FoxGlove Security

[FoxGlove Security @foxglovesec]

@DylanOwendylan @robertgraham looks familiar...

[FoxGlove Security @foxglovesec]

HP has released the security bulletin which addresses the vulnerability described in our blogpost https://t.co/FSTwgnuJ80

[FoxGlove Security @foxglovesec]

@juhasaarinen @breenmachine Everything was known in August.

[FoxGlove Security @foxglovesec]

We think HP should be more concerned with foxes than wolves - "A Sheep in Wolf's Clothing - Finding RCE in HP's Printer Fleet" by @breenmachine - https://t.co/lAABu721Ic

[FoxGlove Security @foxglovesec]

Dropping @breenmachine and @dronesec latest Windows privilege escalation project - For exploit devs and pentesters - https://t.co/Zi9ntdoPVQ

[FoxGlove Security @foxglovesec]

New blogpost by @jstnkndy on abusing Type Juggling and PHP Object Injection to gain SQLi https://t.co/1Sb11WvvCU

[FoxGlove Security @foxglovesec]

New blogpost from @breenmachine on abusing JasperReports servers to get shells on a pentest https://t.co/bZrUQAWlns

[FoxGlove Security @foxglovesec]

New blog post about @breenmachine's Derby talk - Privilege Escalation from Service Accounts to SYSTEM in Windows https://t.co/ta0RTTaEMs

[FoxGlove Security @foxglovesec]

Our first PWNSchool event was a success! Anyone interested in hacking more bounties with us, sign up for round 2! https://t.co/xNUAdoPj05

[FoxGlove Security @foxglovesec]

@breenmachine and @jstnkndy are hosting free training in Montreal https://t.co/xNUAdp6TRD - come hack on @Bugcrowd bounties with us!

[FoxGlove Security @foxglovesec]

@campbellstevend We're working on it ;)

[FoxGlove Security @foxglovesec]

New blog post by @BrandonPrry - Finding pearls; fuzzing ClamAV

https://t.co/o2HkthrZ0d

[FoxGlove Security @foxglovesec]

Why DoS isn't compromise - 5 Years of Real Penetration Test Data to Stand Behind (https://t.co/82S6zXhXDZ)

[FoxGlove Security @foxglovesec]

New blog post, we hope it gives you the warm and fuzzies: https://t.co/xxgb3dcjpz

[FoxGlove Security @foxglovesec]

New blog post, because who doesn't like getting cleartext credentials using wireless attacks? https://t.co/KIoX52TLGO

[FoxGlove Security @foxglovesec]

Potato for Win10 updated, no more waiting for shells to pop! Shout out to @vvalien1 for the trigger! Now on Github.

[FoxGlove Security @foxglovesec]

New blog post and tool, codename "Potato", that will get you SYSTEM on Windows, get it while it's hot: https://t.co/8lMRwmq6o5

[FoxGlove Security @foxglovesec]

Welcome to the newest version of the @foxglovesec team @BrandonPrry !

[Emmanuel Goldstein @0xCerealKiller]

Deserializing arbitrary user controlled content? IT'S UNIVERSALLY STUPID, MAN https://t.co/3K1MSkauTo

[FoxGlove Security @foxglovesec]

@daveaitel @jstnkndy @breenmachine Glad you liked it. I'll be sure to submit to Infiltrate if I find any more cool unserialize bugs