Chocolate

fake cybersecurity guard.

[смех @0x6D6172636F]

🫠

[Chocolate @Choko1eto]

@BaoshengbinCumt 😭😭

[Chocolate @Choko1eto]

@360ninjia 🥲

[Chocolate @Choko1eto]

wild

[MalwareHunterTeam @malwrhunterteam]

Fake Google Chrome download site: https://google.[tw].cn/
The SSL cert for this domain has been given by "Google Trust Services". Not think I have to say anything about it...
🤷‍♂️

[Chocolate @Choko1eto]

@Skyworship2 常回家看看😢

[Chocolate @Choko1eto]

@Skyworship2 🫠

[Chocolate @Choko1eto]

@BaoshengbinCumt 👀 affect latest chrome?

[Chocolate @Choko1eto]

@BaoshengbinCumt 👀太多了

[Chocolate @Choko1eto]

@Skyworship2 毕业快乐😢

[Chocolate @Choko1eto]

@CrazymanArmy hope you feel better soon🥲

[Chocolate @Choko1eto]

@Skyworship2 学多

[Theori @theori_io]

Do you use a virtual machine to browse dangerous links safely? If you use the Chrome browser inside that virtual machine, is it secure enough?
As you might have guessed, the answer is not so much.

We chained six unique CVEs from 2023 listed below.

• Chrome Renderer RCE : CVE-2023-3079
• Chrome Sandbox Escape : CVE-2023-21674
• LPE in guest OS : CVE-2023-29360
• VMware Info Leak : CVE-2023-34044
• VMware Escape : CVE-2023-20869
• LPE in host OS : CVE-2023-36802

[Chocolate @Choko1eto]

@Skyworship2 直接（口糊

[Chocolate @Choko1eto]

@Skyworship2 我一般使用Clash For Windows的tun模式，在虚拟机里面之间连接ovpn问题不大

[Chocolate @Choko1eto]

实习好难找...估计秋招也是

[Vector 35 @vector35]

Introducing Decompiler Explorer! https://t.co/8CQjv269ur Compare tools on the forefront of static analysis, now in your web browser! More info:
https://t.co/9fUfbKtovB

[张惠倩 @momika233]

/?s=index/think\\Error/appError&errno=1&errstr=1&errline=1&errfile=../../../etc/passwd

[Chocolate @Choko1eto]

Endless waiting

[Blackhold @90security]

几个每日安全动态网站：

hxxps://sec.today/pulses
hxxp://wiki.ioin.in
hxxps://i.hacking8.com
hxxps://samsunglabs.github.io/W2E
hxxps://www.reddit.com/r/netsec/new
hxxps://forum.ywhack.com/forum-59-1.html
hxxps://hackernews.cc
hxxps://www.hackerpom.com/feed
hxxps://threat.mrxn.net

[Grzegorz Tworek @0gtweet]

Falling in love with (built-in!) tttracer.exe.
"-launch" works like a charm for #LOLBIN scenarios, and there are sooo many more parameters to play with.