[Adorapuff]

Well, its a lonely thursday and I want to root some boxes
I got my Shodan account ready for scanning and I got a sexy rootkit
Now all I need is the step in the middle, a semi-decent public exploit.
What do you guys like to use when looking for boxes.

[Dyme]

When I started selling boxes almost a year ago I used CVE-2013-4878, but I assume now that it's incredibly saturated considering everyone was using it. Some more recent shit that the kids have been using include CVE-2013-6955 and the Blackarmor NAS vuln (which I think starshit disclosed on here?). I have something that uses a combination of a public exploit + my own priv9 exploit in case I for some reason need random boxes again, but I really don't see a point.

Spoiler:

But since you "eat 0days for breakfast" I would just use one in your vast collection.

[Adorapuff]

When I started selling boxes almost a year ago I used CVE-2013-4878, but I assume now that it's incredibly saturated considering everyone was using it. Some more recent shit that the kids have been using include CVE-2013-6955 and the Blackarmor NAS vuln (which I think starshit disclosed on here?). I have something that uses a combination of a public exploit + my own priv9 exploit in case I for some reason need random boxes again, but I really don't see a point.

Spoiler:

But since you "eat 0days for breakfast" I would just use one in your vast collection.

I eat 0 day as much as I'm a kernel programmer.