ropbear

5 ms·

1.
PoC Released for Actively-Exploited MikroTik Unauth SSH Device Takeover(github.com)
2 points by ropbear 9d ago|0 comments
2.
by ropbear 17d ago
In my experience, students were actually pretty good about understanding this for themselves, at least in a security course I ran a survey in[0]. Unfortunately I didn’t get a statistically significant sample size (10/~60). Another cave
3.
by ropbear 22d ago
And this reasoning is exactly how we got here in the first place. “It’s not that bad, just a little bad, so it’s okay” We’re talking about air pollution and death rates, not financial risk.
4.
Watch Soldering Up Close and from Any Angle, in VR(hackaday.com)
2 points by ropbear 1mo ago|0 comments
5.
Prompt Injection in VirusTotal's Code Insights API(exploiting.systems)
3 points by ropbear 1mo ago|0 comments
6.
by ropbear 1mo ago
> The seller agreed to put an Apple AirTag provided by 404 Media in one of the books included in this order so we could see where the book was going. And by extension, which company, AI or otherwise, was behind this massive order. It wou
7.
Anthropic's ‘watermark’ text adulteration in Claude is a perversion of writing(daringfireball.net)
825 points by ropbear 1mo ago|731 comments
8.
Tracking down the 16-year-old WAL-reset SQLite bug(tailscale.com)
1223 points by ropbear 1mo ago|239 comments
9.
Prompt Injection in VirusTotal's Code Insights API(exploiting.systems)
1 points by ropbear 1mo ago|0 comments
10.
Learning-focused CTFs are Facing a Restructure(exploiting.systems)
1 points by ropbear 4mo ago|0 comments
11.
Learning-focused CTFs are Facing a Restructure(exploiting.systems)
3 points by ropbear 4mo ago|1 comments
12.
The Changing Landscape of CTF-Based Learning(exploiting.systems)
2 points by ropbear 4mo ago|0 comments
13.
by ropbear 5mo ago
Made a comment up above, but that's tdpServer and tmpServer (sometimes tdpd and tmpd) and it's what I use in my python implementation of tmpcli, the (somewhat broken) client binary on some TP-Link devices. You're correct, it
14.
by ropbear 5mo ago
Of course! Happy to contribute. As is the case with your device, there's a lot of weird TP-Link firmware variants (even an RTOS called TPOS based on VxWorks), so no guarantee it'll work all the time. Glad there's more researc
15.
by ropbear 5mo ago
Many eons ago I wrote a Python version of tmpcli for this exact reason. Made some minor improvements a few years ago but haven’t touched it since. Curious what methodology Codex came up with, I haven’t revisited it since models got really g
16.
Show HN: Ophishal v0.1.0, a Red Team CLI Phishing Framework(github.com)
1 points by ropbear 1y ago|0 comments