Roast topics
Find topics
Roast it!
Roast topics
Find topics
Find it!
Login
From:
Blog | Jorian Woltjer
(Uncensored)
subscribe
OBS WebSocket to RCE
https://jorianwoltjer.com/blog/p/research/obs-websocket-rce
links
backlinks
Disabling password authentication of your OBS WebSocket server can have devastating consequences. We'll attack from the browser to construct an RCE payload on Windows formed from the pixels of an image, a polyglot.