if this is true?
>>1181 he claimed it on sjak party. but no proof i wish he somehow got the whole DB. i want to see my bans from back in the day
>>1182 >the whole DB He said he wouldn't leak anything about the users I have seen some ban summaries be posted though?
>>1155 Really useful site for bug bounty hunters: https://lostsec.xyz/
Screenshot 2025-06-04 235256.png
- 43.99 KB
(977x217)
My goal is to finish the CPTS path and pass the exam by the end of summer
1709003713572767.jpg
- 57.80 KB
(852x712)
>>1431 Good luck
I did my first crackme.
I did it with Binary ninja, it was quite easy, I only had to modify a couple of values in assembly mode and modify some conditions. 
If anyone is interesed, you can find a lot of crackmes here: https://crackmes.one/
can anyone point to past haskell vulnerabilities? language specific, focused. (for educational purposes) I've looked their bulletin, and saw only 3rd party issues with XZ, lib supply chain attack.
