Michael

[Jacob Baines @Junior_Baines]

We bought an $88 router on Amazon looking for the ENDLESSDOORS implant. We found two others instead

DARKLANTERN gives anyone on the Internet an unauthenticated root shell.

SPEAKINGSTONE phones home to ZBT infrastructure and supports remote surveillance.

https://t.co/WcF01Q8vFV

[Calif @calif_io]

We sent Claude Mythos Preview spelunking through Squid’s guts, and it surfaced clutching a 29-year-old bug.

Meet Squidbleed: a Heartbleed-style vulnerability that leaks internal memory from every version of Squid Proxy, in its default configuration.

Full story: https://t.co/xQLKqaSmTn

[Michael @AspenWilderness]

@bcherny Yes! Been doing this manually with sleep.

[Prof. Lee Stott @lee_stott]

Want to up your game in AI development? Get familiar with Model Context Protocol (MCP) Start with MCP for Beginners and level up your skills: [https://t.co/AHZJExqsoe](https://t.co/AHZJExqsoe) #AI #Developers #MCP

[Michael @AspenWilderness]

@dwizzzleMSFT

[Michael @AspenWilderness]

Indirect Prompt Injection is going to be huge: https://t.co/hOYYaWzzL4

[John Lambert @JohnLaTwC]

I spoke at @MSFTBlueHat last week.
➡️https://t.co/o2sBiMLxHi
I will follow up with a link to the recording when it is posted.

Some highlights from my talk below👇👇👇

[Richard Johnson @richinseattle]

With a good understanding of all the tech available under the hood in AFL++/libAFL, fuzzing can discover vulnerabilities that are difficult for expert exploit writers to trigger even with knowledge of the patch. No custom harness needed for this one! (cf: https://t.co/rkBv47kisX)

[Haifei Li @HaifeiLi]

Another awesome blog post I recently read - Fuzzing Windows Defender.

https://t.co/oNWqwrZqDz

[Bilgin Ibryam @bibryam]

A Visual Guide to SSH Tunnels by @iximiuz
https://t.co/9dL3whbcn2

[scriptjunkie (Matt) @scriptjunkie1]

New Year's resolution: Start using strict outbound firewalls
This is tough on Windows without sketchy 3rd-party code since no built-in tools show where svchost is hitting and why. So use this script. It beats scrolling event logs wondering what raw IPs are
https://t.co/X0upR2ViKi

[Stephen Sims @Steph3nSims]

Introduction to Linux Heap Internals https://t.co/jMCoGd2uPo

[White Knight Labs @WKL_cyber]

Starting the second day of our Offensive Development course at Wild West Hackin' Fest! #wwhf

[Randori Attack Team @RandoriAttack]

The following non-malicious request can be used to test susceptibility to the @springframework 0day RCE. An HTTP 400 return code indicates vulnerability.

$ curl host:port/path?class.module.classLoader.URLs%5B0%5D=0

#SpringShell #Spring4Shell #infosec

[Dirk-jan @_dirkjan]

I was getting tired of requesting access tokens all the time during my Azure research. So I wrote a small tool that takes the creds for the identity I want from a KeePass file, and uses Selenium for an interactive sign-in including MFA handling. Lazy life ftw.

[mpgn @mpgn_x64]

Big news, CrackMapExec now supports RDP protocol 🎉
This is no crappy freeRDP python wrapper behind this but the integration of @SkelSec 's aardwolf lib (available on @porchetta_ind only) 🔥

Pushed on @porchetta_ind for sponsors 🪂

[Julia Ioffe @juliaioffe]

Man, the media should really pull back the 150,000 troops with which it has surrounded Ukraine.

[Zion Leonahenahe Basque @mahal0z]

Love using Binary Ninja but also looking for a way to use your reversing work in GDB? Decomp2GEF V1.2.0: Binary Ninja Support is out! Sync reversed symbols from Binja to GDB natively on-the-fly! 1.5 Min Demo: https://t.co/M2IZd0fmi3. Code link in the thread.

[Mike Felch (Stay Ready) @ustayready]

Nice EDR bypass using file names.. may or may not be more like this if you look hard.

[bugcrowd @Bugcrowd]

When you encounter a 403 Forbidden page 🚫 , try adding an "X-Client-IP" header with the value "127.0.0.1" #bugbountytips ✌🏽