Atredis Partners

Atredis is a 100% worker-owned team of world-class security researchers and consultants. We do risk-centric, research-driven security testing and consulting.

[Atredis Partners @Atredis]

"Bad News for the Average Pentester" ... But who wants to be average?

Here's some thoughts from Shawn on why Human-Powered Pentesting is here to stay.

https://t.co/10pnLMYU5M

[Atredis Partners @Atredis]

We decided to revisit an old research problem with some new LLM powered tooling. Check out our latest blog post to see how we approached this research, and the new Java deserialization gadget chains it discovered in just two days! https://t.co/3kSWWl71W9

[Atredis Partners @Atredis]

On a recent engagement, we exploited a previously disclosed privilege escalation bug in Tenable's Nessus Agent. No public PoC was available, so we made one; check it out here https://t.co/oQjuRJQii4

[Atredis Partners @Atredis]

Atredis identified a vulnerability in the way Rapid7's Nexpose was generating passwords to protect its Java KeyStore which is used to encrypt saved credentials. This vulnerability was reported to Rapid7 and a patch is being rolled out today! Details here: https://t.co/5zog8jhzN0

[Atredis Partners @Atredis]

Command & Conquer'd: Worming RCEs through a classic multiplayer game. Check out the full writeup from our @DistrictCon Junkyard submission here:
https://t.co/Qo1Jy6a83M

By @dronesec and @jordan9001

#Security #modding #rce

[Atredis Partners @Atredis]

@d0tslash I bet @jessie_chab can give you a hint or two... Have fun!

[KF @d0tslash]

Kate got a drawing robot. My gut was to look into hacking it, sure enough my friends at @Atredis already had. https://t.co/BHVUTFVsbx

[Atredis Partners @Atredis]

Last week, hardware. This week, firmware! Sam is back with a deep dive into his LiDAR Detector and demos a couple prototypes! https://t.co/US87C8ynEc

[Atredis Partners @Atredis]

Say Cheese, Computer!

Designing a Sensor for Passive Detection of iPhone TrueDepth LiDAR

https://t.co/uWFK8q7wCj

[Atredis Partners @Atredis]

Let's Hack Something Cute! A Reverse Engineering Journey into the Drawbot with Jessie https://t.co/SwIwPH3VTB

[Atredis Partners @Atredis]

In case you missed it, be sure to watch Atredian Matt Burch's (@emptynebuli) @HackSpaceCon talk, Where's the Money: Defeating ATM Disk Encryption! https://t.co/eAu8o8CqTP

[Atredis Partners @Atredis]

Check out our latest blog from Matt Burch (@emptynebuli) detailing new supplemental findings from his DefCon32 talk Where's the Money: Defeating ATM Disk Encryption: https://t.co/c4UOfY8obA

[Atredis Partners @Atredis]

ICYMI, @synacktiv's Pwn2Own walkthrough, exploiting a Tesla Wall via the charging port is a good Friday read.

After a firmware downgrade, they found a debug shell via the access point used during setup, ultimately using this to gain EIP.

https://t.co/8YWtMcqZcP

[Atredis Partners @Atredis]

We recently identified a number of privilege escalation vulnerabilities in Lenovo Vantage on Windows; check out our latest blog for a technical deep dive https://t.co/rhXAaN4Hjn

[Atredis Partners @Atredis]

Be sure to watch Matt Burch's (@emptynebuli) @CypherCon talk, Where's the Money: Defeating ATM Disk Encryption! https://t.co/tqxTUYjjoY

[Atredis Partners @Atredis]

Where do the Ads in Trackmania come from? In-game ads and reverse engineering tips in this mini-post from Jordan
https://t.co/VdQJ6Av0dl

[Atredis Partners @Atredis]

Sam wanted to answer the question "can you 3D print pogo pin harnesses?" So, he ran some experiments this week to find out.

Check out the blog post and grab the models to try for yourself!

https://t.co/pgVdmBEh7R

#pogopin #probe #3dprinting #atredis

[Atredis Partners @Atredis]

In case you missed it. Don't miss @emptynebuli presenting at @hackspacecon in Cape Canaveral on May 14th! 💰 🚀

https://t.co/wadJh9TNJk

[Atredis Partners @Atredis]

Don’t miss Atredian Bill Carver talking about Ransomware Readiness @BsidesBuffalo - Hope to see you there on June 7th! https://t.co/MNtTRb1po4

[Atredis Partners @Atredis]

Don't miss @emptynebuli presenting at @hackspacecon in Cape Canaveral on May 14th! 💰 🚀 No ticket? No Problem! 👀 We have a few extra 👀 Reply to the post and we will hook you up!

https://t.co/wadJh9TNJk