@dreadcode

Tortures computers for fun and profit. Interested in network security monitoring, machine learning, Golang and Rust. Shellscript ninja. Will debug for food.

 Amsterdam, The Netherlands
github.com/dreadl0ck
Joined June 2017
  • Tweets236
  • Following1.2K
  • Followers338
22Media
Attacking UNIX Systems via CUPS, Part I evilsocket.net/2024/09/26/At…

Attacking UNIX Systems via CUPS, Part I | evilsocket

Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start with targeting GNU/Lin…

evilsocket.net
168
1,108
291
3,581
1,061,281
I'm glad everyone has discovered memory safe languages after several decades. Now can we start looking at secure package management or are we just going to import memory safe rando libs from ninja876 on Github forever?
1
7
33
3,955
My dystopian vision of an AI-powered future is that LLMs drives down the cost of generating long text even further, and the only way for readers to keep up is to use LLMs to summarize.
Christian Keil
@pronounced_kyle22 Sep 2023
Okay here's a ridiculous (but true) take: word processing is bad. Before it, document length was bounded by the human capacity to copy long-form text. After word processing, the tax & legal codes grew without check. And became incomprehensible to anyone but career experts.
20
59
9
256
63,843
Best security quote I heard this week: "Do you want to mitigate against an auditor, or against an attacker?"
28
397
44
1,623
222,951
Bellingcat and investigative partners @derspiegel and @the_ins_ru have discovered a hitherto secretive group of engineers involved in Russian missile strikes on Ukraine. These strikes have killed hundreds and left millions without heating or power bellingcat.com/news/uk-and-e…

The Remote Control Killers Behind Russia’s Cruise Missile Strikes on Ukraine - bellingcat

Bellingcat has identified a secretive group of Russian military engineers involved in missile strikes on Ukraine.

bellingcat.com
69
1,536
229
3,787
You can force any v8/Electron process to execute arbitrary js code (child_process, http, etc) by forcefully enabling and abusing the builtin debug mechanism ... here's VS Code executing Calc, but I suspect any Electron app is susceptible 🔥 it works with SIP enabled on macOS
17
184
18
652
Replying to @BadgeteamNL
@BadgeteamNL thanks for the great #MCH2022 badge - here's my Music Computing Handheld app, to be found in the Hatchery in ESP32 - Games. Happy soloing
4
26
dreadl0ck retweeted
Maltego@MaltegoHQ4 Apr 2022
Do you know you can set up a custom Transform server in #Maltego? The #DittoTRX Transform developed by @dreadcode can be used to investigate #IDNHomographAttack and imposter domain on various websites. Learn how to set it up here: maltego.com/blog/dittotrx-a-…

DittoTRX: A Maltego Transform Server for IDN Homograph Attacks - Part 1 Setting Up

This article walks you through the setup and code of the new DittoTRX data integration for Maltego, developed by our Academic and Non-Profit Program participant Philipp Mieden.

maltego.com
1
2
8
The Trojan Source vulnerability allows supply-chain attacks on software written in C, C++, Go, Java, Javascript, Python and Rust. We're releasing details after a 99-day coordinated disclosure period, and some of these compilers will be patched quickly. See lightbluetouchpaper.org/2021…
19
363
74
790
Wow, just realized C is turning 50 next year. Not sure how to tell students that we're learning about security problems caused by a language that's half a century old.
26
69
20
664
dreadl0ck retweeted
Nasko Oskov@nasko21 Sep 2021
Memory safety in a huge codebase is hard. We've published some work and an update on our work in the Chromium codebase - security.googleblog.com/2021….

