@asintsov

was born in '85, still alive...

Joined February 2010
  • Tweets4.3K
  • Following532
  • Followers3K
40Media
Alyosha Sintsov retweeted
b1ack0wl@b1ack0wl14 Oct 2024
"we would look at xrefs to strcpy() and write a highly reliable exploit by the end of the day"
3
66
3
491
31,329
Alyosha Sintsov retweeted
Cristofaro Mune@pulsoid19 Sep 2023
Let me say that again... You store pointers at the _destination_ address of a memcpy. You glitch during memcpy (). You get that pointer into PC. No, it's not sci-fi. It's the "instruction corruption" fault model. And we pioneered that. See thread below 1/N.
Raelize@raelizecom5 Sep 2023
Replying to @raelizecom
This attack showed that the data at the destination of a copy can be abused just like the data at the source. We had to improve this attack quite a bit as it simply took too long to get a successful glitch. The details for this optimization will be explained during our training.
1
14
39
10,641
Alyosha Sintsov retweeted
Alex Matrosov
@matrosov4 Aug 2023
Application Security and Vulnerability Assessment getting a significant advantage from GenAI (context-driven knowledgebase). That helps security teams understand the root cause of the problem faster and significantly reduces the latency in producing security fixes at scale.
1
10
32
6,944
Alyosha Sintsov retweeted
Alex Matrosov
@matrosov21 Jun 2023
"... detected several remotely exploitable bugs in AMI MegaRAC BMC" "... whole attack sequence: from having zero knowledge about a remote AMI BMC with enabled IPMI (yeah, right) to flashing a persistent firmware implant to the server SPI flash" Looking forward to this talk!
Alex Tereshkin@AlexTereshkin21 Jun 2023
Check out the abstract of our upcoming DC talk :) CC: @Adam_pi3 forum.defcon.org/node/245714
13
1
29
10,854
Alyosha Sintsov retweeted
joernchen@joernchen6 Jun 2023
Our lovely Red Team at @gitlab is looking for a Senior Red Teamer boards.greenhouse.io/gitlab/…

GitLab

job-boards.greenhouse.io
1
31
4
169
38,925
Alyosha Sintsov retweeted
offensivecon
@offensive_con19 May 2023
A Dark Side of UEFI: Cross-Silicon Exploitation by @matrosov and @flothrone now #OffensiveCon23
1
25
63
10,914
Alyosha Sintsov retweeted
offensivecon
@offensive_con13 Apr 2023
My dear humans and non-humans, I present to you the speakers for #OffensiveCon23 offensivecon.org/speakers/
2
36
10
116
58,148
Alyosha Sintsov retweeted
PT SWARM@ptswarm8 Sep 2022
📝New research by @lmpact_l: "Fork Bomb for Flutter" There are more and more Flutter applications, and security analysis of these apps is in high demand. Our member Phil shares his knowledge and presents his reFlutter tool. Read the article: swarm.ptsecurity.com/fork-bo…

Fork Bomb for Flutter

Flutter applications can be found in security analysis projects or bugbounty programs. Most often, such assets are simply overlooked due to the lack of methodologies and ways to reverse engineer...

ptswarm.com
6
27
2
76
Alyosha Sintsov retweeted
Alex Matrosov
@matrosov1 Feb 2022
After the embargo period has ended, all Binarly advisories become public. binarly.io/advisories github.com/binarly-io/Vulner… FwHunt rules for the detection: github.com/binarly-io/FwHunt… Kudos to @certcc for coordinating the industry-wide disclosure process! kb.cert.org/vuls/id/796611

Advisories | Binarly

Binarly security advisories: coordinated firmware vulnerability disclosures with technical analysis, severity, and remediation guidance.

binarly.io
BINARLY🔬
@binarly_io1 Feb 2022
In our first press release, "Binarly Discovers High-Impact Vulnerabilities In Firmware Impacting Millions Of Enterprise Devices". binarly.io/news/BinarlyDisco…
37
2
71
Alyosha Sintsov retweeted
Smith Ilya@blackzert2 Feb 2022
Due to some positive tests, I can’t go to #OffensiveCon22. This is sad :( If some one want to buy my ticket, please DM.
4
8
ZeroNights X: "Weird proxies/2 and a bit of magic". ]-> Reverse proxies cheatsheet: t.me/cissp/4269 ​-آگاهي رساني امنيت سايبري- Up2date 4 Defence Today, Secure Tomorrow @CisoasaService 1400.06.12 lnkd.in/egmJcN3Y

cissp

ZeroNights X: "Weird proxies/2 and a bit of magic". ]-> Reverse proxies cheatsheet: https://github.com/GrrrDog/weird_proxies

t.me
1
2
Alyosha Sintsov retweeted
Dmitriy Evdokimov@evdokimovds8 Sep 2021
My slides "Container escapes: Kubernetes edition" from Defensive Track @ZeroNights 2021 zeronights.ru/wp-content/upl…
17
26
Alyosha Sintsov retweeted
ϻг_ϻε@steventseeley8 Sep 2021
ActiveX Exploitation in 2019 :: Instantiation is not Scripting I guess it’s a good time to re-share this one ¯\_(ツ)_/¯ srcincite.io/blog/2019/02/01…
26
101
Alyosha Sintsov retweeted
Denis Makrushin@makrushind19 Aug 2021
The second year in a row, I’m pleased to host the main stage of @ZeroNights and prepare a soundtrack of the geekiest cybersecurity conference in Russia. Hey, speakers, this time, if you are not able to provide confident answers after your presentations, you will have to dance!
1
12
Alyosha Sintsov retweeted
Sergey Belov@sergeybelove10 Jun 2021
Replying to @scarybeasts
Very similar to research that was done 4 years ago by Alexey Tyurin github.com/GrrrDog/TLS-Redir… with the same scenarios. I wonder what 8 people were doing in the current research
2
1
9
Alyosha Sintsov retweeted
Dave Aitel@daveaitel10 May 2021
warontherocks.com/2021/03/al… this is good
2
1
2
Alyosha Sintsov retweeted
Mark Ermolov@_markel___19 Mar 2021
Wow, we (+@h0t_max and @_Dmit) have found two undocumented x86 instructions in Intel CPUs which completely control microarchitectural state (yes, they can modify microcode)
103
1,796
488
4,868
Alyosha Sintsov retweeted
Ivan Novikov
@d0znpp5 Nov 2020
We are looking for a Head of Engineering! DM please
7
1
9
Alyosha Sintsov retweeted
Pavel Zhovner
@zhovner10 Aug 2020
Launching the Developer Program. Anyone who wants to join the development of Flipper Zero can now do it! #flipperzero Read this and fill the forms: kickstarter.com/projects/fli…
3
40
101
Alyosha Sintsov retweeted
Wim Remes TR@wimremes4 Aug 2020
One of the most destructive things I see in our profession is pigeon-holing people into "Red Team", "Blue Team", "Compliance", etc ... and locking them in a career path. You should take every opportunity to let people explore different aspects of the profession.
6
39
3
199
Load more