Taolaw @ret2null

Like binary vulnerabilities, keep working hard Joined January 2018

Tweets

47
Followers

29
Following

97
Likes

426

Nonzee @0xNonceSense

9 months ago

The $7 to $17,000 Challenge Starts Now! - Previous challenges reached the goal. - Achieved a 96.3% win rate with multiple 100x plays. - All trades were tracked through a public wallet. - 100% free to participate. Want to join in? > Leave a comment below > Like and share this…

509 358 528 47K 73

Download Image

LaurieWired @lauriewired

2 years ago

You don't need that degree, MOOC, half-baked udemy course, or $10k+ "training". Signs I've observed for exceptional talent: 1. They read Academic research papers religiously 2. Relied on Official API References, Source Code, etc (no second hand information) 3. ONLY used free…

6 19 228 36K 96

Download Image

Robert Swiecki @robertswiecki

6 years ago

Honggfuzz is securing your Eth 2 clients, so HODL ;) - blog.sigmaprime.io/beacon-fuzz-03…

0 2 3 0 0

Brandon Rossi @0xConda

3 years ago

Here's a cool repo that lists CVE PoCs that are posted to GitHub. Super useful when looking for exploits. github.com/nomi-sec/PoC-i…

7 136 397 0 107

Exodus Intelligence @XI_Research

5 years ago

Our blog is about to become much more active. The first writeup of many covers analysis of an Adobe Reader Security Issue CVE-2020-9715 #vulnerability #infosec #research #NDay #exploit blog.exodusintel.com/2021/04/20/ana…

3 86 177 0 17

an0n @an0n_r0

4 years ago

Here is my PoC for exploiting the @Razer device driver installation LPE using a generic Android phone instead of a stock Razer device. gist for the gadget setup: gist.github.com/tothi/3cdec3ac… Original version using a Razer device was presented by @j0nh4t. Awesome finding, I like it.

8 271 703 0 78

Download Gif

/r/netsec @_r_netsec

4 years ago

Building an exploit for a Use-After-Free in ProFTPd (CVE-2020-9273) adepts.of0x.cc/proftpd-cve-20…

0 31 71 0 5

David Brumley @thedavidbrumley

4 years ago

Yesterday at @ForAllSecure FuzzCon I mentioned I'd put on a free fuzzing course online if there is enough interest. If you are interested, email info@ForAllSecure.com. RT appreciated for awareness. #FuzzCon #hacking #defcon29

0 89 170 0 13

Axel Souchet @0vercl0k

4 years ago

Just released wtf which is a distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and kernel-mode targets running on Microsoft Windows. It found bugs in IDA, a triple-A game, the Windows kernel, etc. 🔥🔥 github.com/0vercl0k/wtf

6 270 702 0 96

Download Gif

Maddie Stone @maddiestone

5 years ago

Déjà vu-lnerability: A Year in Review of 0-days Exploited in-the-wild in 2020 🔎🐞💻🔥 googleprojectzero.blogspot.com/2021/02/deja-v…

7 156 383 0 46

Maddie Stone @maddiestone

5 years ago

Today we're publishing root cause analyses for the seven 0-day exploits we discovered in-the-wild in Oct 2020. Chrome, Windows, Safari, & iOS. Great work to @i41nbeer @j00ru @5aelo @_clem1 Sergei and Mark! googleprojectzero.blogspot.com/p/rca.html

4 161 449 0 52

Shane Huntley @ShaneHuntley

5 years ago

New blog post from TAG with details of a North Korean campaign targeting security researchers working on vulnerability research and development. blog.google/threat-analysi… Stay safe out there everyone!

33 1K 2K 0 174

Tim Blazytko @mr_phrazer

5 years ago

We just released the code of our paper "Aurora: Statistical Crash Analysis for Automated Root Cause Explanation": paper: usenix.org/system/files/s… code: github.com/RUB-SysSec/aur… CC: @m_u00d8 @Bl4ckIc3 @joool_f @is_eqv @thorstenholz

0 22 70 0 13

Ptrace Security GmbH @ptracesecurity

5 years ago

[CVE49] Microsoft Windows LNK Remote Code Execution Vulnerability - CVE-2020-1299 blog.vincss.net/2020/06/cve49-… #Pentesting #RCE #Windows #Vulnerability #Infosec

0 8 17 0 2

Download Image

EranShimony @EranShimony

5 years ago

My blogpost on CVE-2020-1317 I was holding this for a while. cyberark.com/resources/thre…

8 148 304 0 41

j00ru//vx @j00ru

6 years ago

If you wish to start fuzzing JPEG2000 images in PDF, I'd recommend @angealbertini's mkimage script to embed them, with a few mods: • /JPXDecode filter • Removed /ColorSpace and /BitsPerComponent • Correct width/height, determined e.g. with "identify" github.com/corkami/pocs/b…

1 39 136 0 22

Alisa Esage Шевченко @alisaesage

6 years ago

Btw, I checked out modern RDP internals a few weeks ago. Microsoft is currently working hard on refactoring the entire Terminal Services infrastructure

Alisa Esage Шевченко @alisaesage

7 years ago

Btw, I checked out modern RDP internals a few weeks ago. Microsoft is currently working hard on refactoring the entire Terminal Services infrastructure