@lockedbyte

Vulnerability researcher

 Spain
github.com/lockedbyte
Joined August 2018
  • Tweets31
  • Following941
  • Followers2.7K
5Media
ProFTPd UAF (@lockedbyte), API hacking (@hakluke and @Farah_Hawaa), file extension tricks on cloud storage (@mrd0x), built-in AD searching with ADSI (@Gr1mmie), DCE/RPC fingerprints (@hdmoore), SAML issues (@Secureworks, @joonas_fi), and more! blog.badsectorlabs.com/last-…

Last Week in Security (LWiS) - 2021-08-16

ProFTPd UAF (@lockedbyte), API hacking (@hakluke and @Farah_Hawaa), file ext tricks (@mrd0x), built-in AD searching w/ADSI (@Gr1mmie), DCE/RPC fingerprints (@hdmoore), SAML issues (@joonas_fi), and...

blog.badsectorlabs.com
1
16
47
A very detailed exploit demonstration of @Nosoynadiemas 's CVE-2020-9273 (ProFTPd UAF)
Adepts of 0xCC@AdeptsOf0xCC10 Aug 2021
Dear Fellowlship, How is your summer going? Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post: Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273) adepts.of0x.cc/proftpd-cve-2…
7
1
31
Dear Fellowlship, How is your summer going? Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post: Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273) adepts.of0x.cc/proftpd-cve-2…
1
48
1
79
Exim RCE (@lockedbyte), Windows kernel exploit writeup (@33y0re), plaintext RDP creds from memory (@jonasLyk, @n00py1), MS Defender ATP bypasses (@Tyl0us), hashcat 6.2.0 (@hashcat), persist and blend C2 with Teams (@BlackArrowSec), and more! blog.badsectorlabs.com/last-…

Last Week in Security (LWiS) - 2021-05-17

Exim RCE (@lockedbyte), Windows kernel exploit writeup (@33y0re), plaintext RDP creds from memory (@jonasLyk, @n00py1), MS Defender ATP bypasses (@Tyl0us), hashcat 6.2.0 (@hashcat), and more!

blog.badsectorlabs.com
23
46
So @Lockedbyte just brought to our nest a PoC. Read his last entry in our blog: "From theory to practice: analysis and PoC development for CVE-2020-28018 (User-After-Free in Exim)" adepts.of0x.cc/exim-cve-2020…
1
17
31
Our young owlet @Lockedbyte reported an uncontrolled recursion in the XML parser of OSSEC/Wazuh (CVE-2021-28040) that has been fixed recently. Not all bugs are cool RCEs, but hey, bugs that lead to DoS should be fixed too.
9
2
27
Alejandro G. retweeted
blasty
@bl4sty30 Jan 2021
Last night @lockedbyte showed you how we managed to exploit sudo with a partial overwrite of a funcptr and some small bruteforce. Today.. we do it single-shot with some help of glibc/nss. haxx.in/CVE-2021-3156_nss_po…
8
136
5
377
Load more