Top all-time · #885
Rapid7
Company blog · rapid7.com/blogsecurity
Rapid7 is the company blog at rapid7.com, writing about security. Since 2011, 77 different Hacker News readers have linked it 117 times, most often “PostgreSQL psql SQL injection (FIXED)”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Rarely recommended · 0 of 40 sampled comments recommend it?
Why HN links it
Linked mostly as a security reference: its blog posts on specific CVEs and vulnerabilities, and its Metasploit and vulnerability database pages. Many mentions are job listings rather than discussion of the writing.
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Outpace attackers with the only endpoint to cloud, unified cybersecurity platform. Build business resilience with expert-led 24/7 MDR.
Most-linked posts?
- PostgreSQL psql SQL injection (FIXED)5 people · 5 mentions · first linked 2025-02-14
- The Chrysalis Backdoor: A Deep Dive into Lotus Blossom's Toolkit5 people · 5 mentions · first linked 2026-02-02
- /blog/post/2022/06/06/the-hidden-harm-of-silent-patches/2 people · 4 mentions · first linked 2024-03-05
- A Deep Dive into the Morris Worm (2019)2 people · 3 mentions · first linked 2023-11-02
- /security/disclosure/2 people · 2 mentions · first linked 2024-03-05
- Backdoor found in court recording software JAVS2 people · 2 mentions · first linked 2024-05-23
- /blog/post/2013/07/02/a-penetration-testers-guide-to-ipmi/2 people · 2 mentions · first linked 2023-10-02
- Total Compromise of Physical Barracuda ESG Appliances2 people · 2 mentions · first linked 2023-06-10
What Hacker News says?
That was the idea. There's a name for it - zip bomb. https://en.wikipedia.org/wiki/Zip_bomb A superficial search leads to things like https://www.rapid7.com/db/modules/auxiliary/dos/http/gzip_bo... https://stackoverflow.com/questions/1459673 You really want to be careful about potentially breaking laws ...
Comment linking /db/modules/auxiliary/dos/http/gzip_bomb_dos
on “A Facebook crawler was making 7M requests per day to my stupid website”Submitted Widespread exploitation of critical remote code execution in Apache Log4j as a story · 197 points
HN discussionThat's assuming the text is not corrupted or maliciously modified. There were (are) _numerous_ vulnerabilities due to parsing/escaping of invalid UTF-8 sequences. Quick googling (not all of them are on-topic tho): https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-po... https://www.cve.org/CVERecord/SearchResults?query=utf-8
Comment linking /blog/post/2025/02/13/cve-2025-1094-postgresql-psql-sql-injection-fixed/
on “UTF-8 is a brilliant design”Submitted JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (Fixed) as a story · 32 points
HN discussionRapid7 | Austin, TX | Sr. UI Developer | Full Time, Onsite | http://www.rapid7.com Rapid7 is the leading provider of security risk intelligence solutions. Rapid7's integrated vulnerability management and penetration testing products, Nexpose and Metasploit, empower organizations to obtain accurate, actionable and contextual intelligence into their threat and risk posture. Rapid7's solutions are being used by more th…
Comment linking /
on “Ask HN: Who is hiring? (July 2015)”Submitted Securely Disposing of Smart Devices as a story · 12 points
HN discussionRapid7 | Dublin, Ireland / Cambridge, MA / Toronto, Canada | Software Engineer | Full-Time - ONSITE Rapid7 is probably known best as the company behind metasploit. While Rapid7 is a security company you will not have to be a security expert to work with us. See https://www.rapid7.com/company/jobs.jsp for the complete list of job openings. The Dublin Positions are for Logentries, a Log Management solution and we are…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (October 2016)”Submitted Rapid7 Lays Off Workers as a story · 4 points
HN discussionRapid7 | Belfast, Northern Ireland / Cambridge, MA / Dublin, Ireland / Los Angeles, CA | Software Engineer, Platform Delivery | Full-Time - ONSITE Rapid7 is probably known best as the company behind metasploit. While Rapid7 is a security company you will not have to be a security expert to work with us. See https://www.rapid7.com/company/jobs.jsp for the complete list of job openings. All these jobs are for Platform…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (May 2017)”Submitted Rapid7 Acquires Logentries for $68 million as a story · 4 points
HN discussionRapid 7 | LA - El Segundo, CA / Austin TX / Dublin, Ireland / Belfast, Northern Ireland / REMOTE(research) Rapid7 is probably known best as the company behind metasploit. We currently have a bunch of openings for almost anything from security research, frontend development or devops. While Rapid7 is a security company you will not have to be a security expert to come work with us. See https://www.rapid7.com/company/…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (July 2016)”Submitted BPFdoor in Telecom Networks: Sleeper Cells in the Backbone as a story · 3 points
