invist

::

[/ˈziːf-kɒn/ @x33fcon]

Oh wait, what did we find wrapping up? 🦏😁

[CODE WHITE GmbH @codewhitesec]

We could waffle on about our distinctive service portfolios. We could brag about the perks we provide. We could present you with our outstanding team. But you know what? Apply if you can! https://t.co/9P6SMfmPxU

[frycos @frycos]

https://t.co/CWToxP6elZ
Blog post published with my special guest "Microsoft Exchange (CVE-2022-21969)"

[thefLink @thefLinkk]

Here is an idea to identify running beacons:

1. Beacons ThreadState often is: DelayExecution
2. Calltrace to NtDelayExecution includes unknown regions

Works also fine against beacons sitting in file backed memory

https://t.co/ro4WETq9Ox

[MOGWAI LABS GmbH @mogwailabs]

It seems that there is a lot confusion about the log4j JNDI injection vulnerability (CVE 2021-44228). In our latest blog post we provide additional background fundamentals about JNDI and JNDI exploitation (and a lot of links): https://t.co/0UytHFBkga

[Mikhail Klyuchnikov @m1ke_n1]

@chybeta @ptswarm It works in latest firefox version.

[MOGWAI LABS GmbH @mogwailabs]

RCCMD is a service that lets you systematically shut down critical systems in the event of a power outage. In our latest blogpost we show how systems can be compromised via this service:
https://t.co/4KW8oopvkJ

[MOGWAI LABS GmbH @mogwailabs]

We just pushed a new MJET version with two small features that might be handy if you are dealing with some unusual targets. https://t.co/j0dx8T9RaN

[thefLink @thefLinkk]

https://t.co/OjtMgaMMeV

Some examples on how to create complex PIC which uses syscalls in pure C.

One can use any shellcode loader/injector to execute complex PIC and use encoders to break signatures.

[invist @invist]

@frycos @steventseeley Personally would also go with https://t.co/yKyrUCW3eR . If you don't need a full feature regsitry you can also serve the images via a webserver (docker save |bzip2 > s.bz2 ) and restore them via cat s.bz2 | bunzip2 | docker load. Hacky way but simple & ro

[CODE WHITE GmbH @codewhitesec]

Once upon a time there was a #Sophos XG Firewall N-day that had @ramoliks and @niph_ dig deep until they got RCE, a 0-day and a comprehensive blog post. #CVE-2020-12271 #CVE-2020-15504 https://t.co/5AkD6fVL1x

[CISA Cyber @CISACyber]

SAP has released security updates for a critical vulnerability in NetWeaver AS Java. Patch ASAP! Read our Activity Alert at https://t.co/FOqpnH8v2x for more information. #Cyber #Cybersecurity #InfoSec

[frycos @frycos]

https://t.co/726MpPP1Zb
This is some pretty cool PHP deserializiation stuff.

[Alvaro Muñoz @pwntester]

It is now official, @olekmirosh and yours truly will be presenting at @BlackHatEvents one more time! 🎉 https://t.co/ZXYa3tQRrn

[Hans-Martin Münch @h0ng10]

MOGWAI LABS was founded 2 years ago. Due to Covid19, we will have no party. However, I booked several DJs to create some mixes instead. Starting with DJ Crypt from the Famous Deck Team who is showing his turntable skillz with this fine hiphop mix. Enjoy :)
https://t.co/p1ubpBfYWT

[ATT&CK @MITREattack]

Our beta release of ATT&CK with sub-techniques is now live! We’ve just posted a blog post by @stromcoffee with links to all of the new resources and advice on how to leverage them (https://t.co/ksD2ipq3F3). You can also check out the new site itself at https://t.co/dlESRi9g76.

[ClearSky Cyber Security @ClearskySec]

We have published a new report: Fox Kitten - Widespread Iranian Espionage-Offensive Campaign.
https://t.co/kyqgCNx7n6

#APT34 #APT33 #APT39

[MOGWAI LABS GmbH @mogwailabs]

In our latest blog post, we take a closer look at @_tint0 s RMIRegistry Bypass gadget
https://t.co/X4CinCuf9R

[Matt Bromiley (🇺🇸) @_bromiley]

Despite being 2020-01-11, I think @cyb3rops just won the PR of the year award! https://t.co/qZBt4AXTOi

[MOGWAI LABS GmbH @mogwailabs]

Oh look, we now have a „careers“ section on our homepage https://t.co/919d68BE2X