solidsnail

joined 2 years ago
sorted by: new top controversial old
1
npm search RCE? - Escape Sequence Injection (blog.solidsnail.com)
1
It’s not a Feature, It’s a Vulnerability (blog.solidsnail.com)
 

cross-posted from: https://infosec.pub/post/5707149

I talk about a report I've made to MSRC in the beginning of the year regarding vscode.

It's a bit different. There's no in depth technical stuff, because I basically just reported the feature, not a bug.

1
From Terminal Output to Arbitrary Remote Code Execution (blog.solidsnail.com)
 

cross-posted from: https://infosec.pub/post/2466014

This is my first write-up, on a vulnerability I discovered in iTerm2 (RCE). Would love to hear opinions on this. I tried to make the writing engaging.

1
From Terminal Output to Arbitrary Remote Code Execution (blog.solidsnail.com)
 

cross-posted from: https://infosec.pub/post/2466014

This is my first write-up, on a vulnerability I discovered in iTerm2 (RCE). Would love to hear opinions on this. I tried to make the writing engaging.

1
From Terminal Output to Arbitrary Remote Code Execution (blog.solidsnail.com)
 

This is my first write-up, on a vulnerability I discovered in iTerm2 (RCE). Would love to hear opinions on this. I tried to make the writing engaging.