Vulnerability researcher
Spain
Joined August 2018
- Tweets31
- Following941
- Followers2.7K
- Likes3.9K
I developed an N-day exploit for CVE-2022-2586: Linux kernel nft_object Use-After-Free (UAF). I sent my exploit and writeup to the oss-security mailing list: openwall.com/lists/oss-secur…
This vulnerability was used in Pwn2Own Vancouver by @Seasecresponse: congratulations and thanks for this amazing discovery!
Now that the discoverers have published their exploit and writeup, I sent my exploit and writeup for CVE-2022-0185 (Linux kernel integer underflow to slab OOB write) to the oss-security mailing list: openwall.com/lists/oss-secur…
CVE-2021-40444 simple demonstration PoC Exploit: github.com/lockedbyte/CVE-20…
Alejandro G. retweeted
ProFTPd UAF (@lockedbyte), API hacking (@hakluke and @Farah_Hawaa), file extension tricks on cloud storage (@mrd0x), built-in AD searching with ADSI (@Gr1mmie), DCE/RPC fingerprints (@hdmoore), SAML issues (@Secureworks, @joonas_fi), and more! blog.badsectorlabs.com/last-…
Alejandro G. retweeted
A very detailed exploit demonstration of @Nosoynadiemas 's CVE-2020-9273 (ProFTPd UAF)
Dear Fellowlship, How is your summer going?
Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post:
Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)
adepts.of0x.cc/proftpd-cve-2…
Alejandro G. retweeted
Dear Fellowlship, How is your summer going?
Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post:
Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)
adepts.of0x.cc/proftpd-cve-2…
Alejandro G. retweeted
Exim RCE (@lockedbyte), Windows kernel exploit writeup (@33y0re), plaintext RDP creds from memory (@jonasLyk, @n00py1), MS Defender ATP bypasses (@Tyl0us), hashcat 6.2.0 (@hashcat), persist and blend C2 with Teams (@BlackArrowSec), and more! blog.badsectorlabs.com/last-…
Alejandro G. retweeted
So @Lockedbyte just brought to our nest a PoC. Read his last entry in our blog: "From theory to practice: analysis and PoC development for CVE-2020-28018 (User-After-Free in Exim)" adepts.of0x.cc/exim-cve-2020…
I developed a Remote Code Execution PoC exploit for the Exim Use-After-Free that was recently disclosed (as part of @qualys 21Nails advisory). Tested just on Exim 4.92. PoC available: github.com/lockedbyte/CVE-Ex…
Alejandro G. retweeted
Our young owlet @Lockedbyte reported an uncontrolled recursion in the XML parser of OSSEC/Wazuh (CVE-2021-28040) that has been fixed recently. Not all bugs are cool RCEs, but hey, bugs that lead to DoS should be fixed too.
Alejandro G. retweeted
Last night @lockedbyte showed you how we managed to exploit sudo with a partial overwrite of a funcptr and some small bruteforce. Today.. we do it single-shot with some help of glibc/nss.
haxx.in/CVE-2021-3156_nss_po…
I were able in collaboration with @bl4sty to create a working Proof of Concept exploit for the new sudo CVE-2021-3156.
Tested just in Ubuntu 20.04.1 LTS, in other distros offsets may change. PoC available: github.com/lockedbyte/CVE-Ex…
I got targeted by Zhang Guo and sent me the blog post link hxxps://blog.br0vvnn[.]io/pages/blogpost.aspx?id=1&q=1
New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development.
blog.google/threat-analysis-…
Stay safe out there everyone!