HN discussion"3-10 years of software development" - why cap it at 10? https://www.rapid7.com/company/jobs.jsp?gh_jid=104868
Comment linking /company/jobs.jsp?gh_jid=104868
on “Ask HN: Who is hiring? (September 2016)”Submitted A Deep Dive into the Morris Worm (2019) as a story · 3 points
HN discussionRapid7 - https://rapid7.com - Full-Time - ONSITE - Torronto, Dublin Dublin Positions: Lead UX Designer, Senior Software Engineer - Architecture, Senior Software Engineer, Platform Delivery (devops) Toronto Positions: Platform Delivery (devops) https://www.rapid7.com/company/jobs.jsp The Dublin Positions are all focused on Logentries, which is a real-time log management and analytics service targeting mostly the DevO…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (September 2016)”Submitted PostgreSQL psql SQL injection (FIXED) as a story · 3 points
HN discussionRapid7 | DevOps | Cambridge, MA & Austin, TX & El Segundo, CA (LA Area) | ONSITE | Full-time Rapid7 is probably known best as the company behind Metasploit. Besides Metasploit, Rapid7 focuses on providing user focused security solutions. Our Cambridge office focuses on Incident detection and response using behavioural analysis to identify attacks and only alert on those as well as Komand our security orchestration a…
Comment linking /careers/jobs/
on “Ask HN: Who is hiring? (September 2018)”Submitted Backdoor found in court recording software JAVS as a story · 3 points
HN discussionUsing this[1] humorous but still mostly effective methodology, that model seems to be okay[2], at least for now. [1] https://twitter.com/todb/status/648956328292057088 [2] http://www.rapid7.com/db/search?utf8=%E2%9C%93&q=SB6141&t=a
Comment linking /db/search?utf8=%E2%9C%93&q=SB6141&t=a
on “ARRIS Cable Modem Has a Backdoor in the Backdoor”Submitted A Deep Dive into the Morris Worm as a story · 3 points
HN discussionRapid7 | Application Security | San Francisco, Los Angeles, Belfast, Stockholm, Remote | Full-Time Rapid7 is building the next generation technology to effectively detect vulnerabilities, help developers quickly fix them, and protect live applications in production from compromise. Join the team building intelligence at scale to make the world a more secure place. Positions Available: * Data Pipeline Engineer - Kafk…
Comment linking /careers/jobs/detail/?jid=R2314
on “Ask HN: Who is hiring? (February 2021)”Submitted Java Serialization: A Practical Exploitation Guide as a story · 3 points
HN discussionI was hoping for some sort of image or binary processing exploit too, but the attack just uses a Postgres vulnerability to execute arbitrary shell code. [0][1] The fact that the executed code was buried in an image seems to just be a camouflage step for the attacker. 0. https://github.com/nixawk/pentest-wiki/blob/master/2.Vulnera... 1. https://www.rapid7.com/db/modules/exploit/linux/postgres/pos...
Comment linking /db/modules/exploit/linux/postgres/postgres_payload
on “A picture got my PostgreSQL database to start mining Monero”Submitted Inside An Exposed WebDAV Malware Delivery Lab as a story · 2 points
HN discussionRapid7 | SRE/DevOps | Cambridge, MA, Austin, TX | ONSITE | Full-time Rapid7 is probably known best as the company behind Metasploit. While Rapid7 is a security company you will not have to be a security expert to work with us. See https://www.rapid7.com/company/jobs.jsp for the complete list of job openings. We have multiple openings for our SRE teams in Austin and Cambridge for different experience levels. For the…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (August 2018)”Submitted CVE-2024-4978: Backdoored Court Conference App JAVS Apparent Supply Chain Attack as a story · 2 points
HN discussionRapid7 - Austin, TX - Rapid7.com - ONSITE Looking for a Front End Engineer, all levels (junior, mid, or senior) to come and join us at Rapid7 and be part of the security software revolution. Join the Threat Exposure Management team in Austin, Texas and work on strategic, highly-visible products and features utilizing cutting edge technologies. We seek self-organized, highly motivated team members whose focus is to…
Comment linking /company/jobs.jsp?gh_jid=89916
on “Ask HN: Who is hiring? (September 2015)”Submitted Malicious advertisements for WinSCP and PuTTY lead to ransomware as a story · 2 points
HN discussionRapid7 | Platform Delivery | Cambridge, MA | ONSITE | Full-time Rapid7 is probably known best as the company behind Metasploit. While Rapid7 is a security company you will not have to be a security expert to work with us. See https://www.rapid7.com/company/jobs.jsp for the complete list of job openings. We are looking for someone to join Platform Delivery, our version of SRE. We are completely in AWS and are just in…
Comment linking /company/jobs.jsp
on “Ask HN: Who is hiring? (July 2018)”Submitted A Deep Dive into the Morris Worm (2019) as a story · 2 points
HN discussion
