Update your MikroTik RouterOS again, to at least 7.24.3
Just published a blog on how you could turn the Webfig "file-read" CVE-2026-67281 (already published by @CERT_Polska_en) into a delayed RCE and on *two other RCEs* in DHCP relay and Webfig. More:
sijisu.eu/posts/3-mikrot…
Just published a blog on how you could turn the Webfig "file-read" CVE-2026-67281 (already published by @CERT_Polska_en) into a delayed RCE and on *two other RCEs* in DHCP relay and Webfig. More:
sijisu.eu/posts/3-mikrot…
0
1
8
303
Sijisu retweeted
Cyber Mimic Defense CTF was so much fun. From car hacking and AI hacking all the way to the Great Wall.
2
7
57
8,758
Awesome event! Thank you
24hrs, 213 flags, and 800 bottles of Red Bull later (plus some Soju)... Congrats to @WreckTheLine, @TokyoWesterns and @dicegangctf for their wins at @MidnightSunCTF ⛳️
Winners take home #BinaryNinja licenses sponsored by @Vector35 and @CorelliumHQ licenses and other prizes 🏆
1
0
11
950
Sijisu retweeted
The #CTF was a blast 💥
Thank you all for joining and huge kudos to the teams that captured the most flags and reached the top of the leaderboard!
#HackTheBox #DEFCON #Hacking #CaptureTheFlag
@ProjectSEKAIctf @adragos_ @sijsu
Thank you all for joining and huge kudos to the teams that captured the most flags and reached the top of the leaderboard!
#HackTheBox #DEFCON #Hacking #CaptureTheFlag
@ProjectSEKAIctf @adragos_ @sijsu
1
6
84
12,741
Sijisu retweeted
We Wrecked The Line from the wrong side 😰
Cheers to our allies @PwnThyBytes @0tolerance_ctf
Cheers to our allies @PwnThyBytes @0tolerance_ctf
0
1
28
4,999
Sijisu retweeted
Tenhle týden se vůbec na podobných twitterových účtech urodila Spousta Dobrých Rad™️. V odpovědích na tohle vlákno x.com/sijsu/status/1… jedna organizace obhajuje (mj. stylem "ale správci hesel mají taky zranitelnosti") jakýsi systém karet, že se prý tak dá vytvořit silné heslo
1
2
7
1,532
How real programmers assign to variables:
>>> def asgn(x,y): f = open("/proc/self/mem", 'wb');f.seek(id(x)+24);f.write(struct.pack("<Q", y));f.flush()
...
>>> var = 13
>>> asgn(var, 42)
>>> print(var)
42
>>> def asgn(x,y): f = open("/proc/self/mem", 'wb');f.seek(id(x)+24);f.write(struct.pack("<Q", y));f.flush()
...
>>> var = 13
>>> asgn(var, 42)
>>> print(var)
42
0
0
7
Sijisu retweeted
I wrote a two-part series on fuzzing and exploiting the Trackmania Nations Forever server.
Part 1 covers the snapshot + grammar fuzzer, part 2 focuses on the exploitation.
blog.bricked.tech/posts/tmnf/par…
Enjoy 🥳!
Part 1 covers the snapshot + grammar fuzzer, part 2 focuses on the exploitation.
blog.bricked.tech/posts/tmnf/par…
Enjoy 🥳!
4
93
393
Sijisu retweeted
Here are the official #BGGP3 entries and scores! Thank you to everyone that took part in this, see you next year!
github.com/netspooky/BGGP…
github.com/netspooky/BGGP…
1
33
87
"with far too many staff (about half of Twitter's 10,000 employees, and growing) given access to sensitive live production systems and user data in order to do their jobs"
documentcloud.org/documents/2218…
documentcloud.org/documents/2218…
0
0
2
This will level up your next AD CTF experience!
Tulip - flow analyzer used by #TeamEurope on ICC 2022 - is now open source!
Awesome work by @rdjgr and @Bazumo
Tulip - flow analyzer used by #TeamEurope on ICC 2022 - is now open source!
Awesome work by @rdjgr and @Bazumo
The flow analyzer myself and @Bazumo wrote for ICC 2022 is now finally public!
It comes out of the box with fancy Attack/Defence features, like Suricata integration, traffic tagging, automatic exploit generation, and more!
github.com/OpenAttackDefe…
#icc_games
0
0
1
Sijisu retweeted
#ICC_games 2022: 7 teams, 65 countries, 6 continents, 1 winner!
We are excited to introduce the winners of the 1st International Cybersecurity Challenge...
🏆 Team Europe 🇪🇺
Congratulations to all!
We are excited to introduce the winners of the 1st International Cybersecurity Challenge...
🏆 Team Europe 🇪🇺
Congratulations to all!
5
48
159
Fingers crossed for the ceremony tommorow🤞
The 1st International Cybersecurity Challenge is over!
The teams celebrate their participation while waiting to learn the winners during the award ceremony tomorrow at 17.30 EEST.
Join us tomorrow to crown the champions! #ICC_games
0
0
3
Sijisu retweeted
After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116.
I would like to use this opportunity to thank those who made this possible. Thank you. ❤️
I would like to use this opportunity to thank those who made this possible. Thank you. ❤️
43
935
2,706
Sijisu retweeted
We know the winners of #ECSC2021. 🎉
🥇Team GERMANY 🇩🇪
🥈Team POLAND 🇵🇱
🥉Team ITALY 🇮🇹
Congratulations to the winners and thanks to all national teams for participating.👏
🥇Team GERMANY 🇩🇪
🥈Team POLAND 🇵🇱
🥉Team ITALY 🇮🇹
Congratulations to the winners and thanks to all national teams for participating.👏
5
22
167
I like writing C code because of the expressive syntax, strong type system, and safety AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
1
0
5
Sijisu retweeted
BREAKING. Czechia expels 18 (!) diplomats after discovering that GRU's unit 29155 - same guys we proved were behind the Skripal and Gebrev poisonings - were behind the explosions at Czech ammunition factories in 2014.
125
3,196
9,845
Sijisu retweeted
Can get your coders to free my last name from icloud jail?
Been locked out for 6+ months because of an uncapitalized t in TRUE, my surname but also a computer command.
Now that I a layman have explained problem to you a giant computer company, could u fix?
@Apple @AppleSupport
Been locked out for 6+ months because of an uncapitalized t in TRUE, my surname but also a computer command.
Now that I a layman have explained problem to you a giant computer company, could u fix?
@Apple @AppleSupport
Anyone else getting this error from Apple iCloud ? In past or now?
I’m 6 months deep freeze & looking for any help.
I rem dead coding languages like kobalt.. & this seems like an Apple coding issue — not hardware
51
542
1,560