@Debug_Orz

AI

Joined June 2009
  • Tweets2.3K
  • Following640
  • Followers58
19Media
Fuzzing the Shield: CVE-2022–24548 medium.com/s2wblog/fuzzing-t…
22
50
6,431
Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty github.com/hktalent/scan4all #hackerone #BugBounty #bugbountytips #hackeronereport
3
101
303
Debug_Orz retweeted
Jiska@naehrdine18 Mar 2022
Just published a @fridadotre tutorial, with a focus on iOS devices. It contains an introduction to Frida and iOS, low-level iOS interfaces (GCD, XPC, IOKit, Mach), and Objective-C instrumentation. youtube.com/watch?v=h070-YZK… youtube.com/watch?v=qpEIRe2C… youtube.com/watch?v=x48y2ehf…
6
190
4
540
Learn how to fuzz Adobe Reader and finding bugs in closed-source applications in exercise 8 of Fuzzing 101 : github.co/fuzzing101
103
322
Cobalt Strike: Decrypting DNS Traffic – Part 5 blog.nviso.eu/2021/11/29/cob…

Cobalt Strike: Decrypting DNS Traffic – Part 5

Cobalt Strike beacons can communicate over DNS. We show how to decode and decrypt DNS traffic in this blog post. This series of blog posts describes different methods to decrypt Cobalt Strike traff…

blog.nviso.eu
65
2
157
Blue Team fundamentals Part Two: Windows Processes. #infosec #blueteam #redteam securitybytes.io/blue-team-f…
4
223
2
763
Find samples that are used in attacks against Gitlab CVE-2021-22205 on @virustotal Enterprise using this query I'll share a YARA rule in a second virustotal.com/gui/search/co… xitter.cf/campuscodi/status/1456…
1
29
1
76
Debug_Orz retweeted
/r/netsec@_r_netsec4 Nov 2021
Finding and Fixing DOM-based XSS with Static Analysis blog.mozilla.org/attack-and-…

Finding and Fixing DOM-based XSS with Static Analysis – Attack & Defense (Archive)

Despite all the efforts of fixing Cross-Site Scripting (XSS) on the web, it continuously ranks as one of the most dangerous security issues in software. In particular, DOM-based XSS is ...

blog.mozilla.org
11
30
Debug_Orz retweeted
thapr0digy@rshift4 Nov 2021
I love reading about how people use CodeQL to find bugs. Great write-up
SentinelOne
@SentinelOne4 Nov 2021
🐧New on SentinelLabs! Meet CVE-2021-43267! @maxpl0it has discovered a heap overflow #vulnerability in the #TIPC module of the #Linux Kernel which can allow attackers to compromise an entire system. sentinelone.com/labs/tipc-re… #CVE #Kernel #HeapOverflow #infosec cc:@LabsSentinel

CVE-2021-43267: Remote Linux Kernel Heap Overflow | TIPC Module Allows Arbitrary Code Execution |...

SentinelLabs has discovered a heap overflow vulnerability in the TIPC module of the Linux Kernel which can allow attackers to compromise an entire system.

sentinelone.com
2
6
22
Debug_Orz retweeted
HAMZA@Cyb3rSn0rlax1 Nov 2021
🆕 [NEW Blogpost] 👉 Detecting CONTI CobaltStrike Lateral Movement Techniques - Part 2 unh4ck.com/detection-enginee… Hope it can help 😊
6
131
4
388
Contents of my workshop “fuzzing open source software with afl” at Texas cyber summit 2021 is available here: fuzzing.in This covers fuzzing on Linux. Enjoy!I am continually evolving my contents for various conferences. Like, share and retweet.
4
38
2
114
Debug_Orz retweeted
cts🌸
@gf_25626 Oct 2021
New blog post. I hope it will be a beginner-friendly tutorial. github.com/stong/how-to-expl…

GitHub - stong/how-to-exploit-a-double-free: How to exploit a double free vulnerability in 2021....

How to exploit a double free vulnerability in 2021. Use After Free for Dummies - stong/how-to-exploit-a-double-free

github.com
14
251
9
982
Debug_Orz retweeted
Raz0r
@theRaz0r23 Sep 2021
New post: Using CodeQL to detect client-side vulnerabilities in web applications raz0r.name/articles/using-co…

Using CodeQL to detect client-side vulnerabilities in web applications | Raz0r — Web3 Security

GitHub’s CodeQL is a robust query language originally developed by Semmle that allows you to look for vulnerabilities in the source code. CodeQL is known as a tool to inspect open source repositori...

raz0r.name
1
35
125
Apple releases urgent updates for #iOS, macOS to patch 3 new 0-day flaws actively exploited in the wild. Attacks involve: CVE-2021-30860 — maliciously crafted PDFs CVE-2021-30858 — maliciously crafted web content CVE-2021-30869 — malicious app thehackernews.com/2021/09/ur… #infosec

Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days

Apple Releases Urgent Updates for Mac OS X and iOS to Fix Actively Exploited Zero-Days

thehackernews.com
2
130
7
201
Go on an RCE hunting journey with @pwntester as he demonstrates how he used CodeQL to find multiple RCE vulnerabilities in Apache Dubbo: "All roads lead to RCE" github.co/3hUDB5V
2
78
272
Debug_Orz retweeted
Haboob
@HaboobSa21 Sep 2021
In part-2 of our Modern Harnessing Meets In-Memory Fuzzing blog post, our team digs into customizing WinAFL to find bugs. More info at: blog.haboob.sa/blog/modern-h…
29
80
Debug_Orz retweeted
Synacktiv
@Synacktiv8 Sep 2021
Interested in macOS/iOS XPC exploitation? @elvanderb just published a detailed solution to @allesctf 🔥Sandbox Share challenge with a reliable exploit! synacktiv.com/publications/m…

macOS XPC Exploitation - Sandbox Share case study

macOS XPC Exploitation - Sandbox Share case study

synacktiv.com
1
79
1
213
A new guest blog with an excellent analysis from @m00nbsd shows a fast and smooth privilege escalation exploit in #FreeBSD. His write-up includes PoC and a video demo. Read the details at bit.ly/3jAjnwW

Zero Day Initiative — CVE-2020-7460: FreeBSD Kernel Privilege Escalation

In August, an update to FreeBSD was released to address a time-of-check to time-of-use (TOCTOU) bug that could be exploited by an unprivileged malicious userspace program for privilege escalation....

zerodayinitiative.com
1
53
104
Serving Netflix Video at 400Gb/s on FreeBSD people.freebsd.org/~gallatin…
8
133
12
498
Load more