ashwin

[OWASP Mumbai Chapter - Old @OWASPMumbai]

Hardware CTF first winner
Team:Drona
By
@_jaiverma #rajasekar @ayh26
@OWASPMumbai @nullmumbai @rootkill3r
@Sneharajguru

[Nicky Bloor @nickstadb]

RCE: Race to Code Execution - Finally wrote up details of the Drupal Coder RCE I found! https://t.co/uDianEigXV CC @mdisec

[Florian Roth ⚡️ @cyb3rops]

tomcatWarDeployer
Apache Tomcat auto WAR deployment & pwning tool
via @KitPloit
https://t.co/CefIShLJY0

[Greg Linares (Laughing Mantis) @Laughing_Mantis]

#infosec #DLLHijacking #Meme #exploits #0day #staytuned

[packet storm @packet_storm]

.NET Partial-Trust Bypass http://t.co/JaOYRYjHqy #exploit

[blasty @bl4sty]

Here it is; my remote kernel exploit for CVE-2015-3036: http://t.co/ap0LecugG0 (targeted against my WNDR3700v5)

Enjoy! #NoMoreDosPOCs ;-)

[Nicolas Krassas @Dinosn]

How to Hack and Decrypt WhatsApp Database on rooted devices http://t.co/rCe2SMACfm

[Nicolas Krassas @Dinosn]

Proxying Bluetooth devices for security analysis using btproxy http://t.co/YyZ5LlVMoj

[ashwin @ayh26]

@Dinosn

[Panos Gkatziroulis 🦄 @ipurple]

Pentesting an Active Directory infrastructure http://t.co/ej7l305bSL

[Nicolas Krassas @Dinosn]

HTML5: Persistent AppCache Injections https://t.co/B6SjO06Nc7

[Garage4Hackers @garage4hackers]

@danyalzafar143 @SandeepL337 Its on 11th sept. You can find details here http://t.co/eCJJLqhF8i

[Panos Gkatziroulis 🦄 @ipurple]

Lobotomy | The Android Assessment Toolkit http://t.co/z0034ji440

[Haifei Li @HaifeiLi]

Slides for our talk "Attacking Interoperability: An OLE Edition" are available here https://t.co/4u5sQutmP8. #BHUSA #ole #0day

[OpenSecurity @OpenSecurity_IN]

Bar Mitzvah : Attack that exploits the Invariance Weakness in RC4 keys which leaks plain text data from the encrypted SSL/TLS traffic.
#SSL

[OpenSecurity @OpenSecurity_IN]

Logjam: This vulnerability allows the attacker to downgrade a vulnerable connection to a lower grade cipher due to the flaws in TLS protocol

[OpenSecurity @OpenSecurity_IN]

Lucky 13: Allows attacker to modify the cipher block and clocks the response time from server to determine the key to decrypt the data.
#SSL

[OpenSecurity @OpenSecurity_IN]

FREAK: MITM attack that downgrades connections from 'strong' RSA encryption to 'export-grade' ciphers which are less than 512 bytes.
#SSL

[OpenSecurity @OpenSecurity_IN]

CRIME: A compression side-channel attack against HTTPS allows attacker to Inject partial chosen plaintext into a victim's request.

[Binni Shah @binitamshah]

The New Metasploit Browser Autopwn : Strikes Faster and Smarter - Part 1 : https://t.co/9nF7RBIDis , Part 2 : https://t.co/gZbCD2PTwc