Two years ago, something very strange happened to me while working from my home network. I was exploiting a blind XXE vulnerability that required an external HTTP server to smuggle out files, so I spun up an AWS box and ran a simple Python webserver to receive the traffic from the vulnerable server.
  • breakingcups@lemmy.world
    3·
    4 months ago

    Very good write-up, astounding fails on Cox’s part, but at least the responsible disclosure and remediation process was by the book which earns them points again.

  • ferretEnglish
    1·
    4 months ago

    Finding a novel exploit trying to figure out what someone else did is always super cool