retr0blog retr0.blog

Llama's Paradox - Delving deep into Llama.cpp and exploiting Llama.cpp's Heap Maze, from Heap-Overflow to Remote-Code Execution.

0reg.dev·67w

Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution

0reg.dev·97w

ROPing Routers from scratch: Step-by-step Tenda Ac8v4 Mips 0day Flow-control ROP -> RCE

0reg.dev·101w

Electron Math: 8 Million User Note App Stored XSS -> RCE bypassing nodeintegration via preload.js in electron

0reg.dev·103w

Supply-Chain Attacks in LLMs: From GGUF model format metadata RCE, to State-of-The-Art NLP Project RCEs

0reg.dev·106w

OSS Sec: From Path-traversals to RCE.

0reg.dev·112w

Injecting customgpt.ai demo: How to jailbreak a strictly prompt-engineered GPT-4 in wild?

0reg.dev·117w

MFKeyAttack: MIFARE Classic Protocols Analyzing && LFSR + CRYPTO1 Exploitations

0reg.dev·118w

Hacking a Router: Tenda AC8 V4 Stack Overflow & PoCs

0reg.dev·118w

Analysis: Tcache under glibc 2.27 && Bypass double free

0reg.dev·118w

Log in to enable infinite scrolling