Security Re..(dare i say it?) , struggling janitor. tweets,replies,retweets,likes,DMs entirely my own doing, undoing
Seattle, WA
Joined October 2009
- Tweets661
- Following157
- Followers795
- Likes4.4K
Rohit Mothe retweeted
At @defcon 33, George Hughey (@ecthr0s) and Rohit Mothe (@rohitwas), Senior Security Research Managers at MSRC, took us back to the 90s with their talk on the ghost of Internet Explorer in Windows: MapUrlToZone.
They uncovered how this legacy API, used by Outlook, Office, Windows Shell, and sandboxes to make security decisions, was vulnerable to manipulation. Their deep dive revealed a dozen CVEs and led to systemic mitigations across Microsoft platforms.
Learn how MSRC’s technical investigations drive proactive protection for customers and why legacy code still matters in the slides available here: msft.it/6013su8Ef
#DEFCON #DEFCON33
ALT George Hughey and Rohit Mothe
Looking to hire 2 experienced Security Researchers in the US for the Exploits Research Team within the Microsoft Security Response Center (MSRC)
Senior Security Researcher
jobs.careers.microsoft.com/g…
Security Researcher II
jobs.careers.microsoft.com/g…
Rohit Mothe retweeted
This week's Patch Tuesday included 8 CVEs that @rohitwas and I found!
We've been focusing on findings ways to bypass MapUrlToZone and found several very interesting ways to confuse it. This is an API we've seen a lot of interest in lately, so good to have it locked down!
Rohit Mothe retweeted
To help protect against NTLM relay attacks, we’ve enabled Extended Protection for Authentication (EPA) by default in Windows Server 2025. This update strengthens key services like Exchange Server, Active Directory Certificate Services (AD CS), and LDAP, making identity compromise and unauthorized access more difficult.
Learn more about these security improvements and how they can help protect your systems in our blog post: msrc.microsoft.com/blog/2024…
Rohit Mothe retweeted
MSRC V&M is expanding and is looking for a leader who can guide team of hackers in tackling challenging problems in the areas of Open Source, Supply Chain and Hardware security. If you have the skills and passion for vulnerability management. Apply Now @
jobs.careers.microsoft.com/g…
Rohit Mothe retweeted
MSRC Vulnerability and Mitigation (V&M) team is expanding into exciting challenges of Open-Source vulnerability response and research. This is an opportunity for you to redefine how Microsoft respond and research in this space. Interested? Apply @ jobs.careers.microsoft.com/u…
Rohit Mothe retweeted
We have our Microsoft STRIKE Capture the Flag winners! Drumroll, please!🥁
Congrats to the top 3 teams:
🥇JasonsJsons
🥈Capture the Food
🥉0xCAFEBABE
#MSFTSTRIKE
ALT Microsoft STRIKE winning teams
Why is the best defense good offense?
like..why is the best defense not the best offense, how does a superlative in one domain equate to merely “good” in another…
#RandomThoughtsThursday
Rohit Mothe retweeted
Yesterday's Patch Tuesday saw the release of 10 CVEs I found in DNS! These could potentially allow an authenticated attacker to gain remote code execution. A huge thank you to the DNS team who worked through and fixed these.
msrc.microsoft.com/update-gu…
Rohit Mothe retweeted
Time for a new blogpost! Let's do a CHERIoT walkthrough - including a straightforward setup, understanding how we kill bug classes and mitigating attacks on our minimal TCB through practical examples, and more fun! msrc.microsoft.com/blog/2023…
Rohit Mothe retweeted
Speaking of Function Overrides... here is the video of my presentation: recon.cx/media-archive/2022/…. Thanks @reconmtl and @hugofortier !
Rohit Mothe retweeted
I was super excited to talk to @44CON today, thanks for having me! If you spot me and want to talk about kernel exploits, come and say hello! If you missed the talk, check out the MSRC blog post I did: msrc-blog.microsoft.com/2022… 🙂
Rohit Mothe retweeted
What is the true impact of a blind arbitrary kernel pointer read primitive? DoS, second order info leak, or is something more possible (EoP / RCE)? I'll be discussing this at 44Con next month, come and join us! 🙂
44CON 2022 Talk announce : @arudd1ck will be "Exploring a New Class of Kernel Exploit Primitive" - 'we will discuss how new exploitation primitives may be possible' - oooOOOo this'll be good. 44con.com/get-ticket #44CON
Rohit Mothe retweeted
One of my favorite people to work with. Big recommendation from me if you’re interested in working with amazing kernel engineers.
I'm looking for talented software engineers for multiple positions in the Windows Kernel team to create the best platform for Azure, Xbox, HoloLens and Desktop.
linkedin.com/feed/update/urn…
Rohit Mothe retweeted
I'm looking for talented software engineers for multiple positions in the Windows Kernel team to create the best platform for Azure, Xbox, HoloLens and Desktop.
linkedin.com/feed/update/urn…
Rohit Mothe retweeted
Second part of the iBoot Firebloom blogpost series is up! This time, reversing the functionalities around the type pointer :) Hope you'll find this interesting! saaramar.github.io/iBoot_fir…
Second part of @AmarSaar ‘s great work RE’ing iBoot Firebloom
Second part of the iBoot Firebloom blogpost series is up! This time, reversing the functionalities around the type pointer :) Hope you'll find this interesting! saaramar.github.io/iBoot_fir…
Rohit Mothe retweeted
We're super excited to announce the release of snmalloc 0.6.0 with a load of new security features that no other allocators have. We have a small write up of the features: github.com/microsoft/snmallo… 🧵(1/5)
Rohit Mothe retweeted
Last year, Apple shared a high-level overview of "Memory safe iBoot implementation". I thought it would be nice to reverse and write about it, hope you will find it interesting :) saaramar.github.io/iBoot_fir…