MAJOR EXPLOIT: GitLab was Hacked with an IMAGE??
Daniel Boctor
@danielboctorAbout
I tell computers what to do I'm just here to share my experiences throughout my ongoing journey of computer science and software engineering studies. I have a passion for learning, and I hope you do too. I'm going into my 4th year of University, and am currently interning as a software engineer at Cisco Meraki.
Latest Posts
Video Description
Try SquareX for free today! 👉 https://sqrx.io/db_yt In this video, we take a deep dive into the GitLab / ExifTool metadata parsing vulnerability, which enables attackers to gain access to GitLab servers via an RCE (remote code execution). Whether you're a pen tester, security researcher, or cyber security expert, having a solid foundation in escape sequences, code evaluation, and character parsing is critical. JOIN THE DISCORD! 👉 https://discord.gg/WYqqp7DXbm 0:00 - Overview 0:26- Metadata 1:59 - DjVu 2:34 - C Escape Sequences 4:18 - Structure 11:14 - Exploit 13:45 - SquareX Hackerone report https://hackerone.com/reports/1154542 William Bowling’s report https://devcraft.io/2021/05/04/exiftool-arbitrary-code-execution-cve-2021-22204.html Vulnerable code https://github.com/exiftool/exiftool/blob/11.70/lib/Image/ExifTool/DjVu.pm Patch https://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031 SquareX socials: Twitter: https://twitter.com/getsquarex LinkedIn: https://www.linkedin.com/company/getsquarex/ Instagram: https://www.instagram.com/getsquarex/ Facebook: https://www.facebook.com/getsquarex Blog: https://labs.sqrx.com/ MUSIC CREDITS: LEMMiNO - Cipher https://www.youtube.com/watch?v=b0q5PR1xpA0 CC BY-SA 4.0 LEMMiNO - Firecracker https://www.youtube.com/watch?v=ulfoU2MziOc CC BY-SA 4.0 LEMMiNO - Nocturnal https://www.youtube.com/watch?v=epmoV2HRs9U CC BY-SA 4.0 LEMMiNO - Siberian https://www.youtube.com/watch?v=5py6E6yo7wk CC BY-SA 4.0 LEMMiNO - Encounters https://www.youtube.com/watch?v=xdwWCl_5x2s CC BY-SA 4.0 #programming #software #softwareengineering #computerscience #code #programminglanguage #softwaredevelopment #hacking #hack #cybersecurity #exploit #tracking #softwareengineer #vulnerability #pentesting #privacy #spyware #malware #cyber #cyberattack #bugbounties #ethicalhacking #JPEG #encoding #lowlevelsecurity #zeroday #zero-day #cybersecurityexplained #bugbounty #memorymanagement #gitlab #security #cybersecurity #github #git #versioncontrol #breaches #databreaches #bug #bugbounty #pentesting #penetrationtesting #BeFearlessOnline #SquareX #Befearless&SecureOnline #Cybersecurity #Privacy #Security #Cybersec
You May Also Like
Transform Your Space
AI-recommended products based on this video

21 Fitness Resistance Bands,6 Tube Pedal Ankle Puller, Multifunction Tension Rope, Natural Latex Fitness Bands for Strength Training, Tummy, Waist, Arm, Leg Slimming, Home Gym Exercise Equipment

6-Tube Pedal Resistance Band, Premium Elastic Tension Rope for Full Body Workout, Natural Latex Fitness Bands for Strength Training,Yoga Stretching Slimming Training, Home Gym Exercise Equipment

Butt Trainer, Smart Adjustable Glute Exerciser, Muscle Toning Stimulator, Portable Home Gym Accessory, Fitness Gear, Ideal for Women, Men, Adults, Strength Training, and Body Sculpting

RENRUI Twister Arm Trainer, Chest & Arm Workout Equipment for Men & Women Adjustable 5 Resistance Levels (40-130 lbs), Ergonomic Home Gym Strength Trainer with Anti-Slip Handles & Carry Bag

OSBO GradSeason Unisex Matte Kindergarten Graduation Gown Cap Tassel Set 2025

JaGely 3 Pcs Preschool Grade Graduation Set Graduation Cap with 2025 Tassel Graduation Stole Sash with Diploma Certificates Set for Students Supplies Teachers Parents Graduation Gifts, Multicolor

OSBO GradSeason Unisex Matte Adult Graduation Gown Cap Tassel Set 2025

OSBO GradSeason Unisex Matte Kindergarten Graduation Gown Cap Tassel Set 2025

Yes4All Aerobic Stepper Exercise Steps with Adjustable Height, Fitness Stepper for Home & Gym, Aerobics, Cardio, Weights, Yoga

Figure 8 Fitness Resistance Band 3 Pcs, Elastic Rope Stretch Bands for Working Out, Foot, Leg, Arm, Back, Chest, Portable Home Office Training Exercise Stretcher for Yoga Pilates Physical Therapy

NEW YOUNG 3 Pack Capri Leggings for Women with Pockets-High Waisted Tummy Control Workout Gym Yoga Pants

iaoja High Waisted Biker Shorts for Women-5"/8" Tummy Control Fitness Athletic Workout Running Yoga Gym Shorts

Pet Gate, Foldable Dog Fence, Wooden Dog Gate for Doorways, House, Stairs, Halls

Retractable Baby Gate, No-Drill Extra Wide Design (Up to 52"), Reinforced Mesh Safety Barrier for Stairs, Hallways and Doorways, Indoor/Outdoor Use (Black, Large)

VEVOR 3 in 1 Plyometric Jump Box, 20/18/16 Inch Cotton Plyo Box, Platform & Jumping Agility Box, Anti-Slip Fitness Exercise Step Up Box for Home Gym Training, Conditioning Strength Training, Black

VEVOR 3 in 1 Plyometric Jump Box, 16/14/12 Inch Wooden Plyo Box, Platform & Jumping Agility Box, Anti-Slip Fitness Exercise Step Up Box for Home Gym Training, Conditioning Strength Training, Black







![Quant Finance with Python and Pandas | 50 Concepts you NEED to Know in 9 Minutes | [Getting Started]](https://imgz.pc97.com/?width=500&fit=cover&image=https://i.ytimg.com/vi/b9RgHa1CnH4/hqdefault.jpg)