Submissions from blog.orange.tw

		WorstFit: Unveiling Hidden Transformers in Windows ANSI (blog.orange.tw)
		373 points by notmine1337 on Jan 9, 2025 \| past \| 178 comments
		Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server (blog.orange.tw)
		2 points by thunderbong on Aug 10, 2024 \| past \| 1 comment
		Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server (blog.orange.tw)
		120 points by tptacek on Aug 9, 2024 \| past \| 16 comments
		A New Attack Surface on MS Exchange – ProxyLogon (blog.orange.tw)
		1 point by eric_khun on Aug 8, 2021 \| past
		A New Attack Surface on MS Exchange – ProxyLogon (blog.orange.tw)
		4 points by albntomat0 on Aug 7, 2021 \| past
		A Journey Combining Web Hacking and Binary Exploitation in Real World (blog.orange.tw)
		1 point by pentestercrab on Feb 24, 2021 \| past
		I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM (blog.orange.tw)
		2 points by madmax108 on Sept 14, 2020 \| past
		I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM (blog.orange.tw)
		2 points by wolframio on Sept 13, 2020 \| past
		I Hacked Facebook Again Unauthenticated RCE on MobileIron MDM (blog.orange.tw)
		2 points by phwd on Sept 12, 2020 \| past
		An analysis and thought about recently PHP-FPM RCE(CVE-2019-11043) (blog.orange.tw)
		4 points by EdOverflow on Oct 30, 2019 \| past
		VPN PreAuth RCE on Palo Alto GlobalProtect, with Uber as Case Study (blog.orange.tw)
		2 points by gyanchawdhary on July 22, 2019 \| past
		Attacking SSL VPN: PreAuth RCE on Palo Alto GlobalProtect, with Uber as PoC (blog.orange.tw)
		4 points by redthrowaway on July 21, 2019 \| past
		An RCE in Palo Alto’s SSL VPN allowed access to an internal Uber network (blog.orange.tw)
		2 points by buildbuildbuild on July 18, 2019 \| past
		Attacking SSL VPN – Part 1: PreAuth RCE on Palo Alto GlobalProtect, with Uber As (blog.orange.tw)
		2 points by gslin on July 17, 2019 \| past
		Abusing Meta Programming for Unauthenticated RCE in Jenkins (blog.orange.tw)
		1 point by albinowax_ on Feb 19, 2019 \| past
		Hacking Jenkins Part 1 – Play with Dynamic Routing (blog.orange.tw)
		1 point by paulb81 on Jan 18, 2019 \| past
		How I Chained 4 vulnerabilities on GitHub Enterprise (blog.orange.tw)
		1 point by madmax108 on March 11, 2018 \| past
		How I Chained 4 vulnerabilities on GitHub Enterprise (blog.orange.tw)
		4 points by louis-paul on July 29, 2017 \| past
		How I Chained 4 Vulnerabilities on GitHub Enterprise, from SSRF to RCE (blog.orange.tw)
		3 points by ryanlol on July 28, 2017 \| past
		GitHub Enterprise SQL Injection (blog.orange.tw)
		346 points by urig on Jan 7, 2017 \| past \| 51 comments
		GitHub Enterprise SQL Injection (blog.orange.tw)
		1 point by phwd on Jan 7, 2017 \| past
		[Bug Bounty] GitHub Enterprise SQL Injection (blog.orange.tw)
		1 point by sankha93 on Jan 7, 2017 \| past
		Uber.com Bug Bounty: Remote Code Execution via Flask Jinja2 Template Injection (blog.orange.tw)
		5 points by phwd on March 28, 2016 \| past \| 1 comment

HN For You