Victor Hora

Security Consultant at NCC Group

[NCC Group Research & Technology @NCCGroupInfosec]

Blog: Bypassing software update package encryption – extracting the Lexmark MC3224i printer firmware (part 1) - by @cvisines - https://t.co/COuI9lIub2

[Jeremy Boone @uffeux]

Part 2 is live! In this blog post we talk about software-based countermeasures, and how your best bet to resist glitches is through redundancy and ensuring that your code is designed to fail closed: https://t.co/FFjIE7ayQj

[Jeremy Boone @uffeux]

This week we are publishing a short series of blog posts on the topic of fault injection. Today we start with a high level introduction of glitching - types, effects, characterization, and timing.

[Jeremy Boone @uffeux]

My coworker just published a whitepaper that concisely summarizes the current state of the art techniques for bypassing readback protection in microcontrollers. Reverse engineer all the things! https://t.co/BnyW2wOPtG

[ModSecurity @ModSecurity]

ModSecurity News blogpost and a few pictures from BlackHat Asia! https://t.co/txNTDzEt6b

Stay tuned! :)

[LeCerveau @rachidharrando]

Afternoon sessions @BlackHatEvents Arsenal. @ToolsWatch selections

[The Daily Swig @DailySwig]

ModSecurity 3.1 showcased at #BHASIA, complete with runtime rule injection and YARA support

https://t.co/l3WjI86j5A

[Victor Hora @victorhora]

@jaywalknet Thanks for the great and technically precise story @jaywalknet! It was great chatting with you! :)

[SpiderLabs @SpiderLabs]

A Pakistani government website used for tracking passport applications was compromised to deliver Scanbox. Our researchers give you the details here: https://t.co/eWWpmzpdEx #websecurity #infosec

[Black Hat @BlackHatEvents]

.@victorhora & @zimmerle show how you can easily search for and match known malware payloads and signatures to step up your detection game with “ModSecurity 3.1” at #BHASIA Arsenal on March 28. Learn more here: https://t.co/tnlDV0XUjP

[Ulisses Albuquerque @urma]

Amazing thread and a must read for those who still do not understand the need for diversity _everywhere_

[ModSecurity @ModSecurity]

Cool analysis from our own ModSecurity contributor, @victorhora on how to defend from Magecart using ModSecurity and other tricks: https://t.co/zSHtJn91uy

[ModSecurity @ModSecurity]

We are happy to announce ModSecurity version 2.9.3! This version contains a number of improvements and bug fixes. Full release announcement: https://t.co/HL0uxBIJDB

[Victor Hora @victorhora]

yay! :)

[ModSecurity @ModSecurity]

Heads-up, the newest version of libModSecurity (3.0.3) has just been released! This version contains a number of improvements in different
areas including clean ups, better practices for improved code
readability, resilience and overall performance. See:
https://t.co/KvJyuT1tUY

[brendan @bscarvell]

Technical details for my nodeIntegration bypass for Electron.js (CVE-2018-1000136) is up - https://t.co/Vnm9rAWp4g

[Matt @haqur]

Wrote a blog post for the first time in a while: https://t.co/HtvQFJPpm5 #hacking #webexploitation #asustor #disclosure

[Márcio Almeida @marcioalm]

New commit... hope this can be useful to you :-) https://t.co/ZDoHhE05q9

[dragosr @dragosr]

GoFundMe To Support Legal Defense of teen (wrongly) charged for sequentially accessing publicly accessible Nova Scotia Freedom of Information requests, without malice. https://t.co/uZoDWGi9RP

[Victor Hora @victorhora]

Good stuff @marcioalm! =) https://t.co/JLk2KbVWkm

[Márcio Almeida @marcioalm]

Drupal 7 <= 7.57 non-auth RCE exploit: https://t.co/qTX0yw78dM

[Vitaly Nikolenko @vnik5287]

all 4.4 ubuntu aws instances are vulnerable: echo "deb https://t.co/wsmAOiv76W xenial-proposed restricted main multiverse universe" > /etc/apt/sources.list && apt update && apt install linux-image-4.4.0-117-generic