ToolShell, Patch Bypass, and the AI That Might Have Seen It Coming
summary
A SharePoint chain (ToolShell CVE-2025-49704/49706) yields unauthenticated remote code execution by combining an authentication bypass to toolpane.aspx with an insecure deserialization gadget; Microsoft issues a July patch, attackers quickly reverse-engineer it, and an emergency weekend fix follows. Demo reproduces RCE using k and Visonet payloads; practical bypasses include slash and trailing-space bypasses that evade URL and web.config filters. An AI-driven pipeline (decompilation, git diffs, CodeX/GPT/Claude) finds the auth bypass reliably and the deserialization trick when fed prior research; results and scripts live on the attached GitHub.
AI-written summary · about
chapters (14)
- 0:00ToolShell vulnerability chain
- 3:18SharePoint exploit demo
- 6:51Exploitation timeline and patch bypasses
- 9:46Authentication bypass overview
- 13:21Microsoft patch bypass
- 16:29Deserialization and patch bypasses
- 21:04AI experiment setup
- 25:20Reverse engineering with AI
- 29:56Static analysis of patches
- 31:22Dynamic SharePoint testing
- 35:22AI experiments: key lessons
- 40:01AI in security and fuzzing
- 43:11Defensive strategies
- 46:43Q&A
related talks
41mThinking Outside the Sandbox - Violating Trust Boundaries in Uncommon Ways
45mThe Code Behind The Vulnerability
55m2024 Security BSides // John Hammond
58mThe Code Behind The Vulnerability
48m"Sneaking Past Device Guard"
43mWho to blame? The AI, The Programmer, or The Prompt?
28mUnveiling Remote Code Execution: How Vulnerabilities Lead to System Takeovers
01h 02mPrompt-Jacking: The Rise of a New Supply Chain Risk