@rexploit@chaos.social see you there
Switzerland
Joined April 2009
- Tweets1.8K
- Following816
- Followers2.2K
- Likes864
Max Moser retweeted
Shells at midnight: Exploiting the flexibility of Email addresses for offensive purposes.
Today we are publishing a new blog post about our disclosure report on #MailCleaner #CVE-2024-3191: modzero.com/en/blog/beyond_t…
@[email protected] will also present at @a41con today.
@swisspost es ist schon fast lustig wenn es nicht so traurig wäre. Trotz Gespräch mit euren Hotlines und den Vermerken in eurem System dreht mein Paket Runden. Die Adresse ist klar, deutlich und korrekt. Das habt ihr mit euren Scans sogar bestätigt. #postfail
@swisspost Winterthur ist nicht bei Genf und die Kosten der Hotlines obendrauf. Klar AI Erkennung ist super. Werdet euch doch mal einig.
Max Moser retweeted
We identified critical vulnerabilities in MailCleaner. A command injection vulnerability can be exploited by sending an Email. Our report can be found here: modzero.com/en/advisories/mz…
Kudos to chaos.social/@born0monday and chaos.social/@parzel #MailCleaner #CVE-2024-3191 #Infosec
Max Moser retweeted
How do you hack Internet-connected devices? Today, our colleagues @parzel2 and @[email protected] will present their research at the #37C3 on how to turn a Poly VoIP phone into a wiretap, giving beginners some starting points for own research projects. events.ccc.de/congress/2023/…
Max Moser retweeted
Please remind me how we are moving forward. In this video, a machine from the year ~2000 (600MHz, 128MB RAM, spinning-rust hard disk) running Windows NT 3.51. Note how incredibly snappy opening apps is. 👇
Max Moser retweeted
Better make sure your password manager is secure -- or someone else will. We found critical security issues in the enterprise password manager Passwordstate that allowed to access passwords and gain a shell -- without any authentication #CVE-2022-3875 modzero.com/modlog/archives/…
Max Moser retweeted
Reverse engineering via GDB.
xitter.cf/ClownWorld_/status/158…
@[email protected] @joinmastodon see you over there. If you like that i find you there as well reply with the handle or dm me with it.
Max Moser retweeted
How Wi-Fi spy drones snooped on financial firm go.theregister.com/feed/www.…
If you are privileged on system but Falcon is getting in you way. Fear not, just uninstall it. The uninstall token is not required. See modzero.com/modlog/archives/… for details.
Max Moser retweeted
We found a security issue in the latest @CrowdStrike #FalconSensor. The bug itself isn't worth a tweet as the severity is pretty low. However, we’d like to shed some light on a ridiculous vulnerability disclosure process with CrowdStrike. #CVE-2022-2841 modzero.com/modlog/archives/…
Max Moser retweeted
Had a look at quite a nice (new-ish?) way to dump LSASS memory into WinDBG Time Travel Debugging (TTD) format, and pull creds out offline. 🧵
Max Moser retweeted
Oops, they did it again!
The Titan-M chip is the root of all security in Google's Pixel phones
@DamianoMelotti & @max_r_b will talk about their journey from Reversing & Fuzzing to Code Execution & leaking its encryption keys tomorrow at @WEareTROOPERS
troopers.de/troopers22/agend…
ALT TItan-M chip in a Google Pixel phone with wires soldered for pwnage
I will be at the @a41con and giving some insights on the #MeetingOwl issues during my talk. Come meet me in the hallway track 😀 during the conference days and have a good chat 🍻
If you want to hunt for MeetingOwl devices in your network. Check for devices with a MAC Address starting with BC:D7:13 or check your proxy/firewall/dns logs for connections to owllabs.com
Well as some questions start coming up regarding the #MeetingOwl insecurities. Here are some short and clear infos. Details in our report. modzero.com/modlog/archives/…
The geolocation of your device is exposed, as well as the domain and company name you entered during the registration.