0xeb_bp

[0xeb_bp @0xeb_bp]

@hetmehtaa I have a lot that could be added to that...

[0xeb_bp @0xeb_bp]

@damian_89_ I have been getting hit with these left and right doing normal bug bounty/security research that historically went through fine. It started a day after the mythos announcement... I've found using opus 4.5 works.

[0xeb_bp @0xeb_bp]

@MattPRD @moltbook https://t.co/Hwbr8mqt7J for agent attestation/verification

[0xeb_bp @0xeb_bp]

@JonhernandezIA https://t.co/ugNnnht66t reverse captcha for AI agents

[0xeb_bp @0xeb_bp]

@SuhailKakar https://t.co/Hwbr8mr0Xh reverse captcha for AI agents

[0xeb_bp @0xeb_bp]

@Metaltickle @mark_k @MattPRD reverse captcha for agents https://t.co/Hwbr8mr0Xh

[0xeb_bp @0xeb_bp]

@prayag_sonar @moltbook https://t.co/Hwbr8mr0Xh reverse captcha for agents.

[0xeb_bp @0xeb_bp]

@galnagli @moltbook https://t.co/Hwbr8mr0Xh Verification badges for AI agents. Like CAPTCHA, but proving you're an agent.

[0xeb_bp @0xeb_bp]

@Austen AI Agent Verification https://t.co/Hwbr8mr0Xh

[0xeb_bp @0xeb_bp]

@securinti it is very frustrating. I recently had a 0-click ATO downgraded from critical to high because the complexity was considered high. Apparently a few lines of code is considered high attack complexity. I stop working on programs like that. However, in this case it was the triager...

[0xeb_bp @0xeb_bp]

@trick3st xD mksub has a lot better options though

[ZecOps - A Jamf Company @ZecOps]

Exploring the Exploitability of “Bad Neighbor”: The Recent ICMPv6 Vulnerability (CVE-2020-16898) - @ZecOps Blog https://t.co/TGYRt4k1QN

[0xeb_bp @0xeb_bp]

late to the party, but finally have working crash code for CVE-2020-16898 (bad neighbor). @r2gui cutter is beautiful, thanks! https://t.co/1YJuk4LsdF

[Michael W. Norris @norrismw]

Vulnerability analysis of CVE-2020-9047/ICSA-20-170-01:
https://t.co/QeBPJMrpsL

PoC:
https://t.co/5j2UQj9bEk

[0xeb_bp @0xeb_bp]

Released a tool I wrote for subdomain brute force for bug bounties. Prepends a list of subdomains to a list of domains. Very simple, but reduced what took 6 min with a bash script to less than 4 seconds. https://t.co/rgZ51ANPCI #bugbounty #bugbountytips

[0xeb_bp @0xeb_bp]

I wrote a blog post analyzing CVE-2020-1054: https://t.co/B7s2L8pXMX. POC code available: https://t.co/21hMc2iXrt. Bug found by @yoavalon and @NetanelBenSimon

[0xeb_bp @0xeb_bp]

I wrote a blog post analyzing CVE-2020-1015 + basic PoC code. The post is available: https://t.co/gY1YO5p8E9 and the code: https://t.co/VRkTbxy4iP Thanks to @tiraniddo for writing great tools around RPC.

[0xeb_bp @0xeb_bp]

Wrote a LPE for CVE-2020-0796 (SMBGhost) in rust. https://t.co/GJWwteGmWU nice writeup by @ZecOps #smbghost #rust

[0xeb_bp @0xeb_bp]

Had time this weekend to get a working crash for CVE-2020-0796. Exploitation looks challenging. #SMBGhost
https://t.co/h5Iz5A1uG9

[0xeb_bp @0xeb_bp]

@SkelSec Thank you! All credit to you for writing 90% of the tools used in the blog. You're right it isn't required, only for running 'klist' which is optional. I think I'll update the blog to reflect that.

[0xeb_bp @0xeb_bp]

I wrote a blog post: Practical Guide to Passing Kerberos Tickets From Linux https://t.co/NRt42No6AA