<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Rce on A blog about stuff I do</title>
    <link>https://blog.ar-lacroix.fr/tags/rce/</link>
    <description>Recent content in Rce on A blog about stuff I do</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language>
    <copyright>© 2026 Lacroix Raphaël (Chepycou)</copyright>
    <lastBuildDate>Tue, 20 Oct 2026 01:00:00 +0600</lastBuildDate><atom:link href="https://blog.ar-lacroix.fr/tags/rce/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title>Reviving GLPI Agent Abuse with ESC17</title>
      <link>https://blog.ar-lacroix.fr/posts/corp/esc-17-glpi/</link>
      <pubDate>Tue, 20 Oct 2026 01:00:00 +0600</pubDate>
      
      <guid>https://blog.ar-lacroix.fr/posts/corp/esc-17-glpi/</guid>
      <description>&lt;p&gt;This article explores how ESC17 certificate abuse revives an old GLPI agent tactic, enabling attackers to achieve RCE without needing access to the GLPI server.&lt;/p&gt;</description>
      <media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://blog.ar-lacroix.fr/cover_11626006384831769694.svg" />
    </item>
    
  </channel>
</rss>
