@bitshifter123

I like to shift bits :)

Joined October 2010
  • Tweets706
  • Following1K
  • Followers1.6K
9Media
Android Kernel Exploitation Workshop github.com/cloudfuzz/android… cloudfuzz.github.io/android-…

GitHub - cloudfuzz/android-kernel-exploitation: Android Kernel Exploitation

Android Kernel Exploitation. Contribute to cloudfuzz/android-kernel-exploitation development by creating an account on GitHub.

github.com
10
234
6
537
After a lot of work and some crypto-related delays, I couldn't be more proud to publish @aionescu's and mine latest research - The complete overview of CET internals on Windows (so far!): windows-internals.com/cet-on…
10
211
8
443
Day 2 of our Top 5 bugs for 2019 is an LPE in win32k.sys through indexed color palettes. The deep and thorough analysis is provided by Marcin Wiązowski, who reported the bug. bit.ly/38O65s0 #ZDITop5

Zero Day Initiative — Local Privilege Escalation in Win32k.sys Through Indexed Color Palettes

This is the second in our series of Top 5 interesting cases from 2019. Each of these bugs has some element that sets them apart from the more than 1,000 advisories released by the program this year....

zerodayinitiative.com
3
50
109
bitshifter retweeted
Tavis Ormandy
@taviso13 Aug 2019
I'm publishing some 🔥 research today, a major design flaw in Windows that's existed for almost *two decades*. I wrote a blog post on the story of the discovery all the way through to exploitation. googleprojectzero.blogspot.c…

Down the Rabbit-Hole...

Posted by Tavis Ormandy, Security Research Over-Engineer.“Sometimes, hacking is just someon...

projectzero.google
62
1,607
173
3,415
bitshifter retweeted
doar-e@doar_e8 Jul 2019
New blogpost by @0vercl0k "A journey into IonMonkey: root-causing CVE-2019-9810" doar-e.github.io/blog/2019/0…
2
108
2
232
bitshifter retweeted
Tavis Ormandy
@taviso28 May 2019
Am I the first person to pop a shell in notepad? 🤣 ....believe it or not, It's a real bug! 🐞
115
910
119
3,281
bitshifter retweeted
Niklas B@_niklasb26 May 2019
I wrote a thing about my macOS sandbox escape & LPE from Pwn2Own phoenhex.re/2019-05-26/attri…
4
217
3
505
bitshifter retweeted
Bruno@bkth_16 May 2019
New blog post written together with my friend @S0rryMybad about using the JIT to abuse a non-JIT bug in Chakra (CVE-2019-0812) phoenhex.re/2019-05-15/non-j…
1
108
1
239
We've confirmed exploitability of Windows Pre-Auth RDP bug (CVE-2019-0708) patched yesterday by Microsoft. Exploit works remotely, without authentication, and provides SYSTEM privileges on Windows Srv 2008, Win 7, Win 2003, XP. Enabling NLA mitigates the bug. Patch now or GFY!
33
1,140
99
1,750
bitshifter retweeted
Ben Hawkes
@benhawkes10 May 2019
Project Zero guest blog: "Trashing the Flow of Data" by Stephen Röttger (@_tsuro) - googleprojectzero.blogspot.c…

Trashing the Flow of Data

Posted by Stephen Röttger In this blog post I want to present crbug.com/944062, a vulnerability i...

projectzero.google
3
89
185
bitshifter retweeted
doar-e@doar_e9 May 2019
New blogpost by @__x86 "Circumventing Chrome's hardening of typer bugs" doar-e.github.io/blog/2019/0…
80
2
133
bitshifter retweeted
Samuel Groß@5aelo7 May 2019
phrack.org/papers/jit_exploi… #phrack :)
14
275
8
624
Here is my exploit for one of @_tsuro 's TurboFan bugs related to an incorrect typing of String.(last)IndexOf JSCall nodes. github.com/JeremyFetiveau/Tu…

GitHub - JeremyFetiveau/TurboFan-exploit-for-issue-762874: Exploit for a bug in TurboFan's typing...

Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf - JeremyFetiveau/TurboFan-exploit-for-issue-762874

github.com
56
1
164
New Year, New Blog. I've updated my blog theme for the first time in 12 years and kicking things off with a multi-part post on Hyper-V Fuzzing. To start, we begin with a little tutorial on WDF driver development and how it greatly simplifies driver writing alex-ionescu.com/?p=377
11
157
1
383
applepie: A hypervisor for Bochs. This will be a rapidly evolving project that currently is just a hypervisor but shortly will be an instrumentation and fuzzing framework. I've got like 8 Word 0-day from falkervisor I'll refind with this and blog about :D github.com/gamozolabs/applep…

GitHub - gamozolabs/applepie: A hypervisor for fuzzing built with WHVP and Bochs

A hypervisor for fuzzing built with WHVP and Bochs - gamozolabs/applepie

github.com
3
91
163
In the last of the top 5 bugs of 2018, @abdhariri details a fascinating #Adobe #Reader bug that led to the feature being removed entirely to address it. bit.ly/2S9SX7W
31
3
49
Windows Sandbox > a new lightweight desktop environment tailored for safely running applications in isolation techcommunity.microsoft.com/…
3
135
10
241
Whack-a-mole Security™ - when root cause analysis really ain't your thing
1
7
32
oops, nice one! =)
Linus Henze@LinusHenze6 Dec 2018
Want a free Safari 0day? (Ok, it's actually a 1day because it's fixed in the latest WebKit version, but it still works in the latest version of Safari) Then go to github.com/LinusHenze/WebKit… Please don't do evil stuff with this.

GitHub - LinusHenze/WebKit-RegEx-Exploit

Contribute to LinusHenze/WebKit-RegEx-Exploit development by creating an account on GitHub.

github.com
1
3
6
I started my career in infosec with no tech job experience and no connection to the hacking community and you can too
33
116
10
902
Load more