Pinned Tweet
Presenting my research at @defcon was incredible!
The repo for my tool #NoFilter is:
github.com/deepinstinct/NoFi…
Slides available here:
media.defcon.org/DEF%20CON%2…
The research will be published as a blog post soon
#DEFCON #DEFCON31
The blog post on the research I presented at @BlackHatEvents and @defcon is public
safebreach.com/blog/forgotte…
It describes how I found a privilege escalation in GNU telnetd and 2 unauthenticated RCEs in Samba.
The PoC scripts are available on GitHub
github.com/SafeBreach-Labs/F…
Following my @defcon talk, the blog post about the vulnerabilities I found in the cloud environment of Python in Excel is now public on the @safebreach website.
safebreach.com/blog/python-i…
Also, we published tools for the community to continue this research.
github.com/SafeBreach-Labs/F…
Ron BY retweeted
We’re excited to welcome @RonB_Y as a speaker at TyphoonCon 2026!
Ron will present his research on how a low-privileged process can masquerade as a trusted RPC server leading to the discovery of two Microsoft vulnerabilities. Read more at typhooncon.com/2026-agenda/
Ron BY retweeted
So @ShahakMo and I just dropped our Win-DoS research + tools at @defcon and on GitHub!💥
Win-DoS repo:
* 4 new remote DoS exploits for Domain Controllers and Win11 (3 pre-auth!)
* TorpeDoS technique - exhausting resources via RPC
* DCs DDoS botnet attack
github.com/SafeBreach-Labs/W…
Speaking at @defcon was as fun as always! My new tool called RPC-Racer is now available. It masquerades as a legitimate RPC server to force a protected process to authenticate against an arbitrary server
github.com/SafeBreach-Labs/R…
Ron BY retweeted
Starting 2025 strong! We’ve developed a PoC exploit for CVE-2024-49112. Read the blog and check out the GitHub repo: hubs.ly/Q030X5Y00
Just the beginning of the great things SafeBreach will deliver this year; stay informed at hubs.ly/Q030X2pM0. #CTEM #whatisPropagate
Amazing research!👏👏
I am excited to share with you my latest research - "DCOM Upload & Execute"
An advanced lateral movement technique to upload and execute custom payloads on remote targets
Forget about PSEXEC and dive in!
deepinstinct.com/blog/forget…
github.com/deepinstinct/DCOM…
Ron BY retweeted
אנא הפיצו: חוקרי פייק ריפורטר המשיכו בניתוח אירוע מעצרה של ״המורה מנצרת״ והממצאים מחזקים את הסברה כי מדובר בכשל חמור של @IL_police שפעלה בצורה פזיזה ויחצנית ומסתמן כי *נפלה ולקחה חלק בהסתה נגד המורה, ולא של האישה.*
הממצאים:
1. בסקירה של מאות תכנים שפירסמה לא נמצא תוכן העוסק בסוגיות לאומיות פרט לשלושה, שמצביעים על מגמה הפוכה מזו שקבעה המשטרה.
2. הסרטון המדובר הוא טרנד ריקוד מטיקטוק שאינו מצביע בהכרח על שמחה נוכח האירועים
3. המפיץ הראשי, דניאל עמרם, טעה כשקבע כי מדובר בהסתה של מורה מנצרת: לא מדובר במורה, היא לא מנצרת וכל הסימנים מצביעים כי לא הסיתה.
