Zack Brdge retweeted
I’ve spent more time inside the Twitter codebase than 99.9999% of humanity and folks, I literally don’t understand what it would mean to give someone a quick “tour” of “the Twitter code” – at Ciudad Autónoma de Buenos Aires, Argentina
Zack Brdge retweeted
Replying to @marktenenholtz
Zack Brdge retweeted
Binary episode is live in 10 minutes. Today we have some questionably exploitable bugs in Edge, a SHA-3 int overflow, and a recent io_uring exploit.
twitch.tv/dayzerosec
Zack Brdge retweeted
Python 3.11 is out! 🎉
This is one of the most exciting releases in a while, including significant speed upgrades and better error messages.
Here's what's new:
Zack Brdge retweeted
Eko eko ekooo... I will participate in @ekoparty conference next week. This time, I will talk about Misuse of Apple AirTags, and how to protect against them. Adding "reverse stalk engineering" and mimicking AirTag BLE techniques. Also, I will release a spoofing code for Flipper:
Zack Brdge retweeted
VKCUBE ON @AsahiLinux !!!
Zack Brdge retweeted
SharedMemUtils - A simple tool to automatically find vulnerabilities in shared memory objects (commonly used for IPC in Windows services)
This tool immediately uncovered potential exploitation routes in both Nvidia and Dell Audio services on my system.
x86matthew.com/view_post?id=…
Zack Brdge retweeted
"Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules"
#infosec #pentest #redteam
github.com/ScarredMonk/Sysmo…
Zack Brdge retweeted
Latest git clone of CDE builds and runs on the OpenBSD ARM64 7.2 without any issues :)
Zack Brdge retweeted
I'll write a blog post soon - in the mean time check out this incredibly detailed blog post by @0vercl0k about reverse engineering tcpip.sys. this work made the REing of this bug much easier.
doar-e.github.io/blog/2021/0…
Zack Brdge retweeted
“Golang’s core team released a patch that fundamentally changes how that language parses URLs. Before version 1.17, Golang considered semicolons within a URL query portion as a valid delimiter”
Easy to miss but good vector for auth/authorization bypass! oxeye.io/blog/golang-paramet…
Zack Brdge retweeted
My @defcon talk, The Hitchhacker’s Guide to iPhone Lightning and JTAG Hacking, is now on YouTube!
youtube.com/watch?app=deskto…


























