trotmaster (@trotmaster99) header
trotmaster (@trotmaster99) profile picture

trotmaster

@trotmaster99
 UK
Joined April 2012
  • Tweets283
  • Following83
  • Followers347
9Media
Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)Photo by trotmaster (@trotmaster99)
Success! The @mwrlabs wrapped up the #Pwn2Own Tokyo contest with a successful demonstration of a browser exploit on the #Xiaomi Mi6. Now off to the disclosure room for details and verification.
1
8
22
What an event. Massive thanks to the @zdi team for running this year's #P2Otokyo . And big shout out to @fluoroacetate for a seriously impressive set of submissions!
1
12
Confirmed! @mwrlabs popped a captive portal with no user interaction, followed by an unsafe redirect and an unsafe application load to get code execution on the #Samsung #Galaxy S9. The exploit chain earns them another $30K and 6 more Master of Pwn points.
1
37
3
104
Confirmed! The folks from @mwrlabs chained together 5 different logic bugs - including the silent installation of an app via JavaScript - to get code execution over Wi-Fi on the #Xiaomi Mi6. They earned themselves $30K USD and 6 Master of Pwn points.
2
47
4
135
#Pwn2Own Tokyo is underway! The contest order has been decided via random drawing. Our program starts with @fluoroacetate targeting the #Xiaomi Mi6 with an NFC exploit. See the full schedule and updated results at bit.ly/2RQyUdT. #P2OTokyo
Zero Day Initiative — Welcome to Pwn2Own Tokyo 2018 - Day One

Zero Day Initiative — Welcome to Pwn2Own Tokyo 2018 - Day One

こんにちは and welcome to Pwn2Own Tokyo 2018 -- coming to you again from  PacSec  at the Aoyama St. Grace Cathedral in Tokyo, Japan. The venue is decked out for the holidays, and we’re expecting our...

zerodayinitiative.com
1
9
27
The drawing to determine the order of attempts will be at 9am tomorrow with the first attempt coming at 9:30. Until then, enjoy this preview of the Master of Pwn jackets.
Image from TrendAI Zero Day Initiative (@thezdi)
5
1
30
Using @intel Remote Web Console? Time to patch! intel.com/content/www/us/en/…
INTEL-SA-00171

INTEL-SA-00171

INTEL-SA-00171

intel.com
trotmaster retweeted
Ben Hawkes (@benhawkes) profile picture
Ben Hawkes
@benhawkes10 Sep 2018
Project Zero blog: "OATmeal on the Universal Cereal Bus: Exploiting Android phones over USB" by @tehjh - googleprojectzero.blogspot.c…
OATmeal on the Universal Cereal Bus: Exploiting Android phones over USB

OATmeal on the Universal Cereal Bus: Exploiting Android phones over USB

Posted by Jann Horn, Google Project ZeroRecently, there has been some attention around the topic ...

projectzero.google
1
142
3
222
Announcing #Pwn2Own Tokyo 2018. This year, we bring #IoT devices along with phones as targets. Over $500,000 USD available in cash and prizes. Get all the details here: bit.ly/2oF20R6. See you in Tokyo! #P2OTokyo
Zero Day Initiative — Announcing Pwn2Own Tokyo for 2018

Zero Day Initiative — Announcing Pwn2Own Tokyo for 2018

This is the time of year we at the Zero Day Initiative (ZDI) typically announce the targets and rules for our annual Mobile Pwn2Own competition. While we still want to find the latest and greatest...

zerodayinitiative.com
4
76
3
109
#DNSRebinding isn't just for owning your router, it's also for owning your #AWS #cloud deployments, @alxk_mwr pops headless analytics services labs.mwrinfosecurity.com/blo…
59
1
89
Awesome news to wake up to. Thanks everyone!!!
@mikko (@mikko) profile picture@mikko
@mikko9 Aug 2018
Replying to @trotmaster99
@trotmaster99 @munmap Congrats! You just won a Pwnie!
Image from @mikko (@mikko)
2
13
The 2018 Pwnie Awards nominees are up! pwnies.com/
6
125
16
150
📝 New post! I stumbled across a serious browser security bug & I can finally talk about it. The post covers: ➡️ An exciting new logo. ➡️ Range requests. ➡️ "No-cors" requests. ➡️ Sneaking past origin security. ➡️ The importance of standards. jakearchibald.com/2018/i-dis…
I discovered a browser bug

I discovered a browser bug

jakearchibald.com
36
314
35
787
A very warm welcome to F-Secure @mwrinfosecurity! F-Secure takes a big step towards cyber security leadership by acquiring MWR InfoSecurity press.f-secure.com/2018/06/1…
Image from WithSecure™ (@WithSecure)
2
56
13
107
Last batch of bugs now patched from Mobile Pwn2own 2017 for the Huawei Mate 9 Pro: huawei.com/en/psirt/security…. Tech whitepaper to follow later in the week #pwn2own
15
38
This year at @InfiltrateCon we're being honest, both with our exact methodology for pwn2own, and with our tour T-shirts ;)
Image from trotmaster (@trotmaster99)
4
10
At #CYBERUK18 next Tuesday? Our very own Robert Miller and Georgi Geshev talk vulnerabilities and automating the research process to make efficiency savings [14:50 - Exchange Auditorium] | #infosec #vuln xitter.cf/CYBERUKevents/status/9…
CYBERUK (@CYBERUKevents) profile pictureCYBERUK@CYBERUKevents4 Apr 2018
CYBERUK In Practice Track 1: Vulnerabilities and Bug Hunting #CYBERUK18 ncsc.gov.uk/blog-post/cyberu…
3
5
😢 xitter.cf/richinseattle/status/9…
Richard Johnson (@richinseattle) profile pictureRichard Johnson
@richinseattle4 Apr 2018
Cool research from Georgi xitter.cf/munmap/status/98136074…
2
5
Remote keystroke injection in Intel's Remote Keyboard application. Product is discontinued, so remember to uninstall! security-center.intel.com/ad…
1
Exploring Qualcomm Baseband via ModKit #MobileSecurity #AndroidSecurity [SLIDES] #cansecwest2018 cansecwest.com/slides/2018/E…
Image from Mobile Security (@mobilesecurity_)
41
67
Load more