Tag: static code analysis

Chaining ISC DHCP Server Features for Unauthenticated Root Remote Code Execution

Posted on by Askar

Estimated Reading Time: 15 minutesWhile doing some code analysis of network services running as root in one of my lab VMs, I came across ISC DHCP Server (dhcpd), a common DHCP implementation in Linux environments. I decided to clone the code and see what I can get from it using LLMs, I used Opus 4.6 to build a better…

Froxlor v2.0.6 Remote Command Execution (CVE-2023-0315)

Posted on by Askar

Estimated Reading Time: 8 minutesSummary about Froxlor Froxlor is a web-based server management software for Linux-based operating systems. It is primarily used to manage web hosting environments and allows users to create and manage websites, email accounts, and FTP accounts. It also provides tools for monitoring server resources and managing backups. Froxlor is written in PHP and uses a…