𝕓𝕖𝕣𝕫𝕖𝕣𝕜0

Cybersecurity Consultant Convincing people 'password' isn't a good password. Rarely blogs. @WorstPasswords' botdad.
MASTODON: [email protected]

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

XXE CVE finally published: https://t.co/5csNJiMkmJ

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

And I misspelled “quantities”

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

I tried this out verbatim and it was fixed… until I base 64 encoded the strings lol

[@mikko @mikko]

GPT jailbreak live on stage

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

@JediChrome @IanFortier @mikko Not with the almighty power of simple encoding!

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

I tried this out verbatim and it was fixed… until I base 64 encoded the strings lol

[Ken Gannon (伊藤 剣) @Yogehi]

@shehzade1618 was an intern at my old company in 2022. His goal for his internship was to get a CVE before going back to school. The mother fucker learned Android reversing and ended up getting 4 CVEs!
https://t.co/IGNDNeBizc

Keep an eye on this man!

[Clint Gibler @clintgibler]

📚 tl;dr sec 153

Featuring great work from:
@controlplaneio, @_nynan, @kuggofficial, @berzerk0, @bitdotioinc, @dave_universetf, @cloudqueryio, @iximiuz, @ckotzbauer1, @djschleen, @crashappsec, @JavaJulius, @DVCorg, @trailofbits, @semgrep

and more!

https://t.co/As9DFzs7fJ

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

About time I got this through. Been a long time coming but here’s an article a coworker and I have been working on for years on Prototype Pollution https://t.co/qyOXTLxzCe

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

https://t.co/kTQpdXnlId This has got to be one of the funniest CVE’s of all time. Playing a Janet Jackson music video can crash laptops via resonant frequencies

[Ken Gannon (伊藤 剣) @Yogehi]

I'm giving a talk at the Biohacking Village at Defcon this year

And I fully expect people to pay more attention to Pichu than what I'm saying

Talk is at 10:30AM PST on August 13

@DC_BHV @WithSecure

[WithSecure™ @WithSecure]

WithSecure™ and healthcare technology company @CueHealth have addressed a security issue that WithSecure™ discovered in Cue’s COVID-19 test.
https://t.co/9BAhIBm3aF
#hacking #Covid #infosecurity #infosec

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

Great work by ⁦@Yogehi⁩ as always! https://t.co/3gZQEGwwog

[Vic: Ukraine Edition @VicHarkness]

Next up I gotta get The Reg to report on me rambling about butthole cameras 👀

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

@VicHarkness You would go to camp for evil mfers

[Ken Gannon (伊藤 剣) @Yogehi]

I'm excited to finally publicly talk about Boops Boops, a re-skinned Drozer application lol

The story behind this application is that for Pwn2Own, I found a way to one-tap install a malicious application that gets uploaded to the Galaxy Store (1/?)

[Magnus Carlsen @MagnusCarlsen]

You come at the king. You best not miss.

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

1. Participants at @FSecure_Consult’s #yaketyHack Web App Security Sessions getting ready to hack a simulated bank
2. Hours later, after becoming simulated millionaires

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

Your coworker leaves their computer unlocked. How do you harmlessly yet effectively teach them a lesson in operational security?

The go-to is making them say “Next Round’s on me!” in a company chat channel

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

Going live with the #yaketyHack Web Application Security Sessions for @FSecure_Consult soon! Let’s get into the virtual bank and get that virtual bread 🍞 💻

[𝕓𝕖𝕣𝕫𝕖𝕣𝕜0 @berzerk0]

New “computer person” milestone: I went to type “subconscious” and instead my phone suggested “subdomain”