Pinned Tweet
1st tweet in over two years and probably my last ever. I won't use this shitshow of a platform again. I might toot a bit at [email protected] (Mastodon) instead, but if you're keen to talk real-time jump on Discord. Peace and love to all the wonderful humans out there. #micdrop
Going live RIGHT NOW! We're doing some CTF challenges. Come join in the fun.
twitch.tv/ojreeves
Bring ya friends, bring ya mum, bring ya tea, and bring ya chocolate!
Went bouldering with @TheColonial . As Trent Reznor once said "I focus on the pain, the only thing that's real". Gonna be sore tomorrow.
ටل 🧗 retweeted
#Townscaper is out in Early Access!
🏠🏤⛪️🏘️🏡👷🌊🕊️🐦🌟
Go buy it! Go build some houses!
steamcommunity.com/app/12913…
ටل 🧗 retweeted
(1/2) Out running this morning on a new route and a lady runs past me.
Despite only passing, when I get home @Strava automatically tags her in my run. If I click on her face it shows her full name, picture and a map of her running route (which effectively shows where she lives)
ටل 🧗 retweeted
RELEASE: Evilginx 2.4 "Gone Phishing" update is OUT NOW!
Read all about it: breakdev.org/evilginx-2-4-go…
ටل 🧗 retweeted
How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM (slides inside) blog.orange.tw/2020/09/how-i…
#HITCON
Had a bit of fun with the lads doing CSAW CTF challenges this weekend (between parenting responsibilities).
I am always amazed at how I take so long to pop something. Looking back it always seems so obvious/trivial!
ටل 🧗 retweeted
Finally got around to weaponizing some of the awesome research I've only just read about regarding group policy. Full attack path write-up coming soon. 😁
ටل 🧗 retweeted
Introducing #BlindSide: 1 buffer overflow to mount Speculative Blind ROP attacks that repeatedly probe the address space, craft arbitrary memory read gadgets, and enable reliable kernel exploitation in minutes - despite #FGKASLR #XoM #Spectre mitigations: vusec.net/projects/blindside
ටل 🧗 retweeted
Come work with me.
#RedTeamJobs Happy Saturday!! @Lares_ Is STILL hiring. Do you need a challenge? Looking to work on a team that will have your back? We have some of the most challenging tests and dedicated clients. 2 of 4 spots filled. Job Descrp here . Plz RT linkedin.com/pulse/looking-r…
ටل 🧗 retweeted
SeManageVolumePrivilege to "Full Admin" escalation:
1. Enable the privilege in the token
2. Create handle to \\.\C: with SYNCHRONIZE | FILE_TRAVERSE
3. Send the FSCTL_SD_GLOBAL_CHANGE to replace S-1-5-32-544 with S-1-5-32-545
4. Overwrite utilman.exe etc.
5. 😎
ටل 🧗 retweeted
A hack quest format CTF running until end of the week - these are pretty rare story-driven CTFs, jump on :)
Twardowski has been missing for 3 day now 👀 He left some notes but nobody can read them 🔒
Check your hacking skills at twardowski.securing.pl!
ටل 🧗 retweeted
Great databases, showing the most powerful use of Hex-Rays: virtual calls, mapped variables, and so on, and so on. A lot to learn from them!
New blog entry: An Exhaustively-Analyzed IDB for ComRAT V4. This is one of the most thorough analyses I've ever done; certainly the largest. msreverseengineering.com/blo…
ටل 🧗 retweeted
Announcing vimforvscode.com s
Learn how to supercharge your favorite editor @code through 100+ exercises that teach you the basics of Vim.
You get:
- hands-on practice
- tips to remember commands
- short quiz questions
Best $10 you'll spend this year.
RTs appreciated!
I just read an article that reminded me of @CathyFreeman's amazing history and the moment in the Sydney Olympics when she won gold. I still remember that day like it was yesterday. It was incredible. Cathy is a national treasure!
























