@invist

::

Joined May 2016
  • Tweets200
  • Following385
  • Followers97
Oh wait, what did we find wrapping up? 🦏😁
1
1
1
17
We could waffle on about our distinctive service portfolios. We could brag about the perks we provide. We could present you with our outstanding team. But you know what? Apply if you can! apply-if-you-can.com

CODE WHITE - Applicants Challenge

Applicants Challenge! Face real-world vulns, earn trophies, First Bloods & epic swag!

apply-if-you-can.com
4
10
2
21
invist retweeted
frycos@frycos12 Jan 2022
medium.com/@frycos/searching… Blog post published with my special guest "Microsoft Exchange (CVE-2022-21969)"

Searching for Deserialization Protection Bypasses in Microsoft Exchange (CVE-2022–21969)

This story begins with a series of fails, but why? That is because of my special relationship with the Microsoft Exchange codebase…

medium.com
6
181
9
460
Here is an idea to identify running beacons: 1. Beacons ThreadState often is: DelayExecution 2. Calltrace to NtDelayExecution includes unknown regions Works also fine against beacons sitting in file backed memory github.com/thefLink/Hunt-Sle…

GitHub - thefLink/Hunt-Sleeping-Beacons: Aims to identify sleeping beacons

Aims to identify sleeping beacons. Contribute to thefLink/Hunt-Sleeping-Beacons development by creating an account on GitHub.

github.com
1
64
2
160
It seems that there is a lot confusion about the log4j JNDI injection vulnerability (CVE 2021-44228). In our latest blog post we provide additional background fundamentals about JNDI and JNDI exploitation (and a lot of links): mogwailabs.de/en/blog/2021/1…

Vulnerability notes: Log4Shell | MOGWAI LABS

Everything you should know about the Log4Shell vulnerability (CVE-2021-44228)

mogwailabs.de
2
38
1
112
Replying to @chybeta @ptswarm
It works in latest firefox version.
1
4
RCCMD is a service that lets you systematically shut down critical systems in the event of a power outage. In our latest blogpost we show how systems can be compromised via this service: mogwailabs.de/en/blog/2020/0…
9
20
We just pushed a new MJET version with two small features that might be handy if you are dealing with some unusual targets. github.com/mogwailabs/mjet/r…

Release v0.3 - Additional features, Dockerfile · mogwailabs/mjet

This release adds two features that might help on certain targets: Define the shell to execute the OS commands Replace the default RMI object name ("jmxrmi") with a different one We als...

github.com
6
1
11
github.com/thefLink/C-To-She… Some examples on how to create complex PIC which uses syscalls in pure C. One can use any shellcode loader/injector to execute complex PIC and use encoders to break signatures.

GitHub - thefLink/C-To-Shellcode-Examples

Contribute to thefLink/C-To-Shellcode-Examples development by creating an account on GitHub.

github.com
4
10
Once upon a time there was a #Sophos XG Firewall N-day that had @ramoliks and @niph_ dig deep until they got RCE, a 0-day and a comprehensive blog post. #CVE-2020-12271 #CVE-2020-15504 codewhitesec.blogspot.com/20…

CODE WHITE | Blog: Sophos XG - A Tale of the Unfortunate Re-engineering of an N-Day and the Lucky...

codewhitesec.blogspot.com
2
96
6
151
SAP has released security updates for a critical vulnerability in NetWeaver AS Java. Patch ASAP! Read our Activity Alert at go.usa.gov/xfTCB for more information. #Cyber #Cybersecurity #InfoSec
1
117
9
139
invist retweeted
frycos@frycos16 Jun 2020
github.com/MegadodoPublicati… This is some pretty cool PHP deserializiation stuff.
14
2
36
It is now official, @olekmirosh and yours truly will be presenting at @BlackHatEvents one more time! 🎉 blackhat.com/us-20/briefings…
1
5
47
MOGWAI LABS was founded 2 years ago. Due to Covid19, we will have no party. However, I booked several DJs to create some mixes instead. Starting with DJ Crypt from the Famous Deck Team who is showing his turntable skillz with this fine hiphop mix. Enjoy :) soundcloud.com/dj-crypt/2-ye…
2
8
29
Our beta release of ATT&CK with sub-techniques is now live! We’ve just posted a blog post by @stromcoffee with links to all of the new resources and advice on how to leverage them (medium.com/mitre-attack/atta…). You can also check out the new site itself at attack.mitre.org/beta/.
23
309
34
481
We have published a new report: Fox Kitten - Widespread Iranian Espionage-Offensive Campaign. clearskysec.com/fox-kitten/ #APT34 #APT33 #APT39
6
74
7
146
In our latest blog post, we take a closer look at @_tint0 s RMIRegistry Bypass gadget mogwailabs.de/blog/2020/02/a…
1
31
1
53
Despite being 2020-01-11, I think @cyb3rops just won the PR of the year award! github.com/projectzeroindia/…

Add apology by Neo23x0 · Pull Request #1 · projectzeroindia/CVE-2019-19781

github.com
2
23
3
80
Oh look, we now have a „careers“ section on our homepage mogwailabs.de/careers/
1
5
13
Load more