David A.

Security researcher

[Alejandro Ramos @aramosf]

🐧 New: LPE PoC + x86_64 LPE for CVE-2026-64468 — a use-after-free in Linux Binder's binder_free_transaction().

Full credit to Alice Ryhl (Google) for finding & reporting it, and Carlos Llamas for the fix. 🙏

Repo → https://t.co/ncvYDm3ovQ

[David A. @Araviwan]

@ProgramaDelYuyu @CanalSurRadio Hola a todos, os escucho diariamente por podcast. La genial cancion 2 Minutes to Midnight de Iron Maiden esta basada en el famoso reloj del juicio final. Un saludo a todos.

[hacker.house @hackerfantastic]

Too soon? #CVE-2021-44228 mobile apps & many smart devices also vulnerable when "logging" things .. like ESSID ;-)

[abuse.ch @abuse_ch]

https://t.co/b7WQ1Ihzpw: Time to move forward. Your help is needed ⛑️

👉 https://t.co/uy0x9KpZRg

[Florian Hansemann @CyberWarship]

MS Service Accounts ownage

Discovering
https://t.co/9uiWsaKPGj

Extracting Passwords with Kerberoasting
https://t.co/qYr8GgsXQB

Impersonating with Silver Ticket
https://t.co/j6Dsqfqx3D

Domain Compromise with Golden Ticket
https://t.co/1zHke3AvFT

#infosec #pentest #redteam

[Roberto Martínez @r0bertmart1nez]

Se habla mucho del déficit que existe de Profesionales en Seguridad, pero la realidad es que no existe una inversión en su formación o programas integrales en las Universidades, esto genera muchas veces una oferta de Servicios sin el respaldo de Profesionales calificados

[David A. @Araviwan]

@plastusgucio @AdAstra247 @JayTHL @GossiTheDog @pmelson @Sophos Same queries here and Citrix Hub installed too.

[Roberto Rodriguez 🇵🇪 @Cyb3rWard0g]

Looking for a way to replay pre-recorded security events from simulated adversarial techniques? Enter Mordor! Datasets categorized following @MITREattack structure! Learn how it all started & how to replay data leveraging Kafkacat @edenhillm #ThreatHunting https://t.co/5O44oCEHIY

[Spiros Fraganastasis @m3g9tr0n]

Gold Finger is killing it in the AD Permissions Analyzer, especially with the included nested memberships!!

[Bill McKibben @billmckibben]

Thinking about Mother Nature today. As of this morning, her CO2 concentration topped 415 ppm for the first time in many many millions of years.
https://t.co/bwTfOsS1ZO

[ATT&CK @MITREattack]

The April 2019 release of ATT&CK is out including our new Impact tactic! We’ve added 21 techniques (14 in Impact), 8 groups, and 50 software entries. We’ve also made updates to 22 techniques, 31 groups, and 46 software entries. https://t.co/Xw2tQLU9Md

[Jose Ramon Palanco @jpalanco]

Retrohunt infrastructure with Klara, analyze 10TB of malware samples in 30 min https://t.co/i726cbNBP0 #yara #retrohunt #klara

[David A. @Araviwan]

@SBousseaden Root/cim2 is weird.

[ɯɹoʇsuoı @ionstorm]

I want to share this gem as I am using this on deployments, this effectively renders psexec + remote wmi useless and locks it down against attack.

[David A. @Araviwan]

@juanandres_gs @vkamluk Awesome talk!

[BleepingComputer @BleepinComputer]

Wireshark 3 Released with New Npcap Windows Packet Capturing Driver - by @serghei
https://t.co/x3kdSG6NUQ

[CryptoInsane @CryptoInsane]

GandCrab 5.1 .... 🦀🦀����

[Binni Shah @binitamshah]

35-year-old vulnerability discovered in scp : https://t.co/spFKUH4SKo

[DirectoryRanger @DirectoryRanger]

Get-GPTrashFire. Identifying and Abusing Vulnerable Configurations in MS AD Group Policy, by @mikeloss
https://t.co/ergqzRdOF0
https://t.co/OckFU1r3rL
https://t.co/fKwdMZ5JzE