We took WPScan's one-liner #security advisory for CVE-2025-9501 affecting the W3 Total Cache plugin for #WordPress, analysed its cache parsing internals and built a pre-auth RCE exploit for it 😎 www.rcesecurity.com/2025/11/expl... #infosec

We sold out of our GA tickets in 15 seconds 🤯 For students: Thanks to our community sponsors, our DistrictCon Scholars' Program application is open! For anyone else passionate about DisCo: Volunteer with us! You can also join our waitlist on Eventbrite! All info here: www.districtcon.org/tickets

Got mine! That was stressful 😅 Looking forward to seeing you all there!

Looking good a good tutorial on debugging with ghidra. I want to set breakpoints, change flow, and modify memory values. Is that possible?

Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie www.atredis.com/blog/2025/9/...

I've been following the @xbow.com stuff for a while now and have been really impressed by their blog posts and findings, so I'm extremely surprised/disappointed by the poor quality of their sample report on their new on-demand pentest offering at xbow.com/pentest for a lot of reasons.

This whole system is fucked.

every AI ad is like “hey gemini, what would i have for lunch?” and then the phone is like “sandwich” and the guy is like “wow”

I have a close friend who spent the last 15 years as an ETL developer and whose department was recently laid off (jobs were outsourced). If anyone has or knows of any openings, this guy is intelligent, personable, and overall a great person, and I'd love to put you in touch. Reposts appreciated!

Y'all fantastic news! Save the date, @blackhoodie.bsky.social will be at @districtcon.bsky.social this year 😱 the fantastic crew has offered to host us for a day of Malware Reverse Engineering! @synapticrewrite.bsky.social and myself will be hosting a training for women by women on January 23rd!!

POLLS ARE NOW OPEN. Find out where you early vote ⬇️ 🗳️ findmypollsite.vote.nyc

Day 2 of #Pwn2Own Ireland is in the books. So far, we've awarded $792,750 or 56 unique 0-days. Tomorrow could be even better with more Samsung, a Meta Quest entry and that big WhatsApp entry still lingering. Here's the current Master of Pwn leader board. See you tomorrow!

HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo: youtu.be/BAZ-z2fA8E4

Pop a vendor website, replace their /.well-known/security.txt with your own rogue contact info, and wait for the bugs to roll in.

Junkyard closes on Friday, Oct 24 at Midnight!!! Submit here: www.districtcon.org/junkyard

😍 Boston, you are beautiful. #NoKings

Wow the Nexpose user interface is horrible these days, eh? Absolutely fucking terrible.

y2038 progress retr0.id/stuff/2038/

It has been about two decades since I last needed/used one, but is there any modern KVM switch that works with Mac’s properly? Lost faith in a wide screen Picture in Picture monitor so hope the KVM world is better

Another day, another Remote Code Execution (and its 3 friends). Pre-auth path traversal, hard-coded crypto key allowing cookie forgery, arbitrary file write, and PII disclosure in TRUfusion Enterprise (CVE-2025-27222 to CVE-2025-27225) #security www.rcesecurity.com/2025/09/when...

I'd have jumped on this before my Echo Show started showing ads I couldn't disable. Hope the revenue was worth the customer trust.

I'm at the point where I've seen first hand production platforms running AI generated code and have found critical vulnerabilities in those platforms. We're getting to the point where the number of emojis in the code will be telling of the number of bugs.

You've got less than 12 hrs to submit to our CFP, which closes at midnight TODAY ⏰ sessionize.com/districtcon

"we take your privacy. seriously."

🪩 CFP closes soon!! 🪩 submit to sessionize.com/districtcon

I need more friends in the Bay Area/ #Vallejo and I'm feeling so unsure about what to do about it A lot of my friends and old colleagues left the Bay during the pandemic. Making friends in your 30s/40s is so difficult, especially if you don't want to hangout at a bar all night

Fuck Trump, fuck Kirk, and fuck this timeline.

CODE WHITE proudly presents #ULMageddon which is our newest applicants challenge at apply-if-you-can.com packaged as a metal festival. Have fun 🤘 and #applyIfYouCan

v.redd.it/qaywi8e1j7pf1 ❤️

The recording for my latest research has been released! If you prefer to listen rather than read, now is your chance. P.S. It may be worth listening to it at a slower speed due to my tendency to talk at the speed of light...

Another great one from watchTowr: labs.watchtowr.com/you-already-...

It's almost that time of year

Every time

Check out our latest blog from Matt Burch (@emptynebuli.bsky.social ) detailing new supplemental findings from his DefCon32 talk Where's the Money: Defeating ATM Disk Encryption: www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057

Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/4]

At long last - Phrack 72 has been released online for your reading pleasure! Check it out: phrack.org

Can't read LED screens on the beach so I spent some time hacking on @albinowax's old Perl script and made single-file e-books of all Phrack issues, ICYMI: scrapco.de -> (Will probably update when 72 comes out) Original->

CFP for #DistrictCon https://www.districtcon.org/cfp

[RSS] From Support Ticket to Zero Day (CVE-2025-8356, CVE-2025-8355 - Xerox FreeFlow Core) horizon3.ai -> Original->

I have a close friend who spent the last 15 years as an ETL developer and whose department was recently laid off (jobs were outsourced). If anyone has or knows of any openings, this guy is intelligent, personable, and overall a great person, and I'd love to put you in touch. Reposts appreciated!

"They go to SEX CLUBS and pretend to be DOGS!" Yeah well you go to church every Sunday and pretend to be a good person

Yo BSidesLV if you found an ear bud like this in the conf area please let me know. I checked with lost and found (they had the case ❤️ to whomever turned that in) but missing an earbud.

BSides Las Vegas 2025 is incredible. Amazing turn-out, fantastic staff, and the sheer variety of content, speakers, and activities sets the bar for what a hacker con should be. You can find the slides from my talk, "Turbo Tactical Exploitation: 22 Tips for Tricky Targets" at hdm.io/decks/BSides...

#hashcat v7.0.0 is out!!! 🤩 hashcat.net/forum/thread...

From SSRF discovery to RCE exploitation in 32 iterations. XBOW systematically analyzed TiTiler's expression parser, discovered Python execution through error patterns, then crafted payloads using subclass traversal to achieve command execution. Complete analysis: bit.ly/46XzOiA

two of these bugs were a lot of fun to find and exploit. if you've never looked for user-writable keys in HKLM, you'd be surprised how many really exist! one writable key plus a symlink is nearly always LPE. CVE-2025-6231 was interesting due to the patterns involved. authz TOCTOU is still pervasive

We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive www.atredis.com/blog/2025/7/...

We’re proud to announce the Review Board for DistrictCon’s call for papers! Our CFP will open next month, and we're excited to receive all your submissions! www.districtcon.org/cfp