http (@[email protected]) retweeted
Decided to publish the Lexmark printer exploit + writeup + tools instead of sell it for peanuts. 0day at the time of writing: github.com/blasty/lexmark -- enjoy!
http (@[email protected]) retweeted
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
http (@[email protected]) retweeted
Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies:
samcurry.net/web-hackers-vs-…
Contributors:
@_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__
http (@[email protected]) retweeted
Hi Auto Industry. It's the internet calling...
(Subtitle: How to take over a Ferrari account with zero interaction.)
samcurry.net/web-hackers-vs-…
http (@[email protected]) retweeted
If you sent an API request to Twitter with an e-mail address, and an incorrect password, the API returned a JSON response containing the username associated with the account.
A Threat Actor compiled 221,608,279 entries.
This list includes celebrities, politicians, and more...
Does anyone have a copy or working link to original netcat 1.00 (version 951010), file nc100.tgz or is that lost forever? I can only find dead ftp links or a MinGW fork or v1.10 versions.
http (@[email protected]) retweeted
Reverse engineering yet another ebook format mijailovic.net/2022/12/25/hk…
http (@[email protected]) retweeted
Here are some of the presentations I found the most interesting within the macOS/iOS Kernel Security research space in 2022! 🧵
alexplaskett.github.io/macos…
http (@[email protected]) retweeted
Here’s another #vulnerability #research writeup, this time about the #xnu #kernel
// by @pwningsystems
A tale of a simple #Apple kernel bug
pwning.systems/posts/easy-ap…
http (@[email protected]) retweeted
Today we're publishing new techniques for recovering NTLM hashes from encrypted credentials protected by Windows Defender Credential Guard.
These techniques also work on victims logged on before the server was compromised.
research.ifcr.dk/pass-the-ch…
http (@[email protected]) retweeted
Comic for December 22, 2022 #dilbert dilbert.com/strip/2022-12-22
🔐 ICYMI - JP Aumasson (@veorq) is teaching a free #workshop on #Cryptography! Cryptography is indispensable for protecting information in computer systems, but choosing secure protocols and parameters can become overwhelming. Sign up to learn more!
🎟️ ringzer0.training/workshops.…
http (@[email protected]) retweeted
The Christmas open-obfuscator challenge is live at this address:
obfuscator.re/challenges/
Thank you to @vector35 @build38dotcom and @eshard for sponsoring the prizes of this challenge.
I just removed all references to the new social media site where everyone is going to and my handle name in my bio, in order to comply with Twitter’s new policies. You’ll find me anyway.
help.twitter.com/en/rules-an…
http (@[email protected]) retweeted
Checkout the macOS and iOS Security Internals Advent Calendar youtube.com/playlist?list=PL… #macos #ios #security #internals #adventcalendar #xmas
I wonder why the iOS version of the checkmark is more expensive.
xitter.cf/TwitterBlue/status/160…
we’re baaaack! Twitter Blue is now available for $8/month on web or $11/month on iOS – we’ve made some upgrades and improvements 🧵

ALT The new Twitter Blue subscription page on web that lists the features included with a subscription. At the top it reads, “Blue subscribers with a verified phone number will get a blue checkmark once approved”. Under that it lists “Rocket to the top of replies, mentions and search”, “See half the ads”, and “Post longer videos”, each labeled as “coming soon”. The list ends with “Get early access” and explains Twitter Blue Labs gives access to select new features. Toward the bottom of the screen it reads, “Limited time offer: $8.00 USD/month” with the button to subscribe underneath.
Hey ChatGPT, write me an x86 binary, undetected by all AV and EDR, that contacts my C2 on IP 12.133.253.6 port 443 once per day and migrates to a legit process before calling back. Embed it into a PDF that auto-starts the binary via AdobeReader zeroday.
http (@[email protected]) retweeted
Checkout Day 1 of the macOS and iOS Security Internals Advent Calendar now with enhanced audio… youtu.be/WxOZgr0Ld9o #ios #macos #security #internals #adventcalendar #xmas






















