@bogan

Security nerd and owner of ZX Security, Kiwicon/Kawaiicon organiser, OSINT, Datsun 120Y. He/him

 New Zealand
kawaiicon.org/
Joined November 2008
  • Tweets4.7K
  • Following1.9K
  • Followers3.3K
741Media
Are you ready for Chcon 2024 conference tickets yet? Conference only. events.humanitix.com/christc… Or maybe you want some training? events.humanitix.com/christc…
9
1
10
1,857
What global outage?
11
791
bracing yourself to stab the straw into the bubble tea lid, you pause, catching yourself. do we always have to fight? you gently peel off the lid and let your straw float among the jelly. the inside of the lid reads "submit a talk to purplecon" 💜
13
19
2,421
We found a Remote Code Execution (RCE) vulnerability in @Ollama - one of the most popular AI inference projects on GitHub. Here is everything you need to know about #Probllama (CVE-2024-37032) 🧵👇
24
331
27
1,592
312,928
I am currently looking for a new team or individual who is interested in leading this dream once again. If anyone knows any young talented players, especially those in Malaysia, please inform me. It may take some time to rebuild, but I promise to make it successful. InshaAllah.
rehackxyz@rehackxyz8 Jun 2024
Trust may be fragile, but we remain steadfast in our belief in its value as we strive to enhance our community and society. In planning: New 🇲🇾 CTF union. Godspeed.
19
37
4,554
💜💜💜💜💜💜💜💜💜💜💜 8th november 2024 purplecon.org 💜💜💜💜💜💜💜💜💜💜💜
4
24
4
46
6,790
It's offical! @BSidesMelbourne 2024 dates have now been locked in. 🌟 Save the dates into your calendar 🌟 Training: 15 Nov, 2024 Conference: 16-17 Nov, 2024 Call for Training and Call for Papers will be opening soon. Sponsorship packages will announced in the coming week.
5
14
3
28
7,448
I just finished recording my talk for #NahamCon2024. If you're frustrated with WAFs, definitely check it out on May 24th. I'm looking forward to any feedback from the community. This presentation aims to be very practical for the bug bounty community.
4
13
228
13,449
You can read the details of our investigation concerning the CVE-2024-3400 on our blog post: volexity.com/blog/2024/04/12…. It covers the backdoor (UPSTYLE) and also the post exploitation. #PaloAlto 1/4
2
37
1
96
15,588
True love
1
9
529
Releasing, the physsec-methdology, a public, Open Source, unlicensed methodology for Physical Security Testing. github.com/evildaemond/physs… Thanks to @InfoSecFriends for helping review and get this off the ground

GitHub - evildaemond/physsec-methodology: A public, open source physical security methodology

A public, open source physical security methodology - evildaemond/physsec-methodology

github.com
1
11
1
26
3,272
bogan retweeted
CHCon@CHCon_nz1 Apr 2024
The time has come! The call for papers and training are open for Chcon 2024. pretalx.com/chcon-2024/cfp We alsof need sponsors! We can not put on the con without some key elements, speakers, sponsors and attendees. If you are someone you know is able to sponsor e-mail us!
9
10
1,849
bogan retweeted
HaxRob
@haxrob30 Mar 2024
Plans to literally "hack the planet" foiled due to 500ms of latency that Andres instinctually investigated. The latency was due how the malicious code parsed symbol tables in memory. openwall.com/lists/oss-secur…
35
671
210
6,165
2,524,921
This white paper has one of the best illustrative images I’ve seen in a long time
Schneier Blog
@schneierblog12 Mar 2024
Jailbreaking LLMs with ASCII Art dlvr.it/T3yLsJ

Jailbreaking LLMs with ASCII Art - Schneier on Security

Researchers have demonstrated that putting words in ASCII art can cause LLMs—GPT-3.5, GPT-4, Gemini, Claude, and Llama2—to ignore their safety instructions. Research paper.

schneier.com
4
526
2
6
462
I just released a new blog post about dumping LSASS in Rust! I'm working on a series which will build up to bypassing AVs and EDRs on Windows 11. This is the first post in that series, which kicks off with the classic MiniDumpWriteDump blog.tomais.nz/a-bit-rusty-l…

A bit rusty — Let's Dump LSASS part 1

This post is part of a series where I go through the steps of building an LSASS dumper in Rust, eventually building up to bypassing AVs and EDRs. By the end of this post, you should have a working...

blog.tomais.nz
7
13
795
bogan retweeted
CHCon@CHCon_nz1 Mar 2024
Announcing ChCon 2024 Keynote Speaker We’re excited to announce Lesley Carhart (hacks4pancakes) will be joining us in person at ChCon 2024 as the keynote speaker at this year’s conference.
3
5
3
25
3,752
💯
Louis Nyffenegger@snyff5 Jan 2024
If you're starting in pentest/offensive security and want to secure your first job, learning "web" is probably a better pick than "internal testing" (Windows/AD...) as most of the workload is still "web"
1
783
Oreo
5
530
Load more