bytebutcher

[0xor0ne @0xor0ne]

Presentation slides on exploiting Linux kernel with CVE-2023-3390 by Dongok Kim (@c0m0r1) & SeungHyun Lee (@0x10n) & Insu Yun (@insu_yun)

"One shot, Triple kill"
https://t.co/bw6iEpJH4T

#Linux #infosec

[Kubesploit @kubesploit]

netfetch is a tool designed to scan Kubernetes namespaces for network policies and check whether a network policy targets your workloads

➜ https://t.co/FOZqE5cDQr

[Swissky @pentest_swissky]

A lot of people liked PayloadsAllTheThingsWeb, it is now out of beta and live on the main repository. Every changes will now be reflected in 5 minutes instead of a cron scheduled every 6 hours🥳
https://t.co/9S5AkbcP9m

[Millin Gabani @trillhause_]

I didn’t know llama 3 was chill like that.
Mad respect Zuck 🫡

[Disconnect3d @disconnect3d_pl]

The @offensive_con talk "How to Fuzz Your Way to Android Universal Root: Attacking Android Binder" from Google folks featured Pwndbg's functionalities to inspect kernel allocator and Android binder's state (https://t.co/cScyUxu4W5) :)

#pwndbg #offensivecon #pwning

[Alisa Esage Шевченко @alisaesage]

An (almost) full VM escape with a single bit clear. Wow

(Almost because ASLR & CFG bypass here is incompete so it can only pop calc without arbitrary code execution)

This piece of code in VirtualBox is well known and has been audited down and through, meaning that it took Cody a lot of hard manual work to find the bug. My HVR training alone has 2-3 exercises on this code, plus tons of stuff on device IO, VMMDevice, PDM, racing samples...

[Bilgin Ibryam @bibryam]

Cloud Egress Costs Compared
https://t.co/oHczG7jLZv

[bytebutcher @bytebutcher]

Tired of copying & pasting multiple shell scripts across servers? 😩

Meet https://t.co/YKhQnBRzSm - Bundle all your scripts into ONE with a simple CLI!

Get https://t.co/YKhQnBRzSm: https://t.co/iQQkLu5Hkt

#Bash #Pentesting #Productivity

[tmp.0ut @tmpout]

Check it out, it's tmp.0ut Volume 3!

https://t.co/Gm9erN8hTJ

[Kubesploit @kubesploit]

This article discusses Kubernetes security fundamentals and provides five practical steps to bolster security:

➀ Proper configuration
➁ Image scanning
➂ Network security
➃ Controlling running applications
➄ Auditing and logging events

➜ https://t.co/XQjzmqsUwl

[Nicolas Krassas @Dinosn]

eBPF kernel 'backdoor' to snoop on ALL ssh/sudo/su/login/passwd sessions. https://t.co/HptuQ8WWmF

[Madhu Akula @madhuakula]

I'm sharing my content from 30+ conferences with community to learn 🙏

✅Talks & Slides
✅Presentations & Videos
✅Workshops & Trainings
✅Books & Documentation

Please Share & RT
https://t.co/zghkKyprm2

#InfoSec #Security #DevSecOps #Pentesting #DevOps #CloudNative #OpenSource

[bytebutcher @bytebutcher]

https://t.co/GaGL5AgXUy

[bytebutcher @bytebutcher]

https://t.co/rmSnQWESqr