blasty
aaaaaand we just finished a dumb request smuggling PoC for (Open)LiteSpeed httpd live on stream: https://warez.sl0p.foo/ols-h2-smuggle/ their commit hygiene is designed to hide security fixes, didn't manage to find a CVE/report anywhere. all results will be published on http://warez.sl0p.foo -- beware, minimal curation! ;^)
blasty
good morning! I'm currently broadcasting some random/light clanky VR work @ https://sl0p.foo/s/blasty also feel free to have a peep and join us in the http://sl0p.foo discord/IRC server! all infrastructure/architecture was vibed over the last week. expect crickets &&