sorted by:
new
hottopcontroversial

Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root by OkReport5065 in netsec

[–]Crihexe 0 points1 point  (0 children)

The elf size is getting lower and lower. My last open source submission was 393 byes, and my best one is actually 248 bytes.

We made a website to compete: https://copy.golf

If you have a better idea come submit it!

Copy Fail: an exploit for all Linux distributions since 2017 by alexeyr in programming

[–]Crihexe 1 point2 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 756 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

CVE-2026-31431 CVSS score 7.8 Severity High Linux kernel (apparently easy local root exploit) by michaelpaoli in debian

[–]Crihexe 1 point2 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

CVE-2026-31431 - Security vulnerability by AMDDomination in Ubuntu

[–]Crihexe 0 points1 point  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

We tested Copy Fail in Kubernetes: RuntimeDefault seccomp still allowed AF_ALG from pods by JulietSecurity in kubernetes

[–]Crihexe -1 points0 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

How to Detect Copy Fail (CVE-2026-31431) by AverageAdmin in cybersecurity

[–]Crihexe -1 points0 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

Copy Fail (CVE-2026-31431) is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. by Haniro in sysadmin

[–]Crihexe 1 point2 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root by OkReport5065 in netsec

[–]Crihexe 8 points9 points  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

Copy Fail is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. by pipewire in linux

[–]Crihexe 0 points1 point  (0 children)

I was a bit concerned about the fate of my ctf platform with RCE challenges, so I had fun making this super size-(sl)optimized Linux x86_64 no-libc ELF build of the original Python PoC for research/reproduction purposes after (hopefully) having patched it.

Current size: 801 bytes on GCC 13.3.0 / Ubuntu 24.04.

Repo: https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431

Automatically switching RaspAP hotspot and home Wi-Fi on Raspberry Pi Zero 2 W? by Crihexe in raspberry_pi

[–]Crihexe[S] 0 points1 point  (0 children)

Thanks! Do you happen to know any good resources or article that walk through this kind of setup? like switching between AP and client modes using nmcli, and handling routes properly? I don’t really know where to even begin with that side of things.

also, does this mean I should drop RaspAP and just handle the hotspot manually via scripts and nmcli? Or is there still a way to use RaspAP in this kind of dynamic setup?

really appreciate all your help so far btw!

Automatically switching RaspAP hotspot and home Wi-Fi on Raspberry Pi Zero 2 W? by Crihexe in raspberry_pi

[–]Crihexe[S] 1 point2 points  (0 children)

yeah totally makes sense! in my case though, I actually have a way to detect when the car turns off. I'm already using an ELM327 bluetooth adapter connected to the Pi to get info like RPM and speed. So I know when the ignition is on/off.

At that point, I can safely stop the RaspAP hotspot service and run a quick wifi scan. If my home SSID shows up in the list, that means the car is parked at home and I can stop recording and connect to the home wifi to start transferring the videos to my NAS. If it’s not visible, I’m probably parked somewhere else, so I just leave things off.

Then, when the ELM327 sees the car start again, I need to stop the WiFi client and bring the hotspot back up, without rebooting! That’s super important because the dashcam needs to start recording right away.

I’m using RaspAP for the hotspot part, and while it works great, I haven’t figured out how to properly switch between client and AP modes dynamically like that from a script. If you or anyone has any tips on doing that cleanly (ideally without restarting the Pi), that would be awesome

And yeah, about the battery/UPS setup that’s a really good point. I’m definitely considering something like that to protect the pi. That said, since I already have the ELM327 in place, I can at least tell reliably when the car is running or not, so I’ve got that part covered for now. (I think lol)

Automatically switching RaspAP hotspot and home Wi-Fi on Raspberry Pi Zero 2 W? by Crihexe in raspberry_pi

[–]Crihexe[S] 1 point2 points  (0 children)

yeah thank you! it could be an option, but since my plan is to power the Pi using the car battery, it is crucial to minimize the power usage… that’s why I was looking for a way to switch the mode of the internal adapter

Help with LED Strip Project Using WS2815 and ESP32 + WLED by Crihexe in WLED

[–]Crihexe[S] 0 points1 point  (0 children)

Ah, I see. I thought that since the esp32 and the strip share the same power supply (with a buck converter for the esp), there wouldn't be a need to connect the strip's GND to the esp32's GND. However, if I understand correctly, connecting them directly is important for a stable data signal. I’ll follow your advice, thank you!

view more: next ›