thx @_sy1vi3 for surprise ragebaiting me with first class literally at the last minute on top of paying for my DEF CON flights, on top of many other amazing folk who helped me out throughout the week
Type text into Wikipedia. Get the shell's output back on the page.
A bug introduced 22 years ago.
Still alive in the wild, until it was found by V12.
Here's how EasyTimeline allowed arbitrary code execution (RCE) directly from wikitext.
If you like my reverse-engineering, deobfuscation or malware work, I'm looking for a job - I am a security researcher with a knack for deep tooling/capability development and I've also done blue-team/pentesting work.
DM me if you want my resume or if you want to ask questions!
I continue being a reverse-engineering thing.
LyticEnzyme has been updated to support both closed and open type worlds, and to enable recovery of method symbols even from stripped bins!
Stretch goal is pseudocode cleanup of SubstrateVM snippets using a custom Lang. Repr.
