user avatar
raptor
@0xdea
When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.
Europe
Joined July 2010
  • Pinned
    user avatar
    It finally happened… I’ve been published on #Phrack! After more than five years since the last issue, #Phrack70 is out, featuring my article “Exploiting a Format String Bug in Solaris CDE”! I guess I can retire now 🐛 phrack.org/issues/70/13.h…
  • user avatar
    CVE-2022-26766: the CoreTrust bug "For years, macOS allowed any root certificate when checking code signatures, making code signing completely useless." // bug discovered by @LinusHenze // writeup by @zhuowei worthdoingbadly.com/coretrust/
  • user avatar
    “unprivileged users with UID > INT_MAX can successfully execute any systemctl command” 😱 github.com/systemd/system…
  • user avatar
    Sniffing SSH passwords TL;DR # pgrep -l sshd 6235 sshd # strace -f -p 6235 -e trace=write -o capture networklogician.com/2021/04/17/sni…
  • user avatar
    Automating binary vulnerability discovery with Ghidra and @semgrep, by yours truly 💚 security.humanativaspa.it/automating-bin…
  • user avatar
  • user avatar
    Command line Russian roulette #donttrythisathome
  • user avatar
    As it turns out, a non-negligible number of people in infosec don’t know what L0phtCrack is and, I assume by extension, what L0pht is. I suppose it’s somewhat normal but it shouldn’t be. Our roots are important. We should not forget them. I think.
  • user avatar
    The upcoming #Ghidra version 10 is full of new juicy features! Including the much anticipated debugger… github.com/NationalSecuri…
  • user avatar
    Good primer on #windows access token abuse by @Defte_ @sensepost @orangecyberdef Abusing Windows’ tokens to compromise #activedirectory without touching LSASS sensepost.com/blog/2022/abus… Tool release: github.com/sensepost/impe…
  • user avatar
  • user avatar
    This remains a pretty accurate definition of hacking 🤟
    Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect.
  • user avatar
    Always a great read: dolosgroup.io/blog/2021/7/9/… “We took a locked down FDE laptop, sniffed the BitLocker decryption key coming out of the TPM, backdoored a virtualized image, and used its VPN auto-connect feature to attack the internal corporate network.”
  • user avatar
    Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent 🤨