dolphino
dolphinow.bsky.social
dolphino
@dolphinow.bsky.social
IT Security
Reposted by dolphino
🐝 New blog post at skyblue.team/posts/unsafe...

At Airbus CERT, we worked on the sudo CVE-2025-32463 to create detection and hunting rules.
Based on the underlying vulnerability, we developed an eBPF based tool to monitor unsafe chroot behavior regarding NSS reloading.

github.com/airbus-cert/...
Analyzing the unsafe chroot behavior of sudo CVE-2025-32463 | Sky Blueteam
A story of a bee, a sandwich and a crab
skyblue.team
November 4, 2025 at 3:28 PM
Reposted by dolphino
We just released an $I30 INDX carver written in Rust! 🦀 🚀

github.com/airbus-cert/...
GitHub - airbus-cert/indx-rs: $I30 INDX Carver
$I30 INDX Carver. Contribute to airbus-cert/indx-rs development by creating an account on GitHub.
github.com
June 25, 2025 at 11:43 AM