Try SquareX for free today! 👉 [ Ссылка ]

In this video, we take a deep dive into the GitLab / ExifTool metadata parsing vulnerability, which enables attackers to gain access to GitLab servers via an RCE (remote code execution). Whether you're a pen tester, security researcher, or cyber security expert, having a solid foundation in escape sequences, code evaluation, and character parsing is critical.

JOIN THE DISCORD! 👉 [ Ссылка ]

0:00 - Overview
0:26- Metadata
1:59 - DjVu
2:34 - C Escape Sequences
4:18 - Structure
11:14 - Exploit
13:45 - SquareX

Hackerone report
[ Ссылка ]

William Bowling’s report
[ Ссылка ]

Vulnerable code
[ Ссылка ]

Patch
[ Ссылка ]

SquareX socials:
Twitter: [ Ссылка ]
LinkedIn: [ Ссылка ]
Instagram: [ Ссылка ]
Facebook: [ Ссылка ]
Blog: [ Ссылка ]

MUSIC CREDITS:
LEMMiNO - Cipher
[ Ссылка ]
CC BY-SA 4.0

LEMMiNO - Firecracker
[ Ссылка ]
CC BY-SA 4.0

LEMMiNO - Nocturnal
[ Ссылка ]
CC BY-SA 4.0

LEMMiNO - Siberian
[ Ссылка ]
CC BY-SA 4.0

LEMMiNO - Encounters
[ Ссылка ]
CC BY-SA 4.0

#programming #software #softwareengineering #computerscience #code #programminglanguage #softwaredevelopment #hacking #hack #cybersecurity #exploit #tracking #softwareengineer #vulnerability #pentesting #privacy #spyware #malware #cyber #cyberattack #bugbounties #ethicalhacking #JPEG #encoding #lowlevelsecurity #zeroday #zero-day #cybersecurityexplained #bugbounty #memorymanagement #gitlab #security #cybersecurity #github #git #versioncontrol #breaches #databreaches #bug #bugbounty #pentesting #penetrationtesting #BeFearlessOnline #SquareX #Befearless&SecureOnline #Cybersecurity #Privacy #Security #Cybersec

свернуть