SavageJen On Insecurity @OnInsecurity

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confus… Highlights include: ⚡ Escaping from DocumentRoot to System Root ⚡ Bypassing built-in ACL/Auth with just a '?' ⚡ Turning XSS into RCE with legacy code from 1996

38 647 2K 237K 761

View Details

Black Hat @BlackHatEvents

2 years ago

📣 ANNOUNCEMENT: We're excited to announce our Keynote and Main Stage Speaker Lineup for #BHUSA. Don't miss it! #cybersecurity #infosec Learn more here: blackhat.com/us-24/keynotes…

7 14 57 42K 8

View Details

SavageJen On Insecurity @OnInsecurity

2 years ago

@NatSecBec I use various keepass clients

0 0 0 19 0

View Details

SavageJen On Insecurity @OnInsecurity

2 years ago

@opinonhaver It depends on the type.

0 0 0 18 0

View Details

SavageJen On Insecurity @OnInsecurity

2 years ago

Microsoft: "We care about backwards compatibility so much that we will leave insecure stuff in the OS sometimes." Also Microsoft: "We changed Powershell for some unknown reason and some of your old scripts won't work anymore. haha guess you have to rewrite it."

0 0 3 139 1

View Details

SavageJen On Insecurity @OnInsecurity

2 years ago

@ASUS_ROG Why drop support for the bootloader unlock tool with the rog phone 8? It was legit a selling point of the rog phone.

0 0 0 92 0

View Details

SavageJen On Insecurity @OnInsecurity

2 years ago

The CFP for Blackhat USA 2024 is now open. If you have been wanting to speak at Blackhat, this is your chance. usa-briefings-cfp.blackhat.com

0 0 1 144 0

View Details

DEF CON @defcon

3 years ago

#defcon escapes another brush with cancellation! After 25 years w/Caesars, they cancelled our contract for #defcon32. A lot of conferences might have buckled, but not DEF CON. Hackers make a way out of no way. Uncanceled DEF CON 32 will now be held at the Las Vegas Convention Center, on the same dates and for the first time in a while, under one roof. @thedarktangent 's full post is here: forum.defcon.org/node/248360

50 325 1K 315K 72

View Details

Grifter @Grifter801

3 years ago

And just like that… Next year, @shmoocon 25 will be the last ShmooCon #shmoocon

25 34 117 47K 4

View Details

SavageJen On Insecurity @OnInsecurity

3 years ago

@DKThomp Have the tests changed?

1 0 0 23 0

View Details

SavageJen On Insecurity @OnInsecurity

3 years ago

@typesfast @lukeburgis I think it's not just about the cars. They are a necessary component, but I also think it takes the ability to suppress fear, fast reaction times, and accuracy despite the speed on the part of the driver.