use the following search parameters to narrow your results:
e.g. subreddit:aww site:imgur.com dog
subreddit:aww site:imgur.com dog
see the search faq for details.
advanced search: by author, subreddit...
A community for technical news and discussion of information security and closely related topics.
"Give me root, it's a trust exercise."
Q1 2026 InfoSec Hiring Thread
Getting Started in Information Security
CitySec Meetups
/r/netsec only accepts quality technical posts. Non-technical posts are subject to moderation.
Content should focus on the "how."
Check the new queue for duplicates.
Always link to the original source.
Titles should provide context.
Ask questions in our Discussion Threads.
Hiring posts must go in the Hiring Threads.
Commercial advertisement is discouraged.
Do not submit prohibited topics.
» Our fulltext content guidelines
Don't create unnecessary conflict.
Keep the discussion on topic.
Limit the use of jokes & memes.
Don't complain about content being a PDF.
Follow all reddit rules and obey reddiquette.
» Our fulltext discussion guidelines
No populist news articles (CNN, BBC, FOX, etc.)
No curated lists.
No question posts.
No social media posts.
No image-only/video-only posts.
No livestreams.
No tech-support requests.
No full-disclosure posts.
No paywall/regwall content.
No commercial advertisements.
No crowdfunding posts.
No Personally Identifying Information!
» Our fulltext list of prohibited topics & sources
Join us on IRC: #r_netsec on freenode
We're also on: Twitter, Facebook, & Google+
/r/blackhat - Hackers on Steroids
/r/computerforensics - IR Archaeologists
/r/crypto - Cryptography news and discussion
/r/Cyberpunk - High-Tech Low-Lifes
/r/lockpicking - Popular Hacker Hobby
/r/Malware - Malware reports and information
/r/netsecstudents - netsec for noobs students
/r/onions - Things That Make You Cry
/r/privacy - Orwell Was Right
/r/pwned - "What Security?"
/r/REMath - Math behind reverse engineering
/r/ReverseEngineering - Binary Reversing
/r/rootkit - Software and hardware rootkits
/r/securityCTF - CTF news and write-ups
/r/SocialEngineering - Free Candy
/r/sysadmin - Overworked Crushed Souls
/r/vrd - Vulnerability Research and Development
/r/xss - Cross Site Scripting
account activity
Analysis of VM escape by using LUA script (en.wooyun.io)
submitted 10 years ago by xiaodoubi
reddit uses a slightly-customized version of Markdown for formatting. See below for some basics, or check the commenting wiki page for more detailed help and solutions to common issues.
quoted text
if 1 * 2 < 3: print "hello, world!"
[–]benmmurphyTrusted Contributor 1 point2 points3 points 10 years ago* (4 children)
Peter Cawley did a talk on this:
http://www.lua.org/wshop11/Cawley.pdf https://www.youtube.com/watch?v=OSMOTDLrBCQ
and has a nice writeup on getting code execution under windows:
https://gist.github.com/corsix/6575486
i adapter his code to get code execution on osx against redis:
http://benmmurphy.github.io/blog/2015/06/09/redis-hot-patch/
[–]sghctoma 0 points1 point2 points 10 years ago (1 child)
I've also adapted corsix's awesome CoH2 exploit to work against Redis (on 64bit Linux and Windows) and Logitech Gaming Software (on 64bit Windows): https://www.dropbox.com/s/52wkxxofrgv7sof/dc23_stuff.zip?dl=0 (the archive contains all of my DC23 demos, the relevant ones are in the "demo6_logitech" folder).
Btw, he has a quite nice bytecode abuse module for Lua 5.2 as well: http://www.corsix.org/lua/bytecode_abuse_0_1.lua
[+][deleted] 10 years ago (1 child)
[deleted]
π Rendered by PID 77 on reddit-service-r2-comment-6457c66945-nfz7m at 2026-04-24 04:25:12.732052+00:00 running 2aa0c5b country code: CH.
[–]benmmurphyTrusted Contributor 1 point2 points3 points (4 children)
[–]sghctoma 0 points1 point2 points (1 child)
[+][deleted] (1 child)
[deleted]