Francesco Mifsud

I thought what I'd do was, I'd pretend I was one of those deaf-mutes.

[Francesco Mifsud @GradiusX]

@HackSysTeam Extreme Vulnerable Driver Python Solutions
https://t.co/xHENBY7PyH

[Francesco Mifsud @GradiusX]

Tap the link and join the game where you can mine crypto via DePIN by scanning networks! Use my code 19e0446d and get 25K Data Chips as a gift: https://t.co/pweQRk5XHB

[Francesco Mifsud @GradiusX]

@alisaesage Maybe something like the HackSys Extreme Vulnerable Driver but for browsers/virtual environments/iOS/Android/etc would definitely increase the level in exploit dev

[Mobile Security @mobilesecurity_]

‼️ Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027) 🔥
#MobileSecurity #AndroidSecurity by @census_labs
https://t.co/a5Jq2kpvCi

[Cybergate Ltd. @CybergateLTD]

Ransomware is now your biggest online security nightmare. And it's about to get worse https://t.co/OieC8UKZmu

[Sinaei @Intel80x86]

If you need a fast/light way to instrument and save each instruction (with general purpose & r/e flags) in all levels of execution (User-mode/Kernel-mode/Hypervisor) then use my new customized version of QEMU.

https://t.co/TGrX7W6KnW

[Kei @keikane_]

As promised, posting the next lazy write-up, this is how I went from Git to RCE.
Bounty: $3500
#bug #bughunter #bugbounty #bounty
If you enjoy these and want to see more, I will be posting others soon again.

[Tavis Ormandy @taviso]

I'm publishing some 🔥 research today, a major design flaw in Windows that's existed for almost *two decades*. I wrote a blog post on the story of the discovery all the way through to exploitation.
https://t.co/1DFW2VGQRb

[Ryan Hileman @lunixbochs]

I made a subleq (esoteric one instruction computer) interpreter in ROP for the ropship challenge at @oooverflow's DEFCON CTF Finals, and an assembler that made it reasonable to write programs against https://t.co/fFvGt7GBE8

[nickharbour @nickharbour]

#flareon6 Solve the full version of Memecat Battlestation and bypass the first level of this year's flare-on challenge, which is the demo version of this awesome game. https://t.co/AkaUmU01iH password "BHUSA2019"

[Ring3API 🇺🇦 @ntlmrelay]

#Windows #ProcessInjection: KnownDlls Cache Poisoning – modexp https://t.co/pFx8u0xsi4

[aSiagaming @vngkv123]

I'm writing simple chrome v8 exploit tutorial on my github :)
Although i'm not very good at Browser exploitation and didn't complete this tutorials, yet, but i hope this one will be helpful for someone.
I will make 4 ~ 5 types exploit tutorials !
https://t.co/W0pr9NAJwF

[Charles Fol @cfreal_]

SQLite Code Execution using an arbitrary database. https://t.co/VGj59yzsTR

[Elad Shamir @elad_shamir]

We just finished delivering our @defcon workshop about Kerberos delegation attacks. As promised, here's the slide deck for those that couldn't attend:

https://t.co/uFxBB1qUtC

[Fábio Pires @fabiopirespt]

Oh, great! #67. @GradiusX we did it! What a great team work. Too bad @msftsecresponse could not include your name in front of mine. Such a great journey!

[Francesco Mifsud @GradiusX]

@fabiopirespt @msftsecresponse Indeed mate. Super disappointed but anyways it was an amazing journey and exceptional teamwork! one for the books.

Maybe next year :P

[Burp Suite @Burp_Suite]

On Wednesday we'll update @Burp_Suite with a scan check for a massively overlooked vulnerability class that @albinowax will unveil at #BHUSA. This issue is very widespread in modern web stacks and often has critical consequences.
https://t.co/Vpa67YHAbD

[Somdev Sangwan @s0md3v]

Big news!
I bypassed Google's search limiting CAPTCHA!
No proxies, no delays and it always works!
Writing a python library, brb 🔥

Meanwhile, suggest a good name for the library.

[Michael Sikorski @mikesiko]

Nintendo ROM reversing sounds like FUN! Are you ready for the 6th Annual FLARE-On Challenge? @FireEye @nickharbour https://t.co/ti9ZjcgjJN

[Burp Suite @Burp_Suite]

Coming soon to @Burp_Suite ... WebSockets in Burp Repeater

[itszn @itszn13]

Decided to take @qwertyoruiopz's nday and write a full exploit for it. Here is a exploit for iOS 12.3.1 doing SOP bypass via arbitrary read/write