Recent content on thatsn0tmysite
Hey there lads! 👋 I just released Torget (a.k.a. tget ). What is it, you may ask? Well, it’s a, erm… a Tor http downloader… ASTONISHING, I know. As always I was supposed to release this months ago, but got busy with other things… But wait! tget is not just your typical downloader, it comes with a tiny twist! Instead of allowing downloads of multiple files over one Tor…
Torget, or tget for short, is a http(s) file downloader for Tor made by thatsn0tmysite (a.k.a. n0tme). Where tget “shines” over other tools is its (ab)use of bandwith, it spawns multiple Tor instances, it allows downloads of multiple files over multiple Tor clients, avoiding saturating the bandwith with concurrent downloads. This allows for faster parallel downloads and a more total…
Livefect Livefect is a PoC tool to play around with /proc/pid/mem , process_vm_readv and process_vm_write as alternatives ways of injecting into processes without using ptrace directly. Technically we still need the same privileges to use this as we need for ptrace but I mean, why not. It was fun to play around with this as I had to learn about ELF, shellcodes and Linux in general. Excuse the…
Hi folks! I recently read about a few vulnerabilities on Terramaster which were basically stolen from me heavily inspired by my previous ones, so I decided to look into Terramaster again, just to find a few more. Ah. This time I didn’t spend much time reasearching, and I couldn’t find an auth bypass so you will need valid credentials to reach the RCEs. Don’t worry tho, you…
The mystic arts of summoning RCEs seem obscure and complex to those who are not trained for it, but in reality, the secret to all of them is one: shell_exec . In the last couple weeks I was waiting for ZDI to know if they were interested in giving me some cash for this, but unfortunately they were not, so here you go: a freshly spawned 0day - merry fucking XMAS. I don’t know if many of you…
Well, hello there! Last few weeks have been a little busy between my mere analog life and pwning industrial ovens work. Lately I have been banging my head against this thing known as Windows . Its APIs to be precise, as I am trying to move out of my comfort zone of “development” (I am by no means a developer, but when I make stuff, it’s usually on Linux). As a side note, while…
XSServe XSServe is a shameless copy of heavily inspired by the XSSHunter project (by @IAmMandatory ), rewritten in Go. ⚠ Disclaimer The project is in a SEMI usable state right now, if you want a prime experience I still suggest the use of other tools. NOTE: only basic authentication is supported for the UI for now. 📷 Mandatory screenshot(s) 🏁 Goals The initial goal is to allow users to use the…
The title is kind of a very bad pun, one of the “that’s not even funny” ones. So, what is today’s post about? Google. No, not the privacy concerns or the data usage policies, nor their silly Google Play Store rules. Not the tracking, not the fact that their products seem to be walking dead bodies before they reach their prime time (looking at you Stadia)… but books.…
Well, as mentioned in the last post , some lame XSS I found just went public. For those wanting to jump straight to the point: muoversiaroma.it romamobile.it travel.mob.cotralspa.it servizi.cotralspa.it I am a firm believer in the philosophy of “disclose as you please”, for the vulnerabilities above, I decided to attempt and be as ethical as possible and tried to disclose them…
For the few souls that ever followed my blog: I finally migrated. There was no real reason to keep a wordpress blog , as I really never used any features from Wordpress. I migrated to Github pages, because… free hosting, and custom domains. Seemed nice enough to me, also for some reason I ended up using Hugo, over Jekyll. I could never get Jekyll to run even thought the setup is actually…
I will eventually write something about me here…