Alpine Linux28 *sshole: OpenSSH on musl Accepts Any Password Over 256 Bytes
On musl libc without PAM, OpenSSH treated any password of 257 to 1,024 bytes as valid for accounts whose shadow field is…
oxfemale·
Nov 5·
33 min
·28
// November 2026
4 postsAlpine Linux28 
EDR Evasion59 Turning Chrome Remote Desktop into Pure Red Team Ops
Smukx.E (@5mukx) at ZeroTrace Lab (29 July 2026) traces the Chrome Remote Desktop share bar to Win32 dialog 110 in remoting_core.dll, zeros…
oxfemale·
Nov 5·
20 min
·59
Active Directory51 Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication
Raj Patel (SpecterOps, 23 Oct 2026) shows how an attacker who already owns a signed LDAP session can relay a coerced Windows…
oxfemale·
Nov 5·
30 min
·51
Exploit Development32 Picking apart PHP2Shell
PHP2Shell is two PHP engine bugs, CVE-2026-109618 and CVE-2026-109619. One leaves an unfinished HashTable Bucket after a memory-limit bailout; the other leaves…
oxfemale·
Nov 5·
39 min
·32