iiinova — where your digital self keeps evolving

cfreal.bsky.social @cfreal.bsky.social · 23/06/2025

lightyear just got 6 times faster! Although I now work at @synacktiv.com, I proposed a PR for the tool to support threading and compression, greatly reducing the time required to dump a file. Dumping the demo /etc/passwd now takes 48s instead of 5m30. github.com/ambionics/li...

github.com

GitHub - ambionics/lightyear: lightyear is a tool to dump files in tedious (blind) conditions using PHP filters

lightyear is a tool to dump files in tedious (blind) conditions using PHP filters - ambionics/lightyear

020

cfreal.bsky.social @cfreal.bsky.social · 10/02/2025

#ten (and thus my exploits) is now compatible with python 3.13. Thanks @acervoise for the heads up.

020

cfreal.bsky.social @cfreal.bsky.social · 16/01/2025

This year again, I am lucky enough to get nominated twice for the Top Ten Hacking Techniques, for my research on iconv and PHP, and lightyear. This time feels a bit special however, as these are my last blog posts on ambionics. www.ambionics.io/blog/iconv-c... www.ambionics.io/blog/lightye...

ambionics.io

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)

A few months ago, I stumbled upon a 24 years old buffer overflow in the glibc, the base library for linux programs. Despite being reachable in multiple well-known libraries or executables, it proved r...

0124