All posts by John Doe

■■■■□ One-Click RCE in ASUS’s Preinstalled Driver Software. https://mrbruh.com/asusdriverhub/

■■■□□ LACED – Laser-Assisted Controlled Etching and Delayering. I built a sub-€200 PCB delayering system in my bedroom — down to 3µm precision (LACED project). https://x.com/brodescoind https://github.com/LawrenceBrode/LACED

■■■■■ Japan 🇯🇵 passes law to hack-back. This comes amid cyber attacks by state sponsored and other attacks non state actors. Some other countries with similar laws: USA: Computer Fraud and Abuse Act (18 U.S. Code § 1030) – prohibits unauthorized access and retaliation. Switzerland: Swiss Criminal Code Article 143bis – criminalizes unauthorized data access. Israel:…

■■■■□ TargetedTimeroastPublic : Tamper Active Directory user attributes to collect their hashes with MS-SNTP. https://github.com/OffsecDeer/TargetedTimeroast

■■■■■⌚️Targeted Timeroasting: Stealing User Hashes With NTP. https://medium.com/@offsecdeer/targeted-timeroasting-stealing-user-hashes-with-ntp-b75c1f71b9ac

■■■■■ 📦 Oracle VM VirtualBox – VM Escape via VGA device. https://github.com/google/security-research/security/advisories/GHSA-qx2m-rcpc-v43v

■■■■□ Hacking My Car, and probably yours— Security Flaws in Volkswagen’s App. https://loopsec.medium.com/hacking-my-car-and-probably-yours-security-flaws-in-volkswagens-app-24b34c47ba89

■■■■■ Windows 11 Hacked — Three New Pwn²Own Zero-Days Deployed. 75,000 💵 USD rewarded for Windows 11 EoP bugs. https://www.forbes.com/sites/daveywinder/2025/05/17/windows-11-hacked—three-new-zero-days-deployed-by-pwn2own-elite/

■■■■□ Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attack. Cybersecurity researchers have shed light on a new malware campaign that makes use of a PowerShell-based shellcode loader to deploy a remote access trojan called Remcos RAT. https://thehackernews.com/2025/05/fileless-remcos-rat-delivered-via-lnk.html

3️⃣ HTML to PDF Renderer: A tale of local file access and shellcode execution. https://neodyme.io/en/blog/html_renderer_to_rce/