home.social

#attackerkb — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #attackerkb, aggregated by home.social.

fetched live
  1. hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @[email protected] ·

    R a p i d 7 is continuing their mass eshittification campaign by retiring #AttackerKB in mid-August.

    This small, MIT-licensed #golang utility — git.sr.ht/~hrbrmstr/attackerkb — will let contributors download their analyses into a jsonlines/ndjson file so you can preserve your contributions to a massively failing corporation.

    #attackerkb #golang
  2. hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @[email protected] ·

    R a p i d 7 is continuing their mass eshittification campaign by retiring #AttackerKB in mid-August.

    This small, MIT-licensed #golang utility — git.sr.ht/~hrbrmstr/attackerkb — will let contributors download their analyses into a jsonlines/ndjson file so you can preserve your contributions to a massively failing corporation.

    #attackerkb #golang
  3. Caitlin Condon @[email protected] ·

    It always makes me smile when I see a security start-up or a research team use the phrase "Not all vulnerabilities are created equal," because #AttackerKB has been using that phrase since early 2020. I doubt we were the first, but it's entertaining to see it echoed so many places these days. It's hard not to be derivative pretty much anywhere on the internet, but the volume of copycat language I'm seeing pop up generally in EASM and intelligence marketing materials is kinda disappointing. Folks in this industry are smart and creative and fully capable of creating original messaging, you know? Ah, well. attackerkb.com/about

    #attackerkb
  4. Caitlin Condon @[email protected] ·

    It always makes me smile when I see a security start-up or a research team use the phrase "Not all vulnerabilities are created equal," because #AttackerKB has been using that phrase since early 2020. I doubt we were the first, but it's entertaining to see it echoed so many places these days. It's hard not to be derivative pretty much anywhere on the internet, but the volume of copycat language I'm seeing pop up generally in EASM and intelligence marketing materials is kinda disappointing. Folks in this industry are smart and creative and fully capable of creating original messaging, you know? Ah, well. attackerkb.com/about

    #attackerkb
  5. Ron Bowes @[email protected] ·

    We try! I also try to tag #AttackerKB here when I post something, in case you want to follow that hashtag :)

    #attackerkb
  6. Ron Bowes @[email protected] ·

    We try! I also try to tag #AttackerKB here when I post something, in case you want to follow that hashtag :)

    #attackerkb
  7. Ron Bowes @[email protected] ·

    Published a detailed #AttackerKB writeup for the #Juniper J-Web vuln from a couple weeks ago - CVE-2023-36844 (and friends). It's largely based on the public #PoC from Watchtowr, but I took it a step further and showed how to break out of the BSD jail to access the OS.

    Enjoy!

    attackerkb.com/topics/1PKX0CCX

    #attackerkb #juniper #poc
  8. Ron Bowes @[email protected] ·

    Published a detailed #AttackerKB writeup for the #Juniper J-Web vuln from a couple weeks ago - CVE-2023-36844 (and friends). It's largely based on the public #PoC from Watchtowr, but I took it a step further and showed how to break out of the BSD jail to access the OS.

    Enjoy!

    attackerkb.com/topics/1PKX0CCX

    #attackerkb #juniper #poc
  9. Ron Bowes @[email protected] ·

    Posted a technical #AttackerKB #writeup of CVE-2022-47986 (CVE_2022_47986 / #CVE202247986), a #Ruby #deserialization #vulnerability in IBM's Aspera software, which runs on a humorously old version of Ruby:

    attackerkb.com/topics/jadqVo21

    #cve202247986 #attackerkb #writeup #ruby #deserialization #vulnerability
  10. Ron Bowes @[email protected] ·

    Posted a technical #AttackerKB #writeup of CVE-2022-47986 (CVE_2022_47986 / #CVE202247986), a #Ruby #deserialization #vulnerability in IBM's Aspera software, which runs on a humorously old version of Ruby:

    attackerkb.com/topics/jadqVo21

    #cve202247986 #writeup #ruby #deserialization #vulnerability #attackerkb
  11. Ron Bowes @[email protected] ·

    Wrote up a pair of #AttackerKB entries for the two vulnerabilities in #F5 #BigIP that we released today (largely the same as the blog, but more focus on technical and less on the story):

    attackerkb.com/topics/i21EbdNx

    attackerkb.com/topics/ZClTQn4a

    #attackerkb #f5 #bigip
  12. Ron Bowes @[email protected] ·

    Wrote up a pair of #AttackerKB entries for the two vulnerabilities in #F5 #BigIP that we released today (largely the same as the blog, but more focus on technical and less on the story):

    attackerkb.com/topics/i21EbdNx

    attackerkb.com/topics/ZClTQn4a

    #attackerkb #f5 #bigip