@secure_sec77

IT-Security Researcher | OSCP | OSWP | PNPT | Creator of Perlite

secure77.de
Joined September 2021
  • Tweets84
  • Following158
  • Followers175
10Media
New Writeup: Malware deep dive into Zero2Automated Cruloader, a 3-stage malware using RC4+XOR encryption, API hashing via custom ROT13/CRC32, and process hollowing into svchost.exe. #MalwareAnalysis #ReverseEngineering notes.secure77.de/WriteUps/Z…
1
1
4
231
Don't want to implement your own authentication and access control in your app? You don't have to, I've published a new blog post that deals with the topic of authentication and file access control with authentik for Perlite: secure77.de/perlite-access-c…

Perlite - Access Control via Authentik - Secure77

This question has been asked several times by various users: „Can we get an authentication mechanism for Perlite?“ For those who don’t know what Perlite is: it’s a web app that lets you easily host...

secure77.de
1
86
#StrelaStealer: My honeypot is being hit with my disclosed login details. Over the past 72 hours, I have logged more than 89000 login attempts from 2500 different IP addresses. They fetching metadata from emails newer then 07.02.2026 secure77.de/strelastealer-20…

StrelaStealer 2026 - Malware Analysis - Secure77

Malware Analysis of a IMAP Credential Stealer This is a blog post about malware designed to steal information, which is distributed via phishing emails and connects to a C2 server in several steps,...

secure77.de
2
78
StrelaStealer 2026 variant, this is my fist blog post about malware 👀 secure77.de/strelastealer-20…

StrelaStealer 2026 - Malware Analysis - Secure77

Malware Analysis of a IMAP Credential Stealer This is a blog post about malware designed to steal information, which is distributed via phishing emails and connects to a C2 server in several steps,...

secure77.de
1
4
164
New Perlite Release 1.6.1 github.com/secure-77/Perlite…

Release Release 1.6.1 · secure-77/Perlite

Support Zettelkasten Filenames, use with caution! - PR #159 thanks to @smtucker replaced deprecated utf8_decode() - PR #164 thanks to @dewillepl fixed theme issue #167 implemented issue (additional...

github.com
1
1
77
Ready for takeoff? 🚀 Prepare for the brand-new pieces of content coming to the #HackTheBox platforms this week! 🔴 Atlas, a migrated #Vulnlab Machine created by xct 🔴 Bruno, a migrated #Vulnlab Machine created by xct 🔵 SillyEli, a Sherlock created by GuyEldad95 & Roey 🔴 Global Hyperlink Zone, a Challenge created by DCryp7 🔴 Conversor, an HTB Seasons Machine created by FisMatHack Get started now on #HTB Labs and Enterprise Platform: okt.to/5NuP2w #Cybersecurity #InformationSecurity #NewRelease #Hacking #CyberSkills
2
7
82
6,676
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise...

dirkjanm.io
138
899
112
3,174
481,798
New Release of Perlite is out now! Version 1.6 now supports pretty URLs 🥳 github.com/secure-77/Perlite…

Release Release 1.6 · secure-77/Perlite

get rid of mb_strlen, fixed issue #151 thanks to @Sephral hide X / Twitter when not set, issue #152, thanks to @EKNr1 implemented settings.php, issue #119, thanks to @EKNr1 implemented pretty urls,...

github.com
1
133
I have published a new blog post describing several vulnerabilities that can be chained to get unauthorized RCE in Smart Time Plus < 8.6. secure77.de/smart-time-plus-…

Smart Time Plus RCE - CVE-2024-53543 - Secure77

The Software Smart Time Plus < 8.6 contains several vulnerabilities: which can be chained to achieve unauthenticated remote code execution as SYSTEM on the Windows host. Background and Research...

secure77.de
2
4
315
New Perlite version 1.5.9 is out, you can get it from github.com/secure-77/Perlite…

Release Release 1.5.9 · secure-77/Perlite

added YouTube link support #133 thanks to @rsubr added image postion support thanks to @ar0x4 fixed direct page links #90 added support for webp images #126 fixed kartex problem PR #131 thanks to @...

github.com
3
144
new blogpost time!! this one's a fun writeup on a vulnerability chain i found across multiple google services that earned me a $4133.70 bounty lots of fun css as usual! i had to recreate a bunch of drive/docs/gmail/youtube UIs c: have fun! lyra.horse/blog/2024/09/usin…

Using YouTube to steal your files

A writeup of my $4133.70 Google Drive vulnerability chain.

lyra.horse
20
166
11
738
71,167
22
268
42
2,763
112,885
#FakePotato (CVE-2024-38100) post is out! Check out the short write-up on this unexpected vulnerability 😅 decoder.cloud/2024/08/02/the…
3
105
3
233
19,811
First day at Crowdstrike, pushed a little update and taking the afternoon off ✌️
2,700
30,503
5,992
393,450
46,946,832
I played a little bit with unity engine android games and published a new blog post secure77.de/how-to-patch-a-a…

How to Patch a Android Unity Game - Secure77

This post is a follow-up of the How to mod a simple Android App post and heavily based on this great article https://hacking.kurcin.com/android/use-frida-to-controll-unity-app-il2cpp/ Background...

secure77.de
4
8
326
#x33fcon hacker pirate ship 2024. Ahoy sea wolves! It was a great pleasure to fish and hunt with you :)
1
7
2
39
8,050
Best crowd ever 🤩⛵️🏴‍☠️
4
8
4
74
13,278
On our way back to Gdynia #x33fcon #hacker #pirates
4
16
1,699
On the way to @x33fcon 😀👻
12
360
Excited to announce our new blog post on new event handlers to trigger XSS! Huge thanks to @bojanz for making this happen and to @PortSwiggerRes for their awesome XSS cheat sheet, now featuring these techniques. infigo.hr/en/insights/46/int…
1
7
1
19
3,382
Load more