fromheroto... @_mzer1221

Joined March 2016

Tweets

28
Followers

40
Following

198
Likes

142

Hexacon @hexacon_fr

2 years ago

💎🔨 Exploiting Hardened .NET Deserialization: New Exploitation Ideas and Abuse of Insecure Serialization, by Piotr Bazydło (@chudyPB)

0 16 79 21K 7

Download Image

Trend Zero Day Initiative @thezdi

3 years ago

Riding the inforail to exploit #Ivanti Avalanche: @chudyPB provides details on several bugs he found in the popular MDM tool. He goes in-depth on root cause, including a video of one of the bugs in action. Read all about it at zerodayinitiative.com/blog/2022/7/19…

0 24 78 0 12

Trend Zero Day Initiative @thezdi

3 years ago

Confirmed! @chudyPB used an untrusted search path bug to get code execution on AVEVA Edge. He wins another $20,000 and 20 Master of Pwn points. That brings his contest total to $45,000. #Pwn2Own #P2OMiami

0 2 15 0 0

Trend Zero Day Initiative @thezdi

3 years ago

Confirmed! @chudyPB used a deserialization bug to exploit Inductive Automation Ignition and execute his code on the system. He earns $20,000 and 20 Master of Pwn points. #Pwn2Own #P2OMiami

0 5 33 0 0

Trend Zero Day Initiative @thezdi

3 years ago

Bug collision - Piotr Bazydło (@chudyPB) was able to get RCE on Iconics Genesis64, however the bug he used had been previously seen. He still earns $5,000 and 5 Master of Pwn points. #Pwn2Own #P2OMiami

0 4 19 0 0

STM Cyber @stm_cyber

4 years ago

Our research on @IBM Password Sync Plugin for Windows AD was recognized in their Security Bulletin ibm.com/support/pages/… PoCs for our findings: LDAP Injection/account takeover blog.stmcyber.com/vulns/cve-2021… Memory corruption - stack/heap blog.stmcyber.com/vulns/cve-2021… blog.stmcyber.com/vulns/cve-2021…

0 7 14 0 0

Download Image

p4 @p4_team

4 years ago

Intel finally fixed the CPU bug our XAAS challenge from #confidence2020 was based on 😀. You can find our writeup and exploit at github.com/p4-team/ctf/tr… and Intel's advisory at intel.com/content/www/us…. We originally got the idea from @trav_downs' research: travisdowns.github.io/blog/2020/05/1…

1 13 57 0 7

Elusive_Fox @E1u5iv3F0x

4 years ago

Recently I have created new xss challange (xss_2). For brave enough here's the link: elusivefox.net/challenges/xss…

0 3 3 0 0

STM Cyber @stm_cyber

4 years ago

Helpful collection of #Excel4.0 functions for #RedTeam and #BlueTeam. Check out our #github: github.com/STMSolutions/A… #pentest

0 6 15 0 2

Cody Sixteen @CodySixteen

4 years ago

Returning root to userland - quick journey for the weekend - FYI - code610.blogspot.com/2021/04/return…

0 1 1 0 0

STM Cyber @stm_cyber

5 years ago

Introduction to #Excel4.0 for #redteam. You will find there a collection of useful functions and #tricks used by #hackers when creating #macros in Excel 4.0. Author: @_mzer0 .blog.stmcyber.com/excel-4-0-for-… #redteam #blueteam #Excel4.0 #malware #tool #Hacking #dropper #xls #xml #macros

0 4 8 0 1

STM Cyber @stm_cyber

5 years ago

As you have already noticed, we use a new logo. It's not everything! We are in the process of rebranding and we would like to announce our new company name: STM Cyber Sp.z o.o. We will soon notify you about our new website! Be vigilant because it's worth it! #cyber #stmcyber

0 2 4 0 0

Download Video

STM Cyber @stm_cyber

5 years ago

For all those who want to start their #cybersecurity career path and become a professional #pentester.

0 3 4 0 0

Download Video

Binni Shah @binitamshah

5 years ago

Escaping VirtualBox 6.1 (Part 1) : secret.club/2021/01/14/vbo… credits @jonasLyk VirtualBox VM Escape 0day : Most Difficult Way To Launch a Calculator : youtu.be/mjKxafMbpS0

1 33 78 0 14

Download Image

samy k͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓͓amkar͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛͛ @samykamkar

5 years ago

I've released NAT Slipstreaming, a spooky new technique that allows an attacker to remotely access any TCP/UDP service bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website. samy.pl/slipstream/ Happy Halloween!

143 2K 5K 0 868

Download Image

Jonas L @jonasLyk

5 years ago

CVE-2020-16938 - aka bits please! So...recent update changed the permissions on partitions and volume device objects, granting everybody read access. This means that by opening the device directly you can read the raw data without any privs. 7zip parses NTFS so super for POC

17 431 1K 0 102

Download Image

STM Cyber @stm_cyber

5 years ago

Three more #CVEs from @chudyPB to the collection! CVE-2020-13169 Multiple Stored XSS in #SolarWinds Orion Platform, CVE-2020-6370 XSS vuln. in #SAP #NetWeaver, CVE-2020-6371 #Information disclosure in SAP #NetWeaver AS ABAP via the #POWL Test Feeder endpoint. Congratulation!

0 3 5 0 0

Download Video

frycos @frycos

5 years ago

Found a new .NET deserialization gadget in System[dot]Drawing[dot]Design[dot]dll. Maybe I'll try a pull to ysoserial[dot]NET in the next few days...

4 91 320 0 20

Download Gif

Evilcry_ @Blackmond_

5 years ago

We have another LOLBAS in the house ;p leveraging discordhookhelper64.exe (signed Discord Inc.) to perform Code Injection discordhookhelper64.exe inject dll_to_inject 0 target_pid @reaqta @gN3mes1s

1 67 159 0 14

Download Image

DTM @dtmsecurity

5 years ago

I found an interesting #LOLBIN using Windows Update Client (wuauclt.exe) as a loader - blog, pull request to LOLBAS and in the wild sample here dtm.uk/wuauclt/ - I am hoping to finalise some of my work on the methodology I used soon @MDSecLabs so keep your eyes posted.