Michael @xrmich

Software & ML/AI development, Statistics/Analytics, Geo/OSINT/CyberSec Spain Joined November 2016

Tweets

723
Followers

96
Following

499
Likes

4K

Michael @xrmich

21 hours ago

@YoungbloodJoe @GoDaddy I would be extremely pissed off if my VPS provider installed or updated anything on my servers for any reason, or even accessed them in the first place. There are reasons why people choose unmanaged.

0 0 2 16 0

View Details

Michael @xrmich

2 days ago

@tcmfld @phoronix What, you get to sleep? Looks that I'm 24/7 patching or investigating something.. can't really remember what sleeping is anymore...

0 0 1 539 0

View Details

Michael @xrmich

2 days ago

@the_cia_hacker I also set up a honeypot yesterday morning, my top 3 is India, Netherlands and US..

0 0 4 3K 0

View Details

Michael @xrmich

2 days ago

@Isotuoppi Ei varmasti jatka ikuisena, kyllä sen joku hajottaa kun on datat ottanu talteen ensin. Turha rykiä kun kakka on housussa eli ei uudet kirjautumiset mitenkään vaikuta asiaan.

0 0 1 597 0

View Details

Michael @xrmich

3 days ago

@hd_nvim lgtm!

0 0 0 88 0

View Details

Michael @xrmich

3 days ago

@0xTib3rius yes..

0 0 2 2K 0

View Details

Michael @xrmich

3 days ago

@HackySackin @_annieversary

1 0 5 306 1

View Details

Michael @xrmich

3 days ago

@HackySackin @MagicalTux Yeah...

0 0 1 51 0

View Details

Michael @xrmich

3 days ago

@ianhawes @rootsud0 @spacexai @deepseek_ai @runinfrai Not needed. This PHP vulnerability hits before it even reaches any application code.

1 0 2 488 0

View Details

Michael @xrmich

3 days ago

@daniiie7 @IntCyberDigest Not true, disabling upload_progress doesn't close the attack path.

0 0 0 135 0

View Details

Michael @xrmich

3 days ago

@44latte Well, those instructions are not complete.. but they can obviously help to make a PoC/exploit. But I think that the real problem here is that we need to improve and adapt pipelines and distribution of the patches. Vulnerabilities need to be patched instantly as they found...

0 0 6 5K 0

View Details

Michael @xrmich

3 days ago

@JP_Latti Ja kun on mainittu "nuoret", niin tuskin kovin nuoristakaan on kysymys... tai no, lasketaanko partalapsukaiset nuoriksi?

0 0 6 137 0

View Details

Michael @xrmich

3 days ago

@xtrupal Yes! Safe to downgrade to PHP 4.

0 0 0 38 0

View Details

Michael @xrmich

3 days ago

@andkon @AndrewMohawk @tayvano_ It does. BUT, I see now why other people haven't conclusively said that it prevents the exploit from working, exploring that now. This is quite damn complex and needs adjusting depending on the php version...

0 0 0 166 0

View Details

Michael @xrmich

3 days ago

@AndrewMohawk @tayvano_ It took me ~30mins after seeing php2shell video to confirm and create a working exploit. Now creating a detection script to see what is attempted RCE'd but I can see that there are already attack attempts incoming.

2 0 6 5K 1

View Details

Michael @xrmich

3 days ago

@bitslix @Yorgundurr Exactly...and even Senior 🤣! And for what it's worth, I independently verified the attack chain so all those "buzzwords" make perfect sense...

0 0 2 344 0

View Details

Michael @xrmich

4 days ago

@okkonen Pelottavinta on että tota lehteä jotku vielä tilaa sekä uskoo lukemaansa.. käsittämätöntä..

0 0 8 76 0

View Details

Michael @xrmich

4 days ago

@beeman_lorraine @America_1777

1 0 0 4 0

View Details

Michael @xrmich

5 days ago

@RonNehring If any of you are saying that Ukraine should submit and give up their territories then name which state are you willing to give to Russia, perhaps Alaska, Oregon or Washington?