All gists

vee1e
Last active 3 hours ago
0 0 1

Old Sessions

Category: Web Exploitation

Flag: picoCTF{s3t_s3ss10n_3xp1rat10n5_efbf6d5f}

Proper session timeout controls are critical for securing user accounts. If a user logs in on a public or shared computer but doesn’t explicitly log out (instead simply closing the browser tab), and session expiration dates are misconfigured, the session may remain active indefinitely. This then allows an attacker using the same browser later to access the user’s account without needing credentials, exploiting the fact that sessions never expire and remain authenticated.

vee1e
Last active 3 hours ago
0 0 1

This log records the issues I encountered while building the runtimeclass-debugger tool. The tool diagnoses the RuntimeClass path on a KubeEdge edge node. It answers four questions in dependency order. They are transport, bridge, CRI, and events. This document is the history behind the tool.

Every entry names three things:

  • What I expected.
  • The exact error or symptom I observed.
  • The line in the KubeEdge source where I found the root cause.

KubeEdge replaces every Kubernetes module with its fork

vee1e
Last active 3 hours ago
0 0 1

FLOSS Migration: Implementation Spec for an Autonomous Agent

Source: FLOSS Migration Document 8_10_26.md (the single reference) Status: Ready to implement Target repo: mandiant/flare-floss, branches quantumstrand (primary) and master

All file paths below are relative to the flare-floss repo root. The target repo is not present in this working directory; the implementing agent must run inside a checkout of the repo.

0. How to use this document