Joao Matos

[Joao Matos @joaomatosf]

@jespinhara I tried some options and this was the best for me:

https://t.co/6ZoTBOfKWF

[Rodrigo Branco @bsdaemon]

A lot of folks asked @h2hconference to release the image used in the banner of the past edition of the magazine, so we did (high res in the link, low res in the tweet)! https://t.co/6jiiU0d2yu #H2HC2022

[Heyder Andrade @HeyderAndrade]

Landed a @metasploit module that exploit a Java deserialization vulnerability in JBOSS EAP/AS Remoting Unified Invoker interface for versions 6.1.0 and prior.
Credits: @joaomatosf

https://t.co/JTPOCJdJTz

#cybersecurity

[Joao Matos @joaomatosf]

@ILDannyMoore hey @ILDannyMoore , any idea when your book will be available in kindle format on https://t.co/nmKSftudyG ? I'm looking forward for this...

[Joao Matos @joaomatosf]

@elonmusk The time has come! We announce the new #DOGE: It's called #LUNA!

[Joao Matos @joaomatosf]

@lowprofiledai as dificuldades a tornam ainda mais forte!

[J @jespinhara]

I did release a very small blogpost/exploit I wrote for a vulnerability found by @joaomatosf some years ago. Vulnerability details are on the slides (link on the post). https://t.co/JPACXTK04f

[Joao Matos @joaomatosf]

It is very useful to lateral inside core business networks. Enjoy.

[Joao Matos @joaomatosf]

Time to leak this old (but gold) Pre-Auth RCE effecting some RedHat products. I had already leaked it some years ago at @AlligatorConBR and in the @h2hconference web training (with