watchTowr @watchtowrcyber
Your very own APT group, in an Attack Surface Management solution. watchtowr.com Joined November 2020-
Tweets131
-
Followers2K
-
Following9
-
Likes99
we are serious - come join us hack the planet
the watchTowr team will be @BlackHatEvents Asia tomorrow!
Oh no - it looks like the underlying library that the PA uses for session management, gorilla, is the bearer of this bug, so other devices may be affected! This could be bigger than we thought! 💀 in the meantime, grep your logs for dodgy sessionid and do share what you find .. !
Oh no - it looks like the underlying library that the PA uses for session management, gorilla, is the bearer of this bug, so other devices may be affected! This could be bigger than we thought! 💀 in the meantime, grep your logs for dodgy sessionid and do share what you find .. !
It's my gut feel that CVE-2024-3400 can be exploited without telem enabled. It can def 'brick' the machine and make it unbootable even without telemetry. I don't know how, though, so this is just supposition - a threat actor with better PA skillz might be able to.
something something sophistication levels only achievable by a nation-state something something string concat command injection something something
Join us on our recent journey, exploiting unauthenticated AJP smuggling vulnerabilities in IBM's QRadar - with included detection artefactor generator tools :-) Who needs XZ backdoors????? labs.watchtowr.com/ibm-qradar-whe… #attacksurfacemanagement
“hear me out…. if we release more PoCs…. then we can get more bones…”
what's that sound? is it the sound of another earth-shattering world-ending single-character PoC? or is it a new watchTowr Labs blogpost? let's see...
8lU3sH33p @8lU3sH33p
124 Followers 2K Following
cscfufo @cscfufo
27 Followers 2K Following
Jeff K. @Dav3nk
3 Followers 75 Following
Zer0Beat @Zer0Beat1
43 Followers 517 Following
Rowdy Russian Ru @Savsantax
34 Followers 203 Following IT bro. ♥️s Beer, Chris Rock, Bill Burr, Chappelle, Ninjas, Combat Sports. Pronouns: Sensei Cowabunga Dude. Yo soy nicht ein хакер
iDegen.Snipe186 🇲�.. @iKhidir186
66 Followers 473 Following Electical Engineering.Fvcking DEGEN #Bitcoin is shit coin. Alpha info.Legit Tool.speed entry. $SOL #YZYCapital
Ifeanyichukwu Ukadike @iukadike_
24 Followers 91 Following a programmer that loves cartoons and doing fun things with python! 🙂
Vijayakumar Kannan @imVijay29
89 Followers 1K Following
Mohamud Mahmd @MMohamudd
41 Followers 527 Following
Shaya Feedman שיי�.. @ShayaFeedman
314 Followers 898 Following Head of InfoSec @ Porsche Digital I'm where cyber becomes dangerous Since Oct 7th, living in - war life balance. My own opinion Cynicism as a way of life
Xytus Vazacholil @XytusV
2 Followers 112 Following
BENCHAIB KAMEL @KAMEL8007
0 Followers 4 Following
Deyaa Muhammad @DeyaaMuhammad
642 Followers 132 Following 'When small men begin to cast big shadows, it means that the sun is about to set.' - Lin Yutang
latverian @latverian
4 Followers 193 Following
CK @chetancoolkarni
51 Followers 230 Following
MaxPower @AdiRinaldi
31 Followers 89 Following
Manoel Abe @manoelabe08
31 Followers 2K Following 🚀 Entrepreneur 💼 Auditeur en Cybersecurite 🛡️ 👥 Community Manager 📱 💻 Web Developper 🌐 📊 Coach Digital 📈
lilil @ls_i0
0 Followers 466 Following
hamdy elseady @HamdyElseady
26 Followers 291 Following
Operator Andy @operator_andy
4 Followers 51 Following Cyber security and exploitation. White hat but red team.
crypticgoose 🪿💻.. @crypticg00se
1K Followers 3K Following DevSecOps Lead, ex CTO, hacker, Msc Infosec, AI, K8s, python, golang, fintech, LLMs/AI, @BSidesCapeTown chairman, photography. Dangerous thoughts are my own...
ALeX Leung @ALeXLeu70205791
2 Followers 5 Following
Mike Bean @nobodymikey7
1 Followers 57 Following
GuardianAngelIT @it_guardia4586
4 Followers 54 Following Presonalized Cyber Security company working out of the East Asutin/Bastrop Area. We watchover you.
