corpus.blog
42,390 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0fcb0-b475-70f0-8435-478f47b2a9f9

ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam

elttam.com · published 23 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at elttam.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
25
Words captured
7,373

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/elttam/publications/blob/master/writeups/elttam-tac_plus_rce_fmtstring_advisory.txt
github.com
https://en.wikipedia.org/wiki/Authenticated_encryption
en.wikipedia.org
https://datatracker.ietf.org/doc/html/rfc8907
datatracker.ietf.org
https://datatracker.ietf.org/doc/html/rfc9887
datatracker.ietf.org
https://blog.talosintelligence.com/salt-typhoon-analysis/
blog.talosintelligence.com
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239a
cisa.gov
https://attack.mitre.org/techniques/T1040/
attack.mitre.org
https://attack.mitre.org/techniques/T1556/
attack.mitre.org
https://www.sygnia.co/blog/fire-ant-evolves-from-hypervisors-to-trusted-infrastructure/
sygnia.co
https://datatracker.ietf.org/doc/html/rfc1492
datatracker.ietf.org
https://www.openwall.com/articles/TACACS+-Protocol-Security
openwall.com
https://www.shrubbery.net/tac_plus/
shrubbery.net
https://agrrrdog.blogspot.com/2015/11/3-attacks-on-cisco-tacacs-bypassing.html
agrrrdog.blogspot.com
https://github.com/facebook/tac_plus
github.com
https://nvd.nist.gov/vuln/detail/CVE-2023-45239
nvd.nist.gov
https://github.com/takeshixx/tac_plus-pre-auth-rce
github.com
https://nvd.nist.gov/vuln/detail/CVE-2023-48643
nvd.nist.gov
https://en.wikipedia.org/wiki/Global_Offset_Table
en.wikipedia.org
https://www.scs.stanford.edu/brop/bittau-brop.pdf
scs.stanford.edu
https://www.synacktiv.com/publications/exploiting-a-blind-format-string-vulnerability-in-modern-binaries-a-case-study-from
synacktiv.com
https://cs155.stanford.edu/papers/formatstring-1.2.pdf
cs155.stanford.edu
Patch the Planet: a Daybreak initiative to support open source maintainers Read at the source ↗
openai.com
https://cwe.mitre.org/data/definitions/134.html
cwe.mitre.org
https://www.shrubbery.net/tac_plus/CHANGES
shrubbery.net
https://github.com/facebook/tac_plus/commit/7969f21b0ff4a40923494771658320f030d518e5
github.com