Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Anonymous GitHub account mass-dropping undisclosed 0-days

github.com

Post reply on HN
Print view View original

211–220 of 407 posts

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#211

Post by pverheggen »

andrepd wrote: post #62
Retr0id wrote: post #17

I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. This is not a surprise. The second, idk, I'm not familiar with TraceRMI (but it's probably worth noting that "RMI"…

> Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. > but it's probably worth noting that "RMI" stands for Remote Method Invocation This reminds me of someone submitting a (clearly vibecoded) vulnerability report claiming to have found a way to execute arbitrary SQL. The project in question? An SQL server... https://github.com/tursodatabase/turso/pull/4322

lol, that's great...the "vulnerability" isn't even in turso itself, it's a helper method inside a unit test.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#212

Post by d-cc »

jeffbee wrote: post #152
dvt wrote: post #117

Went over a few of these with a pretty keen eye, and they aren't that particularly interesting. The Docker one is just a weird bug, it's not a vulnerability, and certainly not a "0-day" (which is a pretty loaded term and people expect bad stuff to happen). The nghttp2 nghttpx one is more interesting, and could potentially be used for phishing, but it's very hard to line up properly because the request queue is non-de…

I mean, that's how people get hacked. If vlc crashed on my computer, and every day I should raise thanks to my gods that I do not use vlc, I would immediately unplug it and thoughtfully consider the circumstances under which it would be safe to turn it back on.

>I mean, that's how people get hacked. If vlc crashed on my computer, and every day I should raise thanks to my gods that I do not use vlc, I would immediately unplug it and thoughtfully consider the circumstances under which it would be safe to turn it back on.

What are you doing on your computer where it is really a threat to you? I'm curious as to your specific use case :)

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#213

Post by theK »

Macha wrote: post #165
theK wrote: post #161

Earlier quoted context omitted.

What is the typical motivation to start using em-dashes? Why go the extra way to have a slightly elongated dash when a normal one would just as well do the job? I might be conpletely off here but I've never seen a situation where using a normal dash where a long one should be causes any sort of syntactic trouble.

It looks aesthetically nicer. It was also a bit of a signal that someone took pride in their work and so helped that way. It's a bit like whether your tradesperson cleans up after themselves. Technically sweeping up the dust after installing a kitchen cabinet doesn't actually mean anything for the quality of the kitchen cabinet installation, but in practice putting the effort into the presentation correlates with put…

I understand the sentiment with the tradesman example. I would argue that there are a multitude of ways to care about or take pride in one's trade and emdashing the floor is just one of them.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#214

Post by ok123456 »

void-star wrote: post #144
stonogo wrote: post #77

Earlier quoted context omitted.

But not the other way around, which makes them different.

Actually, Mudge of the l0pht (and later DARPA) once famously made the claim that all bugs are security issues waiting to be exploited in some way (I’m probably paraphrasing). I kind of agree. Although, the bugs on this dump are indeed mostly pretty lame, which is exactly what I’ve seen you get a lot of when you let an llm go bug hunting with no human vetting and confirmation in the loop. It’s possible/likely that who…

Peiter Zatko profits, personally and professionally, from conflating the two. Making such bold pronouncements is a way for him to stay relevant.

Also, I've known some thoroughly unimpressive people who have affiliated themselves with DARPA. I wouldn't use it as an appeal to authority.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#215

Post by SunnyNeon »

ryukoposting wrote: post #74
Retr0id wrote: post #17

I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you overwrite binaries executed by ghidra, you can trigger code execution. This is not a surprise. The second, idk, I'm not familiar with TraceRMI (but it's probably worth noting that "RMI"…

I'm no expert on any of these programs, but that's kinda the problem, isn't it? No single person is an expert on every codebase supposedly exploited in this repo. After a bit of research, the Firefox one seems plausible to me. But, I haven't actually tried the POC. The explanation about the private-data and untrusted-input flags is plausible but I'm not an expert on Firefox's internals, maybe that's not actually how…

The inputs are truncated to prevent malicious prompt injections. The PoC ignores this by using a fake model which is easily convinced.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#216

Post by d-cc »

tyre wrote: post #52
tempest_ wrote: post #13

Earlier quoted context omitted.

Repo claims > A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way. Which is roughly the definition of zero day. Whether the contents of…

> Please do not abuse these. Reminds me of Jamie Wolf's joke about bestiality laws. Who are those for? What stops most people from bestiality is… not wanting to have sex with animals! For people who do want to, what, they won't because of… the law?? Who will this comment stop??

>What stops most people from bestiality is… not wanting to have sex with animals!

The main issues are that it's potentially really harmful towards the animals, depending on act, and a vector for zoonotic disease transfer.

If you're going to do it, do it right, and accept that you're probably going to end up with some system transfer you didn't necessarily anticipate.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#218

Post by chrismarlow9 »

Looks like a bunch of re worded copies of existing CVE and a few new lower severity things. I only call them low sev because they seem to require the user to do things that are already inherently dangerous. Just my 2 cents from a quick scan.

Edit:

To be clear still interesting finds. I think with some chaining some of them might be more severe. Like the ovpn one and windows potentially registering vpn app as default open or some protocol opener for a url location like openvpn:// in an I frame and some clever social engineering. Just a random thought

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#219

Post by tormeh »

TheTon wrote: post #164
jeffbee wrote: post #152

Earlier quoted context omitted.

I mean, that's how people get hacked. If vlc crashed on my computer, and every day I should raise thanks to my gods that I do not use vlc, I would immediately unplug it and thoughtfully consider the circumstances under which it would be safe to turn it back on.

Right, this is why video parse / decode ought to be sandboxed. Writing secure code for these formats, especially in C, is really hard. I just sort of glanced at the bug in the repo, but it sounds plausible. It certainly wouldn’t be the first of its kind.

And it's my impression the code is often in assembly, which is even less structured.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#220

Post by d-cc »

seanclayton wrote: post #80
tyre wrote: post #52

Earlier quoted context omitted.

> Please do not abuse these. Reminds me of Jamie Wolf's joke about bestiality laws. Who are those for? What stops most people from bestiality is… not wanting to have sex with animals! For people who do want to, what, they won't because of… the law?? Who will this comment stop??

> Who are those for? The people who want to see the people doing bestiality punished

As well as those who don't wish to be blessed with Herpes-B from somebody who thought it was a good idea to engage in unsafe sexual activity with other non-human primates
Post reply on HN