Post

PentesterLab
@pentesterlab.com

๐—ฅ๐—ฒ๐˜€๐—ฒ๐—ฎ๐—ฟ๐—ฐ๐—ต ๐—ช๐—ผ๐—ฟ๐˜๐—ต ๐—ฅ๐—ฒ๐—ฎ๐—ฑ๐—ถ๐—ป๐—ด - ๐—ช๐—ฒ๐—ฒ๐—ธ ๐Ÿด, ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ Java x2, Go, JWT and a sprinkling of AI ๐Ÿฆซ ๐—–๐—ง๐—™๐˜๐—ถ๐—บ๐—ฒ.๐—ผ๐—ฟ๐—ด / ๐—ท๐˜‚๐˜€๐˜๐—–๐—ง๐—™ [*] ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฌ / ๐—š๐—ผ-๐—ณ๐˜€ / ๐—ช๐—ฟ๐—ถ๐˜๐—ฒ๐˜‚๐—ฝ A cool Golang quirk via an unintended CTF solution ctftime.org/writeup/25852.

ctftime.orgCTFtime.org / justCTF [*] 2020 / Go-fs / WriteupCTF writeups, Go-fs
PentesterLab
@pentesterlab.com

โ˜•๏ธ ๐—”๐—น๐—บ๐—ผ๐˜€๐˜ ๐—œ๐—บ๐—ฝ๐—ผ๐˜€๐˜€๐—ถ๐—ฏ๐—น๐—ฒ: ๐—๐—ฎ๐˜ƒ๐—ฎ ๐——๐—ฒ๐˜€๐—ฒ๐—ฟ๐—ถ๐—ฎ๐—น๐—ถ๐˜‡๐—ฎ๐˜๐—ถ๐—ผ๐—ป ๐—ง๐—ต๐—ฟ๐—ผ๐˜‚๐—ด๐—ต ๐—•๐—ฟ๐—ผ๐—ธ๐—ฒ๐—ป ๐—–๐—ฟ๐˜†๐—ฝ๐˜๐—ผ ๐—ถ๐—ป ๐—ข๐—ฝ๐—ฒ๐—ป๐—ง๐—ฒ๐˜…๐˜ ๐——๐—ถ๐—ฟ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ๐˜† ๐—ฆ๐—ฒ๐—ฟ๐˜ƒ๐—ถ๐—ฐ๐—ฒ๐˜€ What an adventure in Java Deserialisation... slcyber.io/research-cen....

slcyber.ioAlmost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services โ€บ Searchlight CyberIntroduction We recently found ourselves looking into OpenText Directory Services (OTDS). We had seen it present on our customer's attack surface, and it seemed to be an interesting target. OTDS is a ...
PentesterLab
@pentesterlab.com

๐Ÿ˜ฑ ๐—ฉ๐˜‚๐—น๐—ป๐—ฒ๐—ฟ๐—ฎ๐—ฏ๐—ถ๐—น๐—ถ๐˜๐˜† ๐——๐—ถ๐˜€๐—ฐ๐—น๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ: ๐—๐—ช๐—ง ๐—”๐˜‚๐˜๐—ต๐—ฒ๐—ป๐˜๐—ถ๐—ฐ๐—ฎ๐˜๐—ถ๐—ผ๐—ป ๐—•๐˜†๐—ฝ๐—ฎ๐˜€๐˜€ ๐—ถ๐—ป ๐—ข๐—ฝ๐—ฒ๐—ป๐—œ๐—— ๐—–๐—ผ๐—ป๐—ป๐—ฒ๐—ฐ๐˜ ๐—”๐˜‚๐˜๐—ต๐—ฒ๐—ป๐˜๐—ถ๐—ฐ๐—ฎ๐˜๐—ผ๐—ฟ ๐—ณ๐—ผ๐—ฟ ๐—ง๐—ผ๐—บ๐—ฐ๐—ฎ๐˜ The exact same vulnerability I found in HarbourJWT but in a much cooler target, still not fixed... insinuator.net/2026/02/jwt-....

insinuator.netVulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat โ€“ Insinuator.net

0 reposts0 likes

PentesterLab
@pentesterlab.com

โ˜•๏ธ ๐—–๐—ฉ๐—˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ-๐Ÿฌ๐Ÿฒ๐Ÿฌ๐Ÿฏ: ๐—ฆ๐—ฒ๐—ฐ๐—ผ๐—ป๐—ฑ-๐—ข๐—ฟ๐—ฑ๐—ฒ๐—ฟ ๐—ฆ๐—ค๐—Ÿ ๐—œ๐—ป๐—ท๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป ๐—ถ๐—ป ๐—›๐—ถ๐—ฏ๐—ฒ๐—ฟ๐—ป๐—ฎ๐˜๐—ฒ ๐—จ๐—ฃ๐——๐—”๐—ง๐—˜/๐——๐—˜๐—Ÿ๐—˜๐—ง๐—˜ (๐—œ๐—ป๐—น๐—ถ๐—ป๐—ฒ๐—œ๐—ฑ๐˜€๐—ข๐—ฟ๐—–๐—น๐—ฎ๐˜‚๐˜€๐—ฒ๐—•๐˜‚๐—ถ๐—น๐—ฑ๐—ฒ๐—ฟ) A bit of a stretch but an interesting insight into Hibernate: www.herodevs.com/blog-posts/c....

herodevs.comHeroDevs Blog | CVE-2026-0603: Second-Order SQL Injection in Hibernate UPDATE/DELETE (InlineIdsOrClauseBuilder)CVE-2026-0603 is a high-severity second-order SQL injection vulnerability in Hibernate ORM caused by unsafe ID inlining during UPDATE and DELETE operations. Learn impact, root cause, and remediation.
PentesterLab
@pentesterlab.com

๐Ÿค– ๐—จ๐˜€๐—ถ๐—ป๐—ด ๐˜๐—ต๐—ฟ๐—ฒ๐—ฎ๐˜ ๐—บ๐—ผ๐—ฑ๐—ฒ๐—น๐—ถ๐—ป๐—ด ๐—ฎ๐—ป๐—ฑ ๐—ฝ๐—ฟ๐—ผ๐—บ๐—ฝ๐˜ ๐—ถ๐—ป๐—ท๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป ๐˜๐—ผ ๐—ฎ๐˜‚๐—ฑ๐—ถ๐˜ ๐—–๐—ผ๐—บ๐—ฒ๐˜ The team at Trail of Bits is sharing some key learnings from their audit of Comet (AI browser) blog.trailofbits.com/2026/02/20/u....

blog.trailofbits.comUsing threat modeling and prompt injection to audit CometTrail of Bits used ML-centered threat modeling and adversarial testing to identify four prompt injection techniques that could exploit Perplexityโ€™s Comet browser AI assistant to exfiltrate private Gma...