PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

User-to-User Authentication: Down the Rabbit Hole – Part 1

specterops.io | research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A deep dive into Kerberos User-to-User (U2U) authentication and the primitives behind UnPAC-the-Hash, ADCS and shadow credentials.
Published
Collected

Related coverage

research · bughunters.google.com
Changes to the Chrome VRP
Today we are announcing changes to the [Chrome Vulnerability Rewards Program](about/rules/chrome-friends/chrome-vulnerability-reward-program-rules), adjusting our reward amounts and program categories to reward deeper security research, recognize high-value fixes across more severity tiers, and provide new opportunities for researcher recognition.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · crowdstrike.com
Build an Intelligence Advantage with Falcon Next-Gen SIEM
Falcon Next-Gen SIEM unifies threat intelligence with security telemetry to strengthen detection, accelerate investigations, and build a smarter foundation for the agentic SOC.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
Back