public attribution can be found here!
we found a real SQLi fix had been written and merged into ProFTPD's dev branch back in July but was never backported to the actual 1.3.9 release.
the scariest bugs aren't always undiscovered ones, sometimes they're already-fixed bugs that never made it into releases. catching that gap is just as valuable as finding the bug in the first place.
this is one small result from a bigger effort we're building with project apex.
had the pleasure of meeting @programmer at @Ai4Conferences yesterday.
was awesome to meet the father of x402 and even cooler to hear that he was familiar with zauth.
great times ahead. so inspired and ready to continue building this beast larger than ever.
landing page has been updated, will be adding more with time and growth! vector page will be updated next as well.
coincidentally, today we crossed the line of 50 whitebox scans since release! to all who have scanned - thank you for your lovely feedback, it has helped us improve our methodology greatly.
lots of progress towards enterprise as well - officially GDPR compliant, working towards ISO 27001 as well. we blew our first enterprise customer away - they were shocked at our turnaround time and discoveries on their private subnet. more to come in our blog section soon!
