AT&F&C1&D2&K3%C0 https://xitter.cf/t.co/FcLLHui5wV | https://xitter.cf/t.co/zOit06UquA | @initstring@infosec.exchange
Melbourne, Victoria
Joined March 2017
- Tweets92
- Following71
- Followers1.4K
- Likes64
Local Privilege Escalation in Fedora Linux (CVE-2025-12744).
Red Hat has made this public, but patches aren't out yet. Reliable root for any local user.
Mitigation: sudo systemctl disable --now abrtd
Writeup + PoC: initblog.com/2025/abrt-root/
Drive-By Attack in Ollama Desktop v0.10.0
Found a bug in Ollama desktop GUI (not the core API) where malicious websites could hijack all private chats. Ollama crew patched it within hours. Make sure to update!
Tech details, video, IoCs, and PoC here: gitlab-com.gitlab.io/gl-secu…
A lot has happened in a year! I’ve refreshed the dynamic data sources for passphrase-wordlist and generated a new file. If you’re into cracking complex passwords, this may be for you. Enjoy!
github.com/initstring/passph…
I'm not very active on here, and probably won't be on the next one either. But just in case, here's the new Mastodon profile I set up: @initstring@infosec.exchange
Spent some time recently formalizing our Red Team workflow at GitLab. The process is open-source, and we're sharing our issue templates to track logistics, goals, TTPs, reports, etc.
about.gitlab.com/blog/2022/0…
Just pushed an update for passphrase-wordlist. Massive list of passphrases with hashcat rules for offline cracking of long, complex passwords. Enjoy! github.com/initstring/passph…
Wanted to share this combo, as it's such a cool protection from drive-by attacks.
1. uBlock Origin with the "block access to LAN" filter-list
2. DNS rebind protection (available in pihole, NextDNS, dnsmasq, AsusWRT-Merlin, etc)
JS can no longer easily target your LAN!!!
I discovered a drive-by #RCE in the @gitlab Development Kit (it's now fixed). This took chaining multiple vulnerabilities and would have allowed me to remotely compromise developer machines. Details and tips to protect yourself from similar exploits here:
about.gitlab.com/blog/2021/0…
Stealing Bitcoin w/ CSRF via Ride The Lightning + Umbrel. Thanks to the RTL devs for pushing a quick fix! Here's my write-up: initblog.com/2021/rtl-driveb…
Great finding by @Sambal0x - and a good example of why e2e encryption is important in messaging apps. :)
Thanks to the @attackndefense team at @mozilla for inviting me on their blog!
This is a more personal overview on the Firefox Android bug I disclosed recently.
Read our latest guest blog post from @init_string: blog.mozilla.org/attack-and-…
initstring retweeted
Sharing my talk on Hacking Android Apps with Frida
youtube.com/watch?v=iMNs8YAy…
Found a neat little Firefox for Android bug. Current version is not vulnerable, please make sure you are up to date. :) gitlab.com/gitlab-com/gl-sec…
TLDR: Malicious SSDP server on WiFi can provide "Android Intents" as UPnP XML "LOCATION", essentially forcing mobile devices to open links with no interaction.
This is so cool, thanks @dafthack for the nomination!
Cloud_enum will be giving $1577.7 to Doctors Without Borders @MSF_USA.
Thanks @init_string!
github.com/initstring/cloud_…
I found a few privilege escalation bugs in Google Cloud's OS Login. They've all been patched now.
gitlab.com/gitlab-com/gl-sec…
initstring retweeted
The 4/25 training session for my Breaching the Cloud Perimeter course has reached max capacity but don't worry... I'm teaching it again on 5/28 for FREE. New registration link is here: attendee.gotowebinar.com/reg…
On April 25th I'll be giving a FREE 4-hour training course (w/ labs) that I've built called Breaching the Cloud Perimeter. Space will be limited so get registered now: attendee.gotowebinar.com/reg… @BHinfoSecurity
