@stdoutput

security software engineer, ctf @fluxfingers @moritz@infosec.exchange

 Germany
msanft.foo/
Joined March 2019
  • Tweets1.1K
  • Following791
  • Followers1.4K
196Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Moritz Sanft retweeted
BlackAlps@BlackAlpsConf11h
📅#BlackAlps26 FRIDAY AM PROGRAM incl. @stdoutput from @EdgelessSystems S. Duc from @Adnovum M. Vaitsman & D. Taler from @varonis & @FrenchYeti #MultiTaintAnalysis #ConstantTimeVerification #0Day #PQCMigration #M365CopilotAbusing Don't miss it lnkd.in/eB4pEf9S
1
2
150
Replying to @thorstenball
I have recently thought about this, and currently think that 1) holds true at least for lower-level software that building (testing, ...) is costly for an agent. Think security-critical OS parts, etc. - I believe 2) to be true for pretty much the whole rest of the stack.
171
Replying to @thorstenball
You should be accurate. This is not standard roast-chicken flavor, but "Poulet im Chörbli" (roast-chicken in a basket). You need to account for the basket.
1
64
Replying to @AmpCode
@AmpCode if I report a bug through the "report bug" form, it'd be great to get some feedback on if / where I'll be notified if the bug is fixed, needs further input, etc.
1
2
634
Replying to @thorstenball
grr, gotta complain at cleanshotx then :p
1
1
1
27
Replying to @thorstenball
😩
1
1
171
Replying to @ProgrammerDude @HSVSphere
there are far easier ways to backdoor just about any package in nixpkgs unfortunately
32
Replying to @es3n1n
realtired might be some good lingo
1
69
Replying to @es3n1n
re
1
2
340
Moritz Sanft retweeted
pspaul@pspaul95Jun 2
A fun gadget I found recently! The .NET JIT compiler makes sure there are no rwx pages by using a memfd, but that turns file writes into straight shellcode execution 🐚
Sonar Research
@Sonar_ResearchJun 2
Shellcode execution as a service! To exploit an argument injection in Jellyfin, we searched and found a gadget in the .NET runtime to turn file writes into code execution. Learn about the bug and this new technique: sonarsource.com/blog/jellyfi… #appsec #security #vulnerability
11
86
10,797
The video recording of our talk is live now: youtube.com/watch?v=xmhxPZvU… The slides can be found here: docs.google.com/presentation… Enjoy!
offensivecon
@offensive_conMay 15
SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95 and @stdoutput
7
20
3,659
Replying to @es3n1n
same pls ping if you find one
2
902
Replying to @carste1n
That one indeed is a gem. You’ve got good taste;)
1
101
Replying to @carste1n
Glad that you're interested in the talk. This should work: docs.google.com/presentation… Let me know if it doesn't. Talk recording should also be available soon-ish. For now, you can also take the blog post as a more detailed reference along the slides: zeroday.cloud/blog/postgresq…

[FOR SHARING] OffensiveCon - SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay...

SELECT shell FROM postgres Digging up a 20-year-old bug for ZeroDay.Cloud Paul Gerste & Moritz Sanft ▄▄▄ ▄▄▄ █JJJ█ █JJJ█ █J J█ █J J█ █J J█ █J J█ █J J█ █J J█ █J J█▄▀▀▄█J J█ █4A4A4A4A4A█ █4A4A4A4A4A4A█...

docs.google.com
1
2
14
912
Replying to @ifsecure
Any chance you could share the slides? Thanks for the great talk!
1
1
176
Moritz Sanft retweeted
offensivecon
@offensive_conMay 15
SELECT shell FROM postgres: Digging up a 20-year-old bug for ZeroDay.Cloud by @pspaul95 and @stdoutput
4
1
24
6,153
Moritz Sanft retweeted
Nir Ohfeld
@nirohfeldMay 4
We @wiz_io just launched zeroday.cloud - a community for vuln researchers, by vuln researchers. Feat. writeups for PostgreSQL and MariaDB RCEs (@xint_official, @pspaul95 & @stdoutput) Stay tuned for the bug tracker and upcoming events. Big things coming soon 👀

ZeroDay.cloud | Vulnerability research community

Join ZeroDay.cloud, a cloud security and vulnerability research community. Compete in CTF challenges, discover zero-days, and climb the leaderboard.

zeroday.cloud
1
17
2
103
7,933
Our writeup of our ZeroDay.Cloud Postgres exploit is live. We think it's a pretty neat bug and the exploitation was really fun, so check it out!

ZeroDay.cloud | Vulnerability research community

Join ZeroDay.cloud, a cloud security and vulnerability research community. Compete in CTF challenges, discover zero-days, and climb the leaderboard.

zeroday.cloud
Wiz
@wiz_ioMay 4
The secret's out.🤫 Introducing THE ZERODAY.CLOUD COMMUNITY 👾 Inside: • 0-day vuln deep dives from @xint_official, @stdoutput, @pspaul95 & more... • Access to events & a network of world-class hackers • CTFs with prizes Join now :)
6
887
Trying to get some new folks onto the AI for security research Discord server: discord.gg/sVy9ahuEv Feel free to share with your peers in the field!🤖🐛

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com
1
267
Replying to @0xrudrapratap @pspaul95 @garethheyes
No
1
2
83
Load more