Ron BY retweeted
𝐀𝐟𝐭𝐞𝐫 𝐦𝐨𝐫𝐞 𝐭𝐡𝐚𝐧 𝐚 𝐝𝐞𝐜𝐚𝐝𝐞 𝐢𝐧 𝐜𝐚𝐩𝐭𝐢𝐯𝐢𝐭𝐲 𝐢𝐧 𝐆𝐚𝐳𝐚, 𝐚 𝟐𝟏-𝐲𝐞𝐚𝐫-𝐨𝐥𝐝 𝐘𝐚𝐳𝐢𝐝𝐢 𝐰𝐨𝐦𝐚𝐧 𝐡𝐞𝐥𝐝 𝐛𝐲 𝐚 𝐇𝐚𝐦𝐚𝐬 𝐭𝐞𝐫𝐫𝐨𝐫𝐢𝐬𝐭 𝐚𝐟𝐟𝐢𝐥𝐢𝐚𝐭𝐞𝐝 𝐰𝐢𝐭𝐡 𝐈𝐒𝐈𝐒 𝐰𝐚𝐬 𝐫𝐞𝐬𝐜𝐮𝐞𝐝 𝐚𝐧𝐝 𝐫𝐞𝐭𝐮𝐫𝐧𝐞𝐝 𝐭𝐨 𝐡𝐞𝐫 𝐟𝐚𝐦𝐢𝐥𝐲 𝐢𝐧 𝐈𝐫𝐚𝐪.
In an operation coordinated by the IDF and led by @cogatonline @USEmbassyJLM and other international actors, Fawzia Amin Sido was freed from captivity and returned home to Iraq.
At 11-years-old, Fawzia was trafficked by ISIS to a Hamas terrorist in Gaza, who was presumably killed during IDF strikes. She fled to a hideout in which she was rescued in a secret mission through the Kerem Shalom Crossing.
This is further proof of the connection between Hamas and ISIS, as well as the crimes against humanity committed by the terrorist organization in Gaza.
We will continue to act to dismantle the Hamas-ISIS terrorist organization and free all hostages in Hamas captivity.
Ron BY retweeted
Check out our latest blog (@RonB_Y @DeepInstinctSec) about our @defcon talk focusing on Shim and Office manipulation to achieve Code Injection and Privilege Escalation!
#defcon #defcon32 #cybersecurity deepinstinct.com/blog/SHIM-M…
Talking at @defcon was fun as always! The source code for the tools is public
github.com/deepinstinct/Shim…
#DEFCON #DEFCON32
I'm happy to announce that I'll be speaking at @defcon this year as well, this time with @DavidShandalov. If you'll be there, don't miss our talk.
Ron BY retweeted
Nice adaptation to my Dirty Vanity technique, even the same shellcode generation method :) published on Blackhat EU 2022, to anyone that might want to see the original research xitter.cf/ustayready/status/1603…
New process injection technique dropped from BlackHat EU! Freaking cool.
Dirty Vanity abuses the Windows forking (process reflection and snapshotting) to evade EDR using.
Slides: i.blackhat.com/EU-22/Thursda…
POC: github.com/deepinstinct/Dirt…
Shout-out to @eliran_nissan!
Ron BY retweeted
So, what did you kids learn in college this year?
#standwithisrael #bringthemhome
Ron BY retweeted
I don't want to hear anything about #WomensHistoryMonth unless we also mention the girls, women, and mothers who have been kidnapped in Gaza since 10/7. If you don't bring attention to them along with #WomensHistoryMonth, you don't care about women.
It’s day 147!!!
Say Something!!!!!
Ron BY retweeted
What if I hosted the Oscars? I think it would be awesome! Thanks to @Eretz_Nehederet for giving me the opportunity to showcase my hosting skills!
Ron BY retweeted
זהירות 🚨 הפצת מידע כוזב!
חברת כנסת בישראל מפיצה ידיעות כוזבות שמקורן באתר קונספירציות מפוקפק שנתפס כמה וכמה פעמים בהפצת שקרים מוחלטים.
האתר המכונה "עדנה קרנבל" עסק בימים האחרונים בהפצת ידיעה שקרית לפיה בעלה של שקמה ברסלר הוא סגן ראש השבכ וכי הוא נעצר על בגידה.
השקר מופץ באינטנסיביות ברשתות החברתיות ואפליקציות המסרים.
בדיקה שלנו: בעלה של שקמה ברסלר הוא לא סגן ראש השבכ והוא לא עצור. פייק מוחלט. שתפו בכל מקום בו השקר מופץ
פרטים נוספים - בקרוב
