TechSploits

385 readers
6 users here now

All things relating to breaking tech, tech breaking, OSS, or hacking together software to perform something completely out of the ordinary, on purpose or by accident.

founded 1 year ago
MODERATORS
[email protected]
listing: all - local
1
39
Redbox HDDs are finding their way into the hands on individuals and they were not cleaned! (digipres.club)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when

2
14
Two never-before-seen tools, from same group, infect air-gapped devices (arstechnica.com)
submitted 1 month ago by [email protected] to c/[email protected]
2 comments fedilink
3
10
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies (gist.github.com)
submitted 1 month ago by [email protected] to c/[email protected]
0 comments fedilink
4
12
gaining access to anyones browser without them even visiting a website - eva's site (kibty.town)
submitted 1 month ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

What a good browser...

5
5
4 exploits, 1 bug: exploiting CVE-2024-20017 4 different ways (blog.coffinsec.com)
submitted 1 month ago by [email protected] to c/[email protected]
0 comments fedilink
6
4
latchset/clevis: Automated Encryption Framework (github.com)
submitted 2 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

to be paired with tang

7
3
broadcast-box: A broadcast, in a box. (github.com)
submitted 2 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

Not so much a sploit but an easy way to do broadcasting!

8
12
Hacking a Virtual Power Plant (rya.nc)
submitted 3 months ago by [email protected] to c/[email protected]
0 comments fedilink
9
14
Tony Hawk's Pro Strcpy (icode4.coffee)
submitted 3 months ago by [email protected] to c/[email protected]
0 comments fedilink
10
12
[PDF] Cloudstrike Channel File 291 Incident Root Cause Analysis 08.06.2024 (www.crowdstrike.com)
submitted 3 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

the "official" incident root cause analysis

11
31
Secure Boot is completely broken on 200+ models from 5 big device makers (arstechnica.com)
submitted 3 months ago by [email protected] to c/[email protected]
3 comments fedilink
 
 

An article from July, but I bet you haven't updated your bios! Or you left it open on purpose?

12
5
Counting Bytes Faster Than You’d Think Possible (blog.mattstuchlik.com)
submitted 3 months ago by [email protected] to c/[email protected]
0 comments fedilink
13
15
A Deep Dive into TPM-based BitLocker Drive Encryption – Sec Team Blog (blog.scrt.ch)
submitted 3 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

A really good article on how TPMs work

14
22
Technical Details on July 19, 2024 Outage | CrowdStrike (www.crowdstrike.com)
submitted 3 months ago by [email protected] to c/[email protected]
3 comments fedilink
 
 

The update that broke half of all enterprise servers. One of the official remediation steps is to "Reboot as many as 15 times"

Read more: https://community.intel.com/t5/Intel-vPro-Platform/Remediate-CrowdStrike-Falcon-update-issue-on-Windows-systems/m-p/1616593/thread-id/11795

15
13
regreSSHion: CVE-2024-6387 (www.qualys.com)
submitted 4 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

Update your openssh, now

16
15
Hacking Millions of Modems (and Investigating Who Hacked My Modem) (samcurry.net)
submitted 5 months ago by [email protected] to c/[email protected]
3 comments fedilink
 
 

Unbelievable...

17
14
Writing a Unix clone in about a month (drewdevault.com)
submitted 5 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

Drew always has a hot take about a problem

18
47
Upgrade your home defense (media.infosec.exchange)
submitted 6 months ago by [email protected] to c/[email protected]
2 comments fedilink
 
 

@[email protected] 🥳

19
10
I made a new backplane for my Terramaster F2-221 NAS | codedbearder (codedbearder.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
20
9
Brane Dump: How I Tripped Over the Debian Weak Keys Vulnerability (www.hezmatt.org)
submitted 7 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 

Recent HN Thread: https://news.ycombinator.com/item?id=39976225

21
46
The xz sshd backdoor rabbithole goes quite a bit deeper (threadreaderapp.com)
submitted 7 months ago by [email protected] to c/[email protected]
3 comments fedilink
 
 

The PoC thickens

22
20
An IRC client in your motherboard (axleos.com)
submitted 7 months ago by [email protected] to c/[email protected]
4 comments fedilink
 
 

UEFI IRC, the perfect companion to asking why your Linux boot partition no longer exists #joke

23
6
xzbot: Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094) (github.com)
submitted 7 months ago by [email protected] to c/[email protected]
0 comments fedilink
24
6
Hosting a public website on MS-DOS (fsturmat.net)
submitted 7 months ago by [email protected] to c/[email protected]
0 comments fedilink
25
6
Network tunneling with… QEMU? (securelist.com)
submitted 8 months ago by [email protected] to c/[email protected]
0 comments fedilink
view more: next ›