The forgotten sibling: unauthenticated RCE in Yamcs mission control
Yamcs patched a YAML template injection but left its twin — the reconfigure path — on the old unsafe renderer. One unauthenticated request runs a shell command on mission control.
mh0m_
Notes on reverse engineering, exploitation, and CTF.
whoami
Starting a place to dump notes on reversing, pwn, and CTF.