stephenfewer.bsky.social
Senior Principal Security Researcher at @rapid7.com. Specializing in software vulnerabilities and exploitation. stephenfewer.github.io
👤 Joined on 19 October 2023
Followers
Following
Total Posts
@stephenfewer.bsky.socialFirst part of my @rapid7.com research on Zimbra dropped today! 🥳 Some highlights of this one: ☑️ Send mail as anyone ☑️ Read anyone's mail www.rapid7.com/blog/post/ve...
Show PostEverything seems pretty quiet on the CVE-2026-97229 front, soooo here's a @rapid7.com PoC that turns 248 characters into 2GB+ of Onigmo pcode and reaches system() as GitLab's git user. Requires write access to a public project. github.com/jburgess-r7/...
Show PostThey're letting me write advisories now, so I had fun with this one :-)
Show PostSlides: saelo.github.io/presentation... Recording: youtu.be/maWnIKH3JQI?... Thanks Calif for hosting and the audience for listening and asking questions! :)
Show PostA bittersweet day... Today's my last day at @greynoise.io. It's been fun, but time for something new! On Monday, I'll be starting at @censys.bsky.social. Internet scanning has always been exciting, so I'm looking forward to this new challenge! Longer version: infosec.exchange/@iagox86/116...
Show Post