王俊閎 @13267859good
3 Followers 130 Following
Igor @engigorvinicius
34 Followers 394 Following
papa @papa2037902
4 Followers 62 Following
horseStance fxrmxrr @PeaceDueceTwo
154 Followers 868 Following sometimes canine, sometimes feline, genetically ape, mentally water
Saddam @Sam7js
4 Followers 209 Following
Torsten Enderling @carfesh
5 Followers 86 Following
Adaikal @adaikal_raj
2 Followers 119 Following
m4st3r @m4st3r89045920
28 Followers 187 Following Don't like my profile? Email me on [email protected]
Kay Kay @KayKay6669
1 Followers 52 Following
ra2302 @ramneek2302
3 Followers 18 Following
francis-rawins-z @francis_rawins
6 Followers 99 Following
wh0crypt @wh0crypt
78 Followers 264 Following CTF Player👾 🎓 Computer Engineering at ULL 💻 Cybersecurity, Cryptography & SysAdmin
Florian Haag @FlorianHaag95
5 Followers 56 Following Interested in Pentesting, Digital Forensics, Incident Reponse, Threats to Cyber Landscapes and IT Security/ IT in general. Pentester at @usdAG.
Taras Rudnyk @TarasRudnyk
70 Followers 513 Following
Wong Wai Tuck @waituckw
173 Followers 854 Following Infosec Enthusiast. Security Researcher @ watchTowr. PhD Candidate @ SMU
joseph.yaml ⛩️�.. @zephinzer
52 Followers 480 Following functional systems are like a box of chocolates, you never know what you're gonna get
watchTowr Labs @watchtowrlabs
18 Followers 0 Following
Aliz @AlizTheHax0r
1K Followers 961 Following Also https://t.co/Aq1HjGjiHq Curiosity/divergence/general hackery. Quite trans. Pronouns are they/them. Nonbinary, happily married.
Samuel Pua @SamPKK
39 Followers 300 Following
Benjamin Harris @ha888t
376 Followers 2K Following Founder & CEO of watchTowr (@watchTowrcyber). Hacker, general internet miscreant.It deals with graphics well too - tho I find it difficult to align the design accurately on the workpiece. It’s weird coming from the world of cnc milling where alignment and accuracy are everything. Anyway, I made you this @watchtowrcyber ! :3
@watchtowrcyber Love the PoC|GTFO motto <3 thanks for bringing topnotch research to the masses.
@SootySec @thegrugq Look. it's ok. We turned off all the bad VPNs and @watchtowrcyber is on a netflix 'n chill day, so nothing bad is about to happen
For the students that ask me “…but where do I find JNDI Injection?” The answer is… just look :)
Today, we take on IBM - discussing unauth Remote Code Execution vulns we recently disclosed in IBM's Operational Decision Manager These bugs, and their PoCs, require more letters than the mighty '/' - but hopefully still an enjoyable read More soon.... labs.watchtowr.com/double-k-o-rce…
@watchtowrcyber Love it :) congrats to all involved, great write-up style too 😂
@watchtowrcyber One of my favorite findings was a two-character bypass. That is, any ActiveX control that was disabled by killbit used to be able to be used by simply surrounding the CLSID in curly brackets. {WINNING} kb.cert.org/vuls/id/998297
@watchtowrcyber Can we have PoCs for the latest fortinet stuff while you're at it? Thanks! 😂
@watchtowrcyber Bam, watchTowr is the first to blow the whistle! 😁
@watchtowrcyber @Ivanlef0u > We have received criticism for our decision to tweet about the existence of a vulnerability - citing claims of 'unactionability'. Who criticised you for that? Let me speak to them.
@watchtowrcyber Your tweeting the existence of the vulnerability ahead of time was the right move. It gave people a heads up that more was coming and helped inform decisions.
@watchtowrcyber I'm surprised Outlook is still giving you this message ;) I'm sure it's machine learning will catch up after the next 5 CVEs ;)
お怒りの様子...😓 Ivanti Connect Secure CVE-2024-22024 - Are We Now Part Of Ivanti? labs.watchtowr.com/are-we-now-par…
Same tbh
@Void_Sec @watchtowrcyber I should add “Professional shitposter“ to my LinkedIn skills
@watchtowrcyber spare a thought for all the admins pulling their Ivanti boxes out of the network rn, they may have to do it all over again in 90 days
Trends for United States
You might like
