Adel Hamdi

Pentester | Security enthusiast | Curious | Surfer | Tweets and retweets are those of the author and do not reflect the view of my employer.

[Ambionics Security @ambionics]

#Symfony's secret fragments: Learn how a configuration problem leads to Remote code Execution on Symfony-based applications : https://t.co/9642aO9uPo

[Lexfo @LexfoSecurite]

#Symfony's secret fragments: Learn how a configuration problem leads to Remote code Execution on Symfony-based applications : https://t.co/mFIFPlQ4B4

[Dr.Philippe Vynckier, CISSP - Influencer @PVynckier]

The importance of women in cybersecurity for innovation, investment and enrichment https://t.co/t0VDIxX1wx
@CEFCYS_Officiel

[Lexfo @LexfoSecurite]

rpc2socks is a client-server solution developed by LEXFO that allows to drop and remotely run a custom RPC + SOCKS-through-SMB server application on a #Windows target, from a Unix or Windows host. The tool is open source and available here : https://t.co/ZiL8b4fK7k

[Sn0rkY @_Sn0rkY]

That’s all pentester /redteamer have to do before exploiting any vulnerability , know impact on the system ! Thanks @_dirkjan to clarify this point, its really didactic

[Lexfo @LexfoSecurite]

Learn how @cfreal_ from our @ambionics team, found and exploited a #PHP sandbox escape which was introduced in PHP 5.3, 11 years ago !

[SSD Secure Disclosure @SecuriTeam_SSD]

New advisory is now out!

Find out how an independent Security Researcher, Charles Fol (@cfreal_) used a UAF vulnerability in PHP to allow attackers that are able to run PHP code to escape disable_functions restrictions.

https://t.co/Lrd5Z38IJC

[H2Lab @H2lab_org]

Wondering what to do with #LEIAbyH2LAB/#smartleia Checkout the Practical Guide to Differential Power Analysis of #USIM cards https://t.co/rCRRwBbOhp and dont forget to back our project: https://t.co/CvFgrb89S0
#MILENAGE #SCA #SSTIC #hardware #openhardware

[Panos Gkatziroulis 🦄 @ipurple]

RoguePotato - Another Windows Local Privilege Escalation from Service Account to System https://t.co/WD5YQDX2Zp

[Lexfo @LexfoSecurite]

Congratulations to @__brendel for his 2nd place position in the @sstic Challenge 2020! Can't wait for the upcoming edition of the conference!

[Lexfo @LexfoSecurite]

We are proud to announce that @cfreal_, from @lexfo's pentest team, will present "finding vBulletin 0-days through poor man's symbolic execution" at @sstic 2020. More information about the talk here: https://t.co/7CpOE3hV8E

[Lexfo @LexfoSecurite]

A penetration tester from Lexfo found and exploited a subtle bug during an assessment on a French Banking FTP service. Here is the story of this 0-day vulnerability research : https://t.co/hfJUChZNjb

#binaryexploitation #0day

[Lexfo @LexfoSecurite]

The Lazarus Constellation, a study on North-Korean malware

In this Whitepaper, Lexfo analyses Lazarus Malware, from their Motives, to their detection and mitigation, through their techniques, tactics, procedures : https://t.co/jzja2qmAtr

#threatintelligence #malware #Lazarus

[Adel Hamdi @jarlinoux]

Whitepaper: The Lazarus Constellation - A study on North-Korean malware https://t.co/tLqeByYnsd
#Lazarus #malwareanalysis #apt #Lexfo #threatintel

[THConvention @ToulouseHacking]

We are proud to announce @LexfoSecurite as our sponsor – thank you for helping us! You will be able to meet them at the #conferences and the trainings – don't miss them! #thc20 #infosec

You can purchase your tickets here 👇
https://t.co/R5O8Y5TwrQ

[Ambionics Security @ambionics]

A Sandbox Escape was found on F5 BIG IP APM leading to an XSS on the portal, by @whira_wr from the Ambionics team :
https://t.co/KPfEyGTaQi

[STÖK ✌️ @stokfredrik]

SSRF? in a pdf? Oh yeah!
My boy @NahamSec accidentally found a pretty sick bug and breaks down his and @daeken bug that landed then a @defcon talk last year in this video, if you’re into breaking pdf renders this ones for you!

https://t.co/K5hfwb4lvS
#bugbounty #Pentesting

[Ambionics Security @ambionics]

https://t.co/tEUlRXGntO
Learn how we broke PHP's Mersenne Twister PRNG

[Nicolas Krassas @Dinosn]

OSCP resource gold mine https://t.co/5b7lg9LGJJ