An update on Memory Safety in Chrome

Adrian Taylor, Andrew Whalley, Dana Jansens and Nasko Oskov, Chrome security team Security is a cat-and-mouse game. As attackers innovate...

security.googleblog.com
5
88
9
355
We're releasing CapLoader 1.9 today! 🔁 Better detection of periodic beacons 🔍 More L7 protocols identified 🚀 Faster 🛠️ Improved filtering of flows 🔭 OSINT lookups w/ CIRCL, ThreatFox, RIPEstat etc. netresec.com/?b=2159bda
13
29
Selected machine learning attacks; first in a series. 1. Cyberpunk 2. Looney Tunes 3. Magritte 4. Witchcraft
Illustration: a sticker with strange markings tricks a classifier into thinking a banana is a toaster.

ALT Illustration: a sticker with strange markings tricks a classifier into thinking a banana is a toaster.

Screenshot: an article titled "Hackers stuck a 2-inch strip of tape on a 35 mph speed sign and tricked 2 Teslas into accelerating to 85 mph"

ALT Screenshot: an article titled "Hackers stuck a 2-inch strip of tape on a 35 mph speed sign and tricked 2 Teslas into accelerating to 85 mph"

Illustration: a machine learning model classifies an apple with the word "iPod" stuck to it as an iPod.

ALT Illustration: a machine learning model classifies an apple with the word "iPod" stuck to it as an iPod.

Photo: an empty asphalt area. In center frame, a car is trapped inside a salt circle that resembles "no lane change" markings.

ALT Photo: an empty asphalt area. In center frame, a car is trapped inside a salt circle that resembles "no lane change" markings.

42
5,103
254
15,100
Exploitable heap overflow in libgcrypt 1.9.0 (┛ಠ_ಠ)┛彡┻━┻ It's the crypto library that gpg uses. Homebrew has 1.9.0 right now. 🚨 dev.gnupg.org/T5259
5
245
52
610
I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!
142
1,834
434
5,000
if your Big Data person does NOT know what this picture means, get rid of them
the famous "survivorship bias" diagram of an idealized PV-1 bomber viewed from the top with red dots around the tail, center fuselage, wing roots behind the engines, and outer edge wing tips. The US military wanted to use data from returning damaged bombers, the red dots signified damage they recorded, to determine what parts of the plane to uparmor. Statistician Abraham Wald realized that they were ONLY able to analyze the planes that RETURNED. Therefore the damage they were recording was ONLY that which could be sustained and allow the crew to safely return. The planes that had sustained fatal damage, the ones that really needed armor, didn't make it back to be recorded by the statisticians

ALT the famous "survivorship bias" diagram of an idealized PV-1 bomber viewed from the top with red dots around the tail, center fuselage, wing roots behind the engines, and outer edge wing tips. The US military wanted to use data from returning damaged bombers, the red dots signified damage they recorded, to determine what parts of the plane to uparmor. Statistician Abraham Wald realized that they were ONLY able to analyze the planes that RETURNED. Therefore the damage they were recording was ONLY that which could be sustained and allow the crew to safely return. The planes that had sustained fatal damage, the ones that really needed armor, didn't make it back to be recorded by the statisticians

214
1,870
346
8,874
Look at this slice of awesome. The new Wireshark version in dev (3.3.0) has a packet diagram view. A fantastic teaching and learning tool! When released, I'll be making pretty extensive use of this in my classes! Great job @geraldcombs and @WiresharkNews team.
84
2,263
343
6,355
Write your malware in Go
Ilfak Guilfanov@ilfak12 Sep 2020
Our decompiler does not support Go because of the weird return locations but these tweets can still be useful.
7
65
1
239
dreadl0ck retweeted
TiDB, powered by PingCAP
@PingCAP19 Aug 2020
By studying popular #Golang systems such as #Docker, #Kubernetes, and #gRPC, this paper analyzed 171 concurrency bugs for their root causes and fixes. A nice read if you are into concurrency models in #Golang. Read more: hubs.ly/H0tPT3K0
3
111
8
231
Have you ever heard of the mailto:?attach=~/… parameter? It allows to include arbitrary files on disk. So, why break PGP if you can politely ask the victim's mail client to include the private key? (1/4)
33
944
146
2,342
Load more