Aggregator

HackTheBox Coder [Bloodhound AD Enumeration + ADCS CVE-2022-26923]

fdvoid0's blog
2 years 3 months ago
简述

本文是insane难度的HTB Coder机器的域渗透部分，其中Bloodhound AD Enumeration, ADCS CVE-2022-26923等域渗透提权细节是此box的特色，主要参考0xdf’s blog coder walkthrough和HTB的coder官方writeup paper记录这篇博客加深记忆和理解，及供后续做深入研究查阅，备忘。

253

OpenAI Begins Tackling ChatGPT Data Leak Vulnerability

Embrace The Red
2 years 3 months ago

OpenAI seems to have implemented some mitigation steps for a well-known data exfiltration vulnerability in ChatGPT. Attackers can use image markdown rendering during prompt injection attacks to send data to third party servers without the users’ consent.

The fix is not perfect, but a step into the right direction. In this post I share what I figured out so far about the fix after looking at it briefly this morning.

Managed ad