Pinned
💥🐹 4 new Go Code Review Labs just dropped! 🐹💥
Read the code, peek at the diff, find the bug.
Sharpen your skills:
PentesterLab
@PentesterLab
Don’t just learn tools and payloads. Learn why vulnerabilities exist. Hands-on web hacking, security code review, and real-world CVE labs.
- A dev added return; in front of eval() so user input "can't execute." PHP hoists class declarations at compile time... Declare a class the app autoloads later, and your constructor runs. return; stops statements. It doesn't stop declarations. 💥RCE💥 New lab, based on
- How much intelligence does this patch reveal? In a public repository, a security patch can also become the advisory. As LLMs make vulnerability reconstruction cheaper, maintainers may need to consider not only whether a fix works, but what it reveals. New article fromHow much intelligence does this patch reveal? Once a security patch lands in a public repository, it can become the advisory. LLMs are making it dramatically cheaper to reconstruct vulnerabilities from commits before defenders have deployed the fix. pentesterlab.com/blog/bletchley…
