alp1n3 🌲

alp1n3 🌲

@alp1n3.dev

🔮 AppSec & Go

542 followers347 following750 posts

alp1n3 🌲 reposted

Jorian
@jorianwoltjer.com

Simple IDOR turned into an interesting question of "how do we find the IDs?" The answer: Continuously probe ObjectId()'s from MongoDB and search through the predictable gaps! Check out the full explanation & implementation below: www.aikido.dev/blog/predict...

aikido.devPredicting MongoDB ObjectId() continuously in Rocket.ChatAikido's AI pentester found this file-access flaw in Rocket.Chat. A closer look at MongoDB's ObjectId() showed the weak randomness that makes it exploitable.

alp1n3 🌲 reposted

Jorian
@jorianwoltjer.com

It's friday so you know what that means, time for a critical vulnerability! Okay... we announced it 4 weeks ago already to be fair, but now we can talk about the technical parts 🙌 Read how authentication could be bypassed on every online phpBB instance: www.aikido.dev/blog/authent...

aikido.devAuthentication Bypass in the default configuration phpBBOur AI pentest agents found a critical phpBB auth bypass (CVE-2026-48611): one unauthenticated request logs you into any account. See the exploit and the fix.

alp1n3 🌲 reposted

0xdf
@0xdf.bsky.social

DevArea from HackTheBox features an Apache CXF file-read SSRF, a Hoverfly middleware command injection, a forged Flask session from a leaked secret, and a symlink-check bypass in a sudo script for root.

0xdf.gitlab.ioHTB: DevAreaDevArea hosts a freelance developer marketplace backed by several web applications on different stacks. I’ll find a JAR file on an open FTP server that matches one of the web services that uses a vulnerable version of Apache CXF. I’ll abuse its attachment handling to read arbitrary files off the host. Those files leak credentials for a Hoverfly API simulation instance, where a command injection in the middleware feature gives a shell as the first user. From there I’ll pivot through a custom SysWatch monitoring app, forging a session cookie with a secret pulled from a world-readable environment file and slipping a command past a weak input filter to run as the service account. Finally, I’ll exploit a flawed symlink check in a script that account runs as root to read the root login key and get a shell. In Beyond Root I’ll explore why I couldn’t read user.txt from the initial file read, and look at the admin password from the syswatch application.

alp1n3 🌲 reposted

Socket
@socket.dev

Node.js is weighing a controversial proposal to move more security reports into public workflows as AI-generated submissions surge. Maintainers say ending bug bounty rewards didn't reduce the volume, and many reports remain duplicated or low-signal. socket.dev/blog/nodejs-... #nodejs #javascript

socket.devNode.js Considers Public Workflow for Security Reports Amid ...Node.js is debating whether AI-driven security report volume warrants moving more vulnerability reports into public workflows.

alp1n3 🌲 reposted

Jorian
@jorianwoltjer.com

We tested another mail client, Roundcube this time. The agents found a Stored Self-XSS vulnerability that could really only be exploited with Cookie Tossing. Scary for password reset tokens... Blog post below: www.aikido.dev/blog/roundcu...

aikido.devRoundcube XSS chained with cookie tossing for full inbox accessWe found a stored XSS in Roundcube's draft attachment endpoint that, chained with a cookie tossing technique, gives an attacker full access to a victim's inbox. Here's how the exploit chain works and ...

alp1n3 🌲 reposted

James Kettle
@jameskettle.com

We've launched a new free Web Security Academy topic on exploiting AI-powered security scanners! Learn how to use indirect prompt injection to steal data, cause damage & trigger exploit chains! Dive in here: portswigger.net/web-security...

portswigger.netAI-powered scanner vulnerabilities | Web Security AcademyApplication security teams often deploy AI-powered scanners that use Large Language Models (LLMs) to scan web applications for vulnerabilities. While ...

alp1n3 🌲 reposted

Jorian
@jorianwoltjer.com

New blog post is out! A few vulnerabilities in Mailcow. A critical unauthenticated XSS, and another interesting Self-XSS escalation involving a Login CSRF with a leftover tab. Check it out: www.aikido.dev/blog/xss-vul...

aikido.devMultiple XSS Vulnerabilities Found in Mailcow, Including Unauthenticated Account TakeoverAikido's AI pentest agent found three XSS vulnerabilities in Mailcow, one of which let unauthenticated attackers take over administrator accounts. All issues have been patched as of version 2026-03b.

alp1n3 🌲 reposted

renniepak
@renniepak.nl

When reviewing pull requests with new additions for CSPBypass.com, I often find myself questioning how useful a given entry actually is. If no websites whitelist a specific host, there is little point in adding it.

alp1n3 🌲 reposted

Greg Otto
@gregotto.bsky.social

Noma Security researchers used indirect prompt injection to turn Grafana's own AI into an unwitting courier for sensitive corporate data cyberscoop.com/grafanaghost...

cyberscoop.com‘GrafanaGhost’ bypasses Grafana's AI defenses without leaving a traceNoma Security researchers disclosed GrafanaGhost, a Grafana vulnerability that uses indirect prompt injection to silently exfiltrate sensitive enterprise data — bypassing AI guardrails without a login...

