Zavidan

Hacker. Owner of @yinkozi. Hedonist

[Zavidan @Zavidan]

@cyb3rops One thing to check, traceability. An offensive tool should be able to log all it’s activity to compare it’s actions timeline and incident response team’s reaction timeline.

[Zavidan @Zavidan]

https://t.co/HBaFyMBZyq for threat modeling | https://t.co/zqVkA8xA1Q

[Zavidan @Zavidan]

Global scan - exposed .git repos – https://t.co/edHqMxocMb

[Zavidan @Zavidan]

Hardening Framework (Security + Devops) - https://t.co/POjwMvbAdx

[Zavidan @Zavidan]

How LLVM Optimizes a Function – https://t.co/bBBfjX6jGS

[Zavidan @Zavidan]

The Road to iOS Sandbox Escape: mediaserverd and bluetoothd (CVE-2018-4087 & CVE-2018-4095) | https://t.co/vofvs7sjit

[Zavidan @Zavidan]

Exploiting the macOS WindowServer for root |https://t.co/l380LIwO5V

[Zavidan @Zavidan]

Objective-See: breaking macOS one click at a time https://t.co/vx3hk5TZOt

[Zavidan @Zavidan]

How We Wrote a Self-Hacking Game in C++ – SquallyGame https://t.co/41mLt2M1ne

[Zavidan @Zavidan]

Vba2Graph - Generate call graphs from VBA code for easier analysis of malicious documents https://t.co/vRVEDUhbvQ

[Zavidan @Zavidan]

Frida 12.1 is out with a brand new Chrome Inspector-compatible debugger integration for V8-powered scripts https://t.co/5LZxJMHnWp

[Zavidan @Zavidan]

Inside the die of Intel's 8087 coprocessor chip, root of modern floating point https://t.co/6ssrOj6UCc

[Zavidan @Zavidan]

Lateral Movement using WSHController/WSHRemote objects (IWSHController and IWSHRemote interfaces) | https://t.co/5KDg9izrqE

[Zavidan @Zavidan]

BlackHat 2018 | 55 Conference Software Tool Count | https://t.co/lwOAvUrJwW

[Zavidan @Zavidan]

Ethereum "After the era of smuggling" https://t.co/6w5nQFE6Hz

[Zavidan @Zavidan]

Shell exec with convert (ImageMagick) | https://t.co/YuMF6jTmWS

[Zavidan @Zavidan]

Operational Guidance for Offensive User DPAPI Abuse https://t.co/RFHSM64Of1

[Zavidan @Zavidan]

CVE-2018-0952: Finding a Privilege Escalation Vulnerability in Windows 10, Server 2016, and Visual Studio (includes PoC) : https://t.co/SuZ4XdquJe

[Zavidan @Zavidan]

Insecure Design - BygoneSSL https://t.co/AAz17IGcPc

[Zavidan @Zavidan]

CVE-2018-11776: How to find 5 RCEs in Apache Struts with Semmle QL | https://t.co/bRhiFEfaSN