Shmuel Cohen @_BinWalker_

Former Security researcher @SafeBreach | Former malware researcher @_CPResearch_ | 3x BlackHat speaker | DEFCON speaker | SecTor speaker Joined September 2018

Tweets

81
Followers

249
Following

243
Likes

299

Alon Leviev @alon_leviev

3 months ago

Our research on BitLocker got nominated for not one but TWO Pwnie Awards - “Best Desktop Bug” and “Most Innovative Research”! Happy for the 3rd Pwnie Award nomination in two consecutive years @PwnieAwards !

3 6 28 3K 4

Download Image

Binni Shah @binitamshah

11 months ago

Windows Downdate : Downgrade Attacks Using Windows Updates : safebreach.com/blog/downgrade… Slides : i.blackhat.com/BH-US-24/Prese…

0 7 29 4K 17

Alon Leviev @alon_leviev

12 months ago

My DEF CON 32 talk “Windows Downdate: Downgrade Attacks Using Windows Updates” is live on YouTube! youtu.be/HHmxuxQ7bE8?si…

4 89 289 24K 134

Or Yair @oryair1999

a year ago

If you're into researching Google's Quick Share, don't forget to check out QuickShell! It implements the RCE chain we found and tools allowing to sniff, receive and send the protocol's packets, fuzz the protocol, exploit vulnerabilities we found and more! github.com/SafeBreach-Lab…

1 25 84 12K 46

Shmuel Cohen @_BinWalker_

a year ago

It looks like we finally got POC for CVE-2024-38063 Check it out, looks good github.com/ynwarcs/CVE-20…

0 0 3 263 1

Alon Leviev @alon_leviev

a year ago

Had the best time presenting Windows Downdate at @BlackHatEvents USA and @defcon 32, thank you all for joining. Windows Downdate is now live! Blog - safebreach.com/blog/downgrade… GitHub repo - github.com/SafeBreach-Lab… #BHUSA #DEFCON32

1 15 50 6K 15

Download Image

Or Yair @oryair1999

a year ago

I had the best time presenting QuickShell with @_BinWalker_ at @defcon !! 👨‍💻🥷 True enthusiasts in this conference you just can't ask for a better audience as a speaker Blogpost is live - safebreach.com/blog/rce-attac… And don't forget to check out the tool - github.com/SafeBreach-Lab…

0 4 5 630 0

Download Image

Alon Leviev @alon_leviev

a year ago

Reminder: tomorrow at @BlackHatEvents 10:20 AM in Oceanside A - I will be sharing my journey of researching downgrade attacks on Windows and their severe implications on Windows’s platform security. Join my talk “Windows Downdate: Downgrade Attacks Using Windows Updates” #BHUSA

1 3 10 2K 0

Shmuel Cohen @_BinWalker_

a year ago

It's my honor to present alongside Or. This talk is going to be amazing, I promise ;) See you at #DC32

Or Yair @oryair1999

a year ago

It's my honor to present alongside Or. This talk is going to be amazing, I promise ;) See you at #DC32

2 2 11 2K 0

Download Image

0 0 3 226 0

Shmuel Cohen @_BinWalker_

a year ago

ProcessHacker is now called SystemInformer, and it looks just amazing with lots of new features. Make sure you check it out if you use the old ProcessHacker: github.com/winsiderss/sys…

0 2 0 215 4

Or Yair @oryair1999

a year ago

The MagicDot concepts won't disappear from Windows soon. In addition to reading MagicDot's blogpost, if you aim to find vulns based on the known unfixed issue, don't miss @tiraniddo 's blogpost about Windows path types and their convertion to NT paths - googleprojectzero.blogspot.com/2016/02/the-de…

0 6 20 2K 11

Download Image

The Hacker News @TheHackersNews

a year ago

⚠️Windows users, watch out! Researchers detail a #vulnerability in the Windows DOS-to-NT path conversion process which can be exploited by threat actors to gain rootkit-like capabilities, hiding files and processes without admin permissions. thehackernews.com/2024/04/resear… #hacking

4 117 216 34K 53

Shmuel Cohen @_BinWalker_

a year ago

Make sure you read this cool article about my recent research "The dark side of EDR: repurpose EDR as an offensive tool"

Dark Reading @DarkReading

a year ago

Make sure you read this cool article about my recent research "The dark side of EDR: repurpose EDR as an offensive tool"

0 6 24 6K 5

1 1 5 523 2

Shmuel Cohen @_BinWalker_

a year ago

Make sure you check out this amazing research made by @oryair1999

Or Yair @oryair1999

a year ago

Make sure you check out this amazing research made by @oryair1999

0 10 23 5K 6

Download Image

0 0 1 297 1

Black Hat @BlackHatEvents

2 years ago

#BHASIA Briefing "The Dark Side of EDR: Repurpose EDR as an Offensive Tool" will dive into the implications of this novel attack vector, shedding light on the intricate relationship between attackers and XDR. Learn more about the talk and register here>> bit.ly/3x2dB3d

0 6 19 6K 6

Download Image

DirectoryRanger @DirectoryRanger

2 years ago

EDRaser. powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines github.com/SafeBreach-Lab…

0 52 135 8K 94

Shmuel Cohen @_BinWalker_

2 years ago

I am thrilled to share some exciting news with you all! I have been accepted to present not just one, but TWO of my research projects at Black Hat Asia 2024 (@BlackHatEvents)! 🚀 Check out all briefings: blackhat.com/asia-24/briefi… #BHAsia #BlackHat #CyberSecurity

0 1 7 227 0

Alon Leviev @alon_leviev

2 years ago

Had a great time presenting my research about the creation of the PoolParty tool at Black Hat EU 2023 @BlackHatEvents 🎩 Thank you all for joining! PoolParty is now live at - github.com/SafeBreach-Lab… PoolParty research blogpost is now live at - safebreach.com/blog/process-i… #BHEU

8 38 96 16K 45

Download Image

Ariel Gamrian @Ariel_Gamrian

2 years ago

Learn how I proved I can undetectably run a crypto miner for free using Azure Automation service: safebreach.com/blog/cryptocur… Github: github.com/safebreach-lab… Microsoft said it's "By design" meaning it is still exploitable. ⚠️Azure's terms of use do not permit crypto mining