Try SquareX for free today! 👉 [ Ссылка ]
In this video, we take a deep dive into the GitLab / ExifTool metadata parsing vulnerability, which enables attackers to gain access to GitLab servers via an RCE (remote code execution). Whether you're a pen tester, security researcher, or cyber security expert, having a solid foundation in escape sequences, code evaluation, and character parsing is critical.
JOIN THE DISCORD! 👉 [ Ссылка ]
0:00 - Overview
0:26- Metadata
1:59 - DjVu
2:34 - C Escape Sequences
4:18 - Structure
11:14 - Exploit
13:45 - SquareX
Hackerone report
[ Ссылка ]
William Bowling’s report
[ Ссылка ]
Vulnerable code
[ Ссылка ]
Patch
[ Ссылка ]
SquareX socials:
Twitter: [ Ссылка ]
LinkedIn: [ Ссылка ]
Instagram: [ Ссылка ]
Facebook: [ Ссылка ]
Blog: [ Ссылка ]
MUSIC CREDITS:
LEMMiNO - Cipher
[ Ссылка ]
CC BY-SA 4.0
LEMMiNO - Firecracker
[ Ссылка ]
CC BY-SA 4.0
LEMMiNO - Nocturnal
[ Ссылка ]
CC BY-SA 4.0
LEMMiNO - Siberian
[ Ссылка ]
CC BY-SA 4.0
LEMMiNO - Encounters
[ Ссылка ]
CC BY-SA 4.0
#programming #software #softwareengineering #computerscience #code #programminglanguage #softwaredevelopment #hacking #hack #cybersecurity #exploit #tracking #softwareengineer #vulnerability #pentesting #privacy #spyware #malware #cyber #cyberattack #bugbounties #ethicalhacking #JPEG #encoding #lowlevelsecurity #zeroday #zero-day #cybersecurityexplained #bugbounty #memorymanagement #gitlab #security #cybersecurity #github #git #versioncontrol #breaches #databreaches #bug #bugbounty #pentesting #penetrationtesting #BeFearlessOnline #SquareX #Befearless&SecureOnline #Cybersecurity #Privacy #Security #Cybersec
MAJOR EXPLOIT: GitLab was Hacked with an IMAGE??
Теги
programmingsoftwaresoftwareengineeringcomputersciencecodeprogramminglanguagesoftwaredevelopmenthackinghackcybersecurityexploittrackingsoftwareengineervulnerabilitypentestingprivacyspywaremalwarecybercyberattackbugbountiesethicalhackingJPEGencodinglowlevelsecurityzerodayzero-daycybersecurityexplainedbugbountymemorymanagementgitlabsecuritycyber securitygithubgitversion controlbreachesdata breachesbugbug bountypen testingpenetration testing