Exclusive

cat loving hacker

[elttam @elttam]

New blog post: ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

A format string vulnerability that's been lurking 25+ years, and the PSK oracle chain that unlocks it

https://t.co/AXhwTPXGIy

[Exclusive @me0wday]

@lukejahnke wonder what the payout was….

[Exclusive @me0wday]

@snyff Don’t drop that, it’s the internet!

[elttam @elttam]

New Blog post: DUCTF 2024 ESPecially Secure Boot Writeup

https://t.co/IS2wyn6LfZ

[elttam @elttam]

New blog post and tool release: plORMbing your Prisma ORM with Time-based Attacks

https://t.co/DfUfQR1yJq and
https://t.co/eHlEWIRJWc

[elttam @elttam]

New blog post: plORMbing your Django ORM - Part one of a series about ORM Leak vulnerabilities and attacking the Django ORM.

https://t.co/qAYSyHIHJp

[elttam @elttam]

Matt shares a bit about his younger days starting in infosec as a teenager to what led to the start of
@elttam and some of his observations of the evolution of the industry in the past 20+ years: https://t.co/X7ImKp9obv

[elttam @elttam]

New slides: Causing Funky Things in your NodeJS Servers by @GhostCcamm (Ruxmon)

https://t.co/KwM8wBg9ox

[elttam @elttam]

New advisory: ESP-IDF Bootloader TOCTOU Vulnerability in Anti-rollback Scheme (CVE-2024-28183)

https://t.co/rbo3C4dY5X

[Exclusive @me0wday]

@xyantix 7 or so

[Exclusive @me0wday]

@xyantix This is how people lay out their tattoos lately too

[Exclusive @me0wday]

@xyantix @FrameworkPuter Yikes, so glad I didn’t get one.

[elttam @elttam]

New blog post: Keeping up with the Pwnses, an introduction to Talkback

https://t.co/5xbzJE8dib

[elttam @elttam]

New advisory: STMicroelectronics STSAFE: I2C Receive buffer overflow (CVE-2023-50096)

https://t.co/zl2ekTEhIL

[Exclusive @me0wday]

@xyantix Oooh is this the hacker score tool

[elttam @elttam]

New advisory: Apache Guacamole Integer overflow in handling of VNC image buffers (CVE-2023-43826)

https://t.co/9CDV7DnGDS

[Exclusive @me0wday]

@justinsteven Now wrap it again

[elttam @elttam]

New advisories: Label Studio Object Relational Mapper Leak (CVE-CVE-2023-47117) and Session Forgery via Hardcoded Django Secret Key (CVE-2023-43791)

https://t.co/gSjZGKE6Xq
https://t.co/1DDkGz9NPl

[Exclusive @me0wday]

@silviocesare Hey @silviocesare send me a PM :)

[Márcio Almeida @marcioalm]

Sheeeesh... It's on guys!!! Ruxmon Oct/Nov gonna be sooo dope! Two great talks from two great hackers! We have Victor (@me0wday) presenting "Reverse engineering the Litter Robot 3" and Shubs (@infosec_au) presenting "Hacking Airlines"! See you all there! https://t.co/PZsooqBPtk