fuzzyf10w @fuzzyf10w

OSCP // OSCE // OSWE // OSED :: security enthusiast :: CTF player Joined October 2013

Tweets

632
Followers

729
Following

1K
Likes

25K

Eric Capuano - Bsky: @eric.zip @eric_capuano

3 years ago

46 812 3K 0 206

Download Video

Jeremy Blackthorne @0xJeremy

3 years ago

From a VR student today on our ROP chain lessons. I'm dying 😂: "This week's been like"

19 633 2K 0 204

Download Video

Jaco @jaco_ZA

3 years ago

How the Red Team engagement really went down…

30 347 963 0 112

Download Video

[email protected] @0xdea

4 years ago

The @qualys team is back at it! pwnkit: Local Privilege Escalation in polkit’s pkexec (CVE-2021-4034) openwall.com/lists/oss-secu…

0 96 287 0 25

Download Image

topotam @topotam77

4 years ago

If you like AD hacking and many others things explained in deep => go to my budy and coworker Charlie Bromberg aka @_nwodtuhs website: thehacker.recipes

4 97 322 0 87

LiveOverflow 🔴 @LiveOverflow

4 years ago

Consider supporting OverTheWire! It's one of the important community oriented CTF/Wargame platforms. Great to start learning linux, pwn and reverse engineering. patreon.com/StevenVanAcker

OverTheWire.org @OverTheWireCTF

4 years ago

Consider supporting OverTheWire! It's one of the important community oriented CTF/Wargame platforms. Great to start learning linux, pwn and reverse engineering. patreon.com/StevenVanAcker

1 3 28 0 0

1 11 62 0 2

Bruno Borges @brunoborges

4 years ago

#Log4J 2.16.0 is out. Fully disables all JNDI related functionality, and removes the lookups feature. Kudos to the team. @yazicivo, @rgoers @RemkoPopma @carter_kozak @jvz @GaryGregory, Ron Grabowski, Robert Middleton. logging.apache.org/log4j/2.x/chan…

8 204 550 0 11

Download Image

Did you know that you can register an ENS name with XSS? Although ens.domains will not let you register it because of frontend validation, it is possible to do so directly with a smart contract. Here is a tool: github.com/Raz0r/ens-xss

8 90 299 0 72

Download Image

Boschko @olivier_boschko

4 years ago

Dropped a little blog post on a really common but not well know pass-back-attack. Its something to keep an eye out for during your next internal ❤ boschko.ca/printer-to-dom…

0 13 27 0 7

🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 @Jipe_

4 years ago

Linux has so many built-in password managers: syslog .bash_history .zsh_history .mysql_history …

45 698 4K 0 218

Alex Shvartsman - Author, Kakistocracy @AShvartsman

4 years ago

Stanislaw Lem is 100 today. This is from a 1961 story: "Books are crystals with information stored on them. They were read via an opton -- a device that resembled a real book but with only a single page between the covers. A touch would cause it to display the next page of text."

8 245 704 0 22

Download Image

Ali Hadi | B!n@ry @binaryz0ne

4 years ago

Last semester I was lucky to teach a group of amazing undergrad students (thank you!) my "Offensive Security & Reverse Engineering" course @ChamplainEdu #offsec #exploit #exploitation Today, I'm publishing the whole course here: bit.ly/swexploitation Please read 1/n

11 156 331 0 112

EvilMog® @mog.evil.af @Evil_Mog

4 years ago

Before everybody gets all freaked out about CVE-2021-1675 I would like to point out the amazing work by @NotMedic as well as @tifkin_ for discovering SpoolSample, aka outbound auth by print spooler as used by github.com/NotMedic/NetNT… Disable print spooler on sensitive servers

2 15 42 0 6

Dave Kennedy @HackingDave

4 years ago

2021-1675 is spicy 🔥 and highly critical. The June patch does not work against the remote DLL loading and a fully patched system allows RCE from a regular user on anything using the printer spooler. It's not just DCs. Only option is to disable the printer spooler service.

22 83 211 0 16

Download Gif

Florian Roth ⚡️ @cyb3rops

4 years ago

In cooperation with @KevTheHermit & @fuzzyf10w I've created some Sigma rules for the detection of exploits against CVE-2021-1675 Rules github.com/SigmaHQ/sigma/… Older one for PoC only github.com/SigmaHQ/sigma/… Plz note the new Eventlog mappings: github.com/SigmaHQ/sigma/…