cfreal

Charles Fol
Security engineer at Ambionics.
Maintainer of PHPGGC.
List of CVEs and exploits.

Google CTF Quals 2019: GLotto Writeup

2019-06-27

The Google CTF 2019 Quals happened this week-end and a friend told me about the GLotto web challenge, which seemed really fun. I had a go at it and here's my writeup.

Continue reading »

CARPE (DIEM): CVE-2019-0211 Apache Root Privilege Escalation

2019-04-03

Since version 2.4.17 (Oct 9, 2015), up until version 2.4.38 (Apr 1, 2019), Apache HTTP suffers from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call.

Continue reading »