titon

Hacker / @[email protected]

[s2a systems @s2a_systems]

A short time lapse of the fragmentation event on LUCH (OLYMP) #40258 that took place today, 2026-01-30 from 06:09:03.486 UTC.

[titon @_titon_]

@jaysonstreet 🤞

[Jayson E. Street 💙 🤗💛 @jaysonstreet]

The always amazing @_titon_ giving an awesome talk at #SunshineCon 😊

[Cooper @Ministraitor]

Internal Domain Name Collision 2.0 - Philippe Caturegli @hack_lu
https://t.co/uZP2CePh7u

[titon @_titon_]

CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Microsoft:
Exploitation less likely

Security Researchers:
Hold my beer…

https://t.co/lQzxWdrTFd

[titon @_titon_]

@singe @RoelofTemmingh @halvarflake @daveaitel True.dat !

[titon @_titon_]

Yo @CheckPointSW, 1998 called and they would like their directory traversal vulnerability back ! #CVE-2024-24919

[titon @_titon_]

Good write up about Palo Alto GlobalProtect RCE (CVE-2024-3400)

https://t.co/71VaVx1SpO

[KF @d0tslash]

So far @lemonodor has the trophy for best find... Pilots & Jets on tarmac at "31.92458, 117.66220" CN-0147 Feidong Air Base as seen from the @djiglobal @djienterprise @djisupport @djiflysafe 2017 AWS leak. https://t.co/OblNEHKlFJ

[blasty @bl4sty]

I created a hyper realistic and handwavey re-enactment of the lockbit CVE-2023-3824 attack after some insights from PHP internals expert @cfreal_

[Timo Lo(n)gin @timolongin]

Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing!
https://t.co/cvm8MgxM04

[titon @_titon_]

@Cisco, 1998 called and they would like their URL encoding vulnerability back. (Cisco IOS XE CVE-2023-20198)

[titon @_titon_]

Good write up !

[Praetorian @praetorianlabs]

F5 BIGIP is vulnerable to a smuggling request vulnerability that an attacker can exploit to achieve unauthorized RCE. Our vulnerability research team responsibly disclose this to F5, which released a hotfix today. https://t.co/dSMv9w6ga9 #vulnerabilityresearch #f5 #cve

[James Kettle @albinowax]

One cool thing I didn't mention in the presentation is that you can also use the single-packet attack via Burp Repeater, even in the free edition. This should make testing & creating replication steps for triagers a bit easier!

[PortSwigger Research @PortSwiggerRes]

We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class:
https://t.co/GJOOn4Wmab

[Adam Chester 🏴‍☠️ @_xpn_]

If you're on an engagement, keep an eye out for the SPN HTTP/<company>.kerberos.okta.com. It provides delegated auth to Okta for a compromised AD user (and usually doesn't require MFA when proxied). https://t.co/j9ZNZXnN9T -spn HTTP/company.kerberos.okta.com.

[titon @_titon_]

PurpleTeam opsec gone wrong. 🙃

[TrustedSec @TrustedSec]

Kicked off our Black Hat training today! Going to have a blast over the next four days! 🎉 #BHUSA @Ben0xA @HackingDave @BlackHatEvents

[titon @_titon_]

Mad props to @_cablethief, @TH3_GOAT_FARM3R, @singe (and the rest of the @sensepost crew) for giving an awesome 4 days Wi-Fi hacking class full of realistic labs using nothing but cloud instances ! 🤯

[shubs @infosec_au]

We've analyzed the patch diffs for CVE-2023-3519 (Citrix Pre-Auth RCE) and have published our findings so far on our blog post here:

https://t.co/EnmD568WFB

So far, we haven't found an endpoint where this issue is exploitable without SAML being enabled. Will update blog if we do.