Dunstan Pinto

Security enthusiast. OSCE, GXPN, OSCP, SLAE Github:

[Dunstan Pinto @buffered4ever]

Hey guys I have 2 extra general admission tickets for the BST Hyde Park - Mumford and sons concert on 4 July. Let me know if you are interested #mumfordandsons #hydepark

[Dunstan Pinto @buffered4ever]

@amarabokh @TicketmasterCS Hey I have 2 spare general admission tickets if you are interested.

[Marco Lancini @lancinimarco]

☁️ Token theft playbook

Microsoft has been published a Token Theft playbook which includes investigation checklist, hunting queries, response/recovery task lists, and an accompanying decision tree.

https://t.co/ann5TZcHAY

[Felix Wilhelm @_fel1x]

If you perform SAML auth in Java you should make sure you patched https://t.co/jXex2fIZOP. RCE during signature verification. Blogpost coming soon™.

[raptor @0xdea]

C++ Memory Corruption (std::vector) - part 2, by @silviocesare at @infosectcbr

https://t.co/pzAT5jnyIU

[Ian Beer @i41nbeer]

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists,
activists and dissidents around the world. https://t.co/RYsqpTHF5j

[Linux Kernel Security @linkersec]

Ubuntu LPE exploit from Pwn2Own

@flatt_sec_en published a whitepaper on exploiting Linux kernel eBPF vuln leading to OOB RW primitive.

They used it against Ubuntu Desktop 20.10 at Pwn2Own 2021.

https://t.co/99UjKbwiQ8

[raptor @0xdea]

Two Birds with One Stone: An Introduction to V8 and JIT Exploitation

https://t.co/1wSIBZW6ku

[SentinelOne @SentinelOne]

🔥New on SentinelLabs! Inspired by Pwn2Own, researcher @maxpl0it discovered three CVEs, including two privilege escalations, in VirtualBox.

Read more here: https://t.co/nooDgInJYU

#virtualbox #cybersecurity #threatintelligence #threatresearch #infosec #cve

[shubs @infosec_au]

Hey @nnwakelam thanks for the suggestion around the mod_proxy SSRF. We've updated the glossary to contain the Apache mod_proxy SSRF PoC, affected versions and reference blog post: https://t.co/su4gpZpPuk

Happy to maintain this resource for the community.

[Man Yue Mo @mmolgtm]

In this post I'll go through 3 bugs in the Qualcomm NPU driver that I reported, which allowed me to execute arbitrary kernel code from the untrusted app domain in Android, disable SELinux and bypass task cred protection to gain root on a Samsung phone: https://t.co/SInC9rADXq

[Linux Kernel Security @linkersec]

This year's education module on kernel security at https://t.co/nlAavAD3lu

Agenda of lectures and exercises:

🔘 Introduction
🔘 Environment Setup
🔘 Kernel Modules
🔘 Privilege Escalation
🔘 Escaping Seccomp
🔘 Memory Management

https://t.co/xzPc2yaNWm

[Darren Martyn @_darrenmartyn]

Have yourself a local root 0day in Zimbra to brighten up an otherwise dull Monday morning.

https://t.co/lpA7Nzb8oZ

[Juliano Rizzo @julianor]

Zoom Client logic flaw (yes, logic != boomer overflows your fuzzer will find): "This means we can spoof the “trusted TCP channel with our “untrusted” UDP channel” "all we need to do is send the magical “give desktop control” packet to the target attendee. "

[PortSwigger Research @PortSwiggerRes]

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464) by @artsploit

https://t.co/Fe1zr2PrSJ #exploit #bugbounty

[Rajvardhan Agarwal @rajxnull]

Play CTF.
If anyone is starting out, I would strongly recommend to complete the binexp category from @picoctf. It has a decent difficulty curve and you can always read writeups if you get stuck. Complete the binexp challenge sets from 2019 and this year, you will learn tons.

[Rahul Maini @iamnoooob]

I and @rootxharsh found and exploited a 0Day RCE in Apple's Travel Portal and were rewarded with $50K. Here's the write-up for that:

https://t.co/zMpw2QOEvP

[Scott Piper @0xdabbad00]

For red teams and pentesters, and defenders wanting to know attacks to look for and protect against, I've written down the techniques I would use to attack AWS environments.
https://t.co/8lehoTzY7X

[Andy Nguyen @theflow0]

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution
Blog post available soon on: https://t.co/2SDRm6PZaQ
Google Security Research Repository: https://t.co/0HolidyWvV
Intel Security Advisory: https://t.co/kfGj3MWajy
Video: https://t.co/sE35AoD0V4

[Project Zero Bugs @ProjectZeroBugs]

JioChat for Android: caller can cause callee device to send audio without user interaction https://t.co/x7JZ6gZ8un