Sndav

Security Researcher at Xuanwu Lab. Focusing on Red Teaming & Maldev. Retired from Dubhe.

[Sndav @SndavBai]

但是非常遗憾的是，我尝试用 python 写，但是 AI 一直写不出来，各种利用失败。用 C 写一下子写出来了

[Sndav @SndavBai]

又晚晚的蹭一个热度， 把xfrm-ESP 的利用代码抽离出来了，写了一个 lite 版本，依旧是覆盖 passwd，非常完美！

https://t.co/74MUnZlU0q

[Sndav @SndavBai]

CVE-2026-31431 一大早赶了一个纯文件利用，不需要复写 su 文件，信创、异构利用稳定 https://t.co/iYrD5lnhi5

[Sndav @SndavBai]

@localhost_4173 对比 CherryStudio 有什么优势么 🤔

[Sndav @SndavBai]

@naruto_zm @Lakr233 ---
idevicerestore -e -y ./iPhone17,3_26.1_23B85_Restore -t

mv shsh/[ECID]-iPhone99,11-26.1.shsh shsh/[ECID]-iPhone99,11-26.1.shsh.gz

gunzip shsh/[ECID]-iPhone99,11-26.1.shsh.gz
---

I found this in the original README file. maybe we should boot the vm first.

[Sndav @SndavBai]

@naruto_zm @Lakr233 I'm stuck here too. I think the phone and its system needs to match this firmware

[Sndav @SndavBai]

@naruto_zm @Lakr233 you need to connect your iPhone with your Mac

[Sndav @SndavBai]

Wrote a pipe monitor using minifilter driver☺️

[Sndav @SndavBai]

@madebyshaurya Great job

[Sndav @SndavBai]

@jetbrains

[Sndav @SndavBai]

世界是个巨大的草台班子

[Sndav @SndavBai]

@wuhan005 把工蜂的项目丢到github就好了🤣

[Sndav @SndavBai]

incredible

[Tur.js @Tur24Tur]

Just extended Burp Suite beyond its traditional use by making it capable of disassembling and analyzing PlayStation 3 games ELF files with my first Bambad script, targeting the PowerISA-Altivec-64-32addr architecture! This could make Burp Suite more powerful for looking inside binaries, not just network traffic! #bugbounty #BurpSuite #PS3 #Bambdas

[Sndav @SndavBai]

good job

[Graham Helton (too much for zblock) @GrahamHelton3]

There is a "new" persistence technique making the rounds that takes advantage of Linux udev rules. I spent some time last week going through it and making a tool to take advantage of it. Here are my thoughts: 🧵

[Sndav @SndavBai]

Finally, I passed the endorsement

[Sndav @SndavBai]

@CT_Hellcat not so file, .o file actually

[Sndav @SndavBai]

I have made this repo open source. A ELFloader called #Coffee for ELF (Executable and Linkable Format) object files written in Rust.

I have integrated this ELFLoader into #TinyShell (a closed-source Remote Administration Tool owned by me)

https://t.co/0Gw9N3SWjI

[Sndav @SndavBai]

History from microsoft
https://t.co/Jxd3eRG8MI

[Sndav @SndavBai]

code[.]microsoft[.]com was taken-over to host a Cobalt Strike Server a few years ago. Then microsoft fixed it and use it as a honeypot now

[Sndav @SndavBai]

code[.]microsoft[.]com was taken-over to host a Cobalt Strike Server a few years ago. Then microsoft fixed it and use it as a honeypot now

[moSec @moe1n1]

@Agarri_FR That is Microsoft response for. Code\.microsoft\.com

[Sndav @SndavBai]

I finished it a month later 🥳https://t.co/XM0AC8o8Kp

[Sndav @SndavBai]

I will release an official writeup for this issue tomorrow