alp1n3 🌲 reposted

GitHub Security Lab
@securitylab.github.com

Software supply chain attacks are on the rise. Learn how open source contributors can use what GitHub Actions is building to help protect projects and the broader software community. github.blog/news-insight...

github.blogWhat's coming to our GitHub Actions 2026 security roadmapA look at GitHub Actions’ 2026 roadmap, outlining how secure defaults, policy controls, and CI/CD observability harden the software supply chain end to end.

alp1n3 🌲 reposted

0xdf
@0xdf.bsky.social

Snapped from HackTheBox features CVE-2026-27944 to download and decrypt Nginx UI backups without auth, bcrypt cracking for a shell, and CVE-2026-3888 to exploit a snapd race condition for root.

0xdf.gitlab.ioHTB: SnappedSnapped is a Linux box hosting a static site behind nginx, with an Nginx UI admin panel. I’ll exploit CVE-2026-27944 to decrypt a backup download from the Nginx UI to find bcrypt password hashes in a SQLite database. I’ll crack one to get SSH access. To escalate to root, I’ll exploit CVE-2026-3888, a recent vulnerability in snapd where systemd-tmpfiles deletes snap-confine’s private temp directory, allowing me to win a race condition and replace the dynamic linker with a malicious payload that runs as root.
alp1n3 🌲
@alp1n3.dev

The CVE Archeologist’s Field Guide is now on Storygraph for tracking and rating/reviews! I’d definitely recommend it as a read for everyone — honestly such a great read, full of useful info, and the information was packed into 106 pages of need-to-know without too much fluff. 10/10! 🔥

alp1n3 🌲 reposted

0xacb
@0xacb.com

WontFix can be an RCE Goldmine SOAPwn by chudyPB #5 in PortSwigger Web Hacking Techniques of 2025 Blog link 👇

labs.watchtowr.comSOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDLWelcome back! As we near the end of 2025, we are, of course, waiting for the next round of SSLVPN exploitation to occur in January (as it did in 2024 and 2025). Weeeeeeeee. Before then, we want to clear the decks and see how much research we can publish. This

alp1n3 🌲 reposted

PentesterLab
@pentesterlab.com

A commit meant to "strengthen the crypto" in FreshRSS ended up removing the need for a correct password. Why? Longer SHA-256 nonce + bcrypt truncation at 72 bytes. A nice example of why secure systems are about composition, not just stronger primitives. pentesterlab.com/blog/freshrs...

pentesterlab.comHow "Strengthening Crypto" Broke Authentication: FreshRSS and bcrypt's 72-Byte LimitAs part of our CVE monitoring, we came across GHSA-pcq9-mq6m-mvmp (CVE-2025-68402), an authentication bypass in FreshRSS, a self-hosted RSS aggregator. It ...

alp1n3 🌲 reposted

PentesterLab
@pentesterlab.com

Replying to @pentesterlab.com

⛓️‍💥 𝗔𝘂𝘁𝗵𝗲𝗻𝘁𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗕𝘆𝗽𝗮𝘀𝘀 𝗶𝗻 𝗽𝗮𝗰𝟰𝗷 Another issue with a library leveragining JWT: www.codeant.ai/security-res....

codeant.aiCVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public KeyCodeAnt AI found a critical authentication bypass in pac4j-jwt where an attacker can impersonate any user using only the RSA public key. Full PoC and disclosure.

alp1n3 🌲 reposted

kepano
@stephango.com

Defuddle now has a website! This means you can use Defuddle anywhere to get the main content of a page in Markdown format. You can simply add "defuddle.md" before any URL, use it via curl, Skills, CLI, or add it to your app via NPM.

alp1n3 🌲 reposted

Jorian
@jorianwoltjer.com

XSS on a password manager, about the scariest impact you can have... github.com/aliasvault/a... Luckily it was fixed super quick! Here's a simple script you can use to send raw HTML in emails. I think a lot more clients will benifit from sanitizer testing. gist.github.com/JorianWoltje...

github.comCross-Site Scripting (XSS) via Email HTML Rendering## Impact A stored cross-site scripting (XSS) vulnerability was identified in the email rendering feature of AliasVault Web Client versions 0.25.3 and lower. When viewing received emails on an ali...

alp1n3 🌲 reposted

0xacb
@0xacb.com

Vulnerability Spoiler Alert Action by @spaceraccoonsec It monitors repositories and uses Claude to detect patching of security vulns. This early warning can give security teams more time to patch before the CVE drops. GitHub repo👇

github.comGitHub - spaceraccoon/vulnerability-spoiler-alert-action: GitHub Action to alert on security patches before the CVE drops.GitHub Action to alert on security patches before the CVE drops. - spaceraccoon/vulnerability-spoiler-alert-action

alp1n3 🌲 reposted

Socket
@socket.dev

A compromised npm token was used to push an unauthorized postinstall script in cline@2.3.0, a popular AI coding agent CLI with 90k weekly downloads. Big shoutout to @adnanthekhan.bsky.social whose research sniffed out the cache poisoning vulnerability! 💪 Details → socket.dev/blog/cline-c...

