
𝔰𝔞𝔤𝔢 | Infosec Pentester | OSCP | @wrccdc BlackTeam/RedTeam | Computer Stuff, Car Stuff, and Random Stuff
California, USA
Joined July 2012
- Tweets504
- Following818
- Followers259
- Likes1.8K
Rafa retweeted
we got a persistent 0click on ChatGPT by sharing a doc
that allowed us to exfiltrate sensitive data and creds from your connectors (google drive, sharepoint, ..) + chat history
+ future conversations
it gets worse. we deploy a memory implant
#DEFCON #BHUSA @tamirishaysh
Rafa retweeted
Pwning a Brother labelmaker, for fun and interop! : sdomi.pl/weblog/20-pwning-a-…
Brother VC-500W RCE PoC (and other cool scripts) : git.sakamoto.pl/domi/zinkpwn
Rafa retweeted
Howdy hackers, are you ready for another chance to score an IWC Mark II Badge before @defcon?
Just follow @IronwoodCyber and retweet this tweet.
We'll pick a winner daily, plus a few extra on the last day 8/2 😉
Winners will be contacted via DM!
#defcon #dc31 #badgelife
Rafa retweeted
PHP is Frankenstein reddit.com/r/programmerhumor…
Rafa retweeted
When the internal pentest is too difficult, a small appointment can do the trick 👀 #CVE-2023-23397
Rafa retweeted
How I hacked into a Telecom Network — Part 1 (Getting the RCE) : infosecwriteups.com/how-i-ha…
Part 2 : TCP Tunneling : infosecwriteups.com/how-i-ha…
3 : Stealthy SSH & Dynamic Tunnels : infosecwriteups.com/how-i-ha…
4 :Getting Access to CDRs, SS7 applications & VLRs: infosecwriteups.com/how-i-ha…
Rafa retweeted
I hacked a car company last year.
I found a way to steal every customer's
• Name
• Email address
• Phone number
• Address
Here's how I did it:
Rafa retweeted
Tutorial on how to weaponize your YubiKey by @Wh1t3Rh1n0
buff.ly/3EyM9dw
#yubikey #infosec #CyberSecurity #hacking #redteam
Rafa retweeted
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.
Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-brow…









































