sigpwn

pwn feed

[Kasif Dekel @kasifdekel]

AFL fuzzing MapleStory for... successful jump quests 🍁

afl-fuzz + IJON driving the game client, to automatically solve difficult maplestory jump quests.

More info: https://t.co/ruGoGXSWqV

[Kasif Dekel @kasifdekel]

I found a silly bug in @WhatsApp that let attackers spoof a normal-looking link preview while controlling the URI opened - allowing arbitrary app deeplinks, with attacker-controlled parameters, launched without confirmation.

Fixed by @Meta.

Write-up : https://t.co/LboVeUmuy3

[Security Joes @SecurityJoes]

During our latest incident response, @charleslomboni implemented #ChatGPT into #Ghidra.
We've released the code so you could use it too:
https://t.co/p8x48JFhjW
Charles called it AskJoe 🤠

Enjoy & share

[Binni Shah @binitamshah]

How We Fuzzed Microsoft Defender for IoT and Found Multiple Vulnerabilities : https://t.co/70vIdaDNT1 credits @kasifdekel @SentinelOne

Pwning Microsoft Azure Defender for IoT - Multiple Flaws Allow RCE for All : https://t.co/lbUM1fDY6F

[sigpwn @GHIDRA_RE]

Patch ASAP!

[SentinelOne @SentinelOne]

🔥New on #SentinelLabs! We’ve just disclosed 10.0 CVSS vulnerabilities on Microsoft’s Azure Defender for IoT allowing unfettered access to your Microsoft-protected organization. By @kasifdekel & @ronenshh.

https://t.co/e8TvQEhM5z

#azure #iot #xdr #vulnerabilities

[Alisa Esage Шевченко @alisaesage]

Nice little-known writeup on WhatsApp exploitation: https://t.co/YEaFPAoPzG < technically interesting for more than one reason

[Assaf Carlsbad @assaf_carlsbad]

In what seems like nearly perfect conjunction with the latest @binarly_io disclosure, today we publish the 6th installment of our UEFI blog post series where we dissect 6 new vulnerabilities in HP's firmware that allow privilege escalation to SMM.
https://t.co/q2SlBFdaqX
@liba2k

[cyber8knight @AravGarg3]

This is a in-depth write-up of one of the CLFS bugs I worked on recently. Thanks @XI_Research for giving me the opportunity to conduct this research.

[Project Zero Bugs @ProjectZeroBugs]

XNU kernel use-after-free in mach_msg https://t.co/uUXIbc557Q

[Kasif Dekel @kasifdekel]

Sorry about that @FlowerCode_ & @tiraniddo, I reported a LPE vulnerability and they decided to remove it. Hoped they'd release a fixed version. I find DeviceTree useful too and you can find a signed version in the repo alongside with the vuln details: https://t.co/9w6SciFonw

[ϻг_ϻε @steventseeley]

I wanna see someone directly RCE with this: https://t.co/bxYTuw05XS

[Chromium Disclosed Security Bugs @BugsChromium]

Security: mojo OnIntroduce doesn't validate peer node (node<->node mitm) https://t.co/sGNQuHdK4d

[Project Zero Bugs @ProjectZeroBugs]

Zoom: Buffer overflow when processing chat messages https://t.co/0FV6q9T43T

[Florian Hansemann @CyberWarship]

ZDI-21-1053: Bypassing Windows Lock Screen

#infosec #pentest #redteam
https://t.co/vNKLQr5zXE

[Project Zero Bugs @ProjectZeroBugs]

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution https://t.co/MUk90ClE80

[ϻг_ϻε @steventseeley]

For those that are trying to keep up, the log4j JNDI injection is probably pre-auth RCE on approx ~90% of your Java apps. You wanna patch this one.

[raptor @0xdea]

Two Birds with One Stone: An Introduction to V8 and JIT Exploitation

https://t.co/1wSIBZW6ku

[Jeff Vander Stoep @jeffvanderstoep]

Fuzzing is an effective offensive security tool that defense has widely adopted. Unfortunately, it’s altogether insufficient for defense.

“I wrote fuzzers and found the vulns!” No. You didn’t. You found some vulns. If you’re in offense, your job is done. In defense it’s not.
1/

[SentinelOne @SentinelOne]

🔥New on SentinelLabs! 25 CVEs and counting: Vulnerabilities in #AWS & other major #cloud services. @kasifdekel's latest research reveals millions of cloud users are exposed to privilege escalations from bugs in shared driver software.

https://t.co/eeMGFeadSw

#cybersecurity