socket.devCline CLI npm Package Compromised via Suspected Cache Poison...A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k wee...

alp1n3 🌲 reposted

Timon
@timonsku.zip

The Discord situation is going to produce a lot more people that hate Matrix. They will still use Discord but they will now also hate Matrix

alp1n3 🌲 reposted

Matt Keeter
@mattkeeter.com
Orual@nonbinary.computer

the wild thing is that while there's good reasons to not use one language across your entire software stack from bare metal microcontrollers to web front-end, the one language you can do this with and have it not be an objectively stupid choice is probably rust.

alp1n3 🌲 reposted

Cameron Balahan
@cameronb.bsky.social

Go 1.26 has a lot to love, including significant performance improvements that are completely transparent to Go developers. Just upgrade and your Go programs run faster -- no other changes required!

Go@golang.org

🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang

alp1n3 🌲 reposted

Socket
@socket.dev

☠️🤖 We’re entering a new era of malicious workflows. OpenClaw skills show how easily agent workflows can be abused once they’re trusted to execute. A closer look at this emerging class of supply chain attack: socket.dev/blog/opencla...

socket.devOpenClaw Skill Marketplace Emerges as Active Malware Vector ...Security researchers report widespread abuse of OpenClaw skills to deliver info-stealing malware, exposing a new supply chain risk as agent ecosystems...

alp1n3 🌲 reposted

0xdf
@0xdf.bsky.social

Bamboo from HackTheBox and VulnLab features Squid proxy enumeration, CVE-2023-27350 authentication bypass to RCE in PaperCut NG, and binary hijacking of a root-executed script for privilege escalation.

0xdf.gitlab.ioHTB: BambooBamboo offers a Squid HTTP proxy through which I’ll access a PaperCut NG instance. I’ll use Spose to scan through the proxy and discover the print management application. I’ll exploit an authentication bypass vulnerability in PaperCut and use application access to enabling print scripting to get code execution. For privilege escalation, I’ll abuse a root process that runs a script from the papercut user’s home directory.

alp1n3 🌲 reposted

0xacb
@0xacb.com

Our pentesting agent found a 1-click ATO to RCE in @moltbot Gateway Control UI in under 2 hours. Local instances can also be exploited with one click. Patched in main, update now. Watch the exploit 👇

alp1n3 🌲 reposted

0xdf
@0xdf.bsky.social

Imagery from HackTheBox features XSS to steal cookies, directory traversal for source code access, and command injection for rce. Pivots include pyAesCrypt brute-forcing and abusing a sudo backup utility exploited multiple ways.

0xdf.gitlab.ioHTB: ImageryImagery hosts a Flask-based image gallery application. I’ll exploit a stored XSS vulnerability in the bug report feature to steal an admin cookie. From the admin panel, I’ll use directory traversal to read the application source code, finding a command injection vulnerability in the image crop feature that requires access as a test user. After reading the database and cracking the test user’s password hash, I’ll exploit the command injection to get a shell. I’ll find an encrypted backup file and brute-force the pyAesCrypt password, getting access to an older backup with additional hashes. After cracking another user’s hash, I’ll pivot to a user that can run a custom backup utility as root via sudo. I’ll show two ways to abuse this. In Beyond Root, I’ll show why SSH is broken and how to get around it.
alp1n3 🌲
@alp1n3.dev

Got the final piece beautifully rendered and ready to be sent off for the 10qty SLM print… But then I ran across the mass-market cut ones from China for $1.00/pc 😭 Why do they have to be so insanely cheap.

alp1n3 🌲 reposted

Taggart
@taggart-tech.com

Oh look, another MCP vuln (or 3) from failure to sanitize input. You and I both know how these are getting written. You and I both know the training material is not vetted for secure code. This will not stop and will only get worse.

cyata.aiCyata Research: Breaking Anthropic's Official MCP Server - Cyata | The Control Plane for Agentic IdentityHow We Found Code Execution in Anthropic’s Official Git MCP Server TL;DR What happened: Cyata discovered three security vulnerabilities in mcp-server-git, the official Git MCP server maintained by Anthropic. These flaws can be exploited through prompt injection, meaning an attacker who can influence what an AI assistant reads (a malicious README, a poisoned issue description, […]

alp1n3 🌲 reposted

0xdf
@0xdf.bsky.social

HackNet from HackTheBox features SSTI in Django templates to leak user credentials, pickle deserialization via FileBasedCache with world-writable directory, and GPG key cracking to recover database backups containing the root password.

0xdf.gitlab.ioHTB: HackNetHackNet hosts a social media site for hackers built with Django. I’ll find an HTML injection in the username field that, combined with how the likes page renders usernames, leads to server-side template injection. While Django templates are restrictive, I’ll use the SSTI to dump user data including plaintext passwords, finding one user whose email reveals their Linux username. After SSHing in, I’ll discover Django’s FileBasedCache uses pickle serialization with a world-writable cache directory. By replacing cache files with a malicious pickle payload, I’ll get a shell as the web user. From there, I’ll crack a GPG key password to decrypt database backups, finding a password shared in messages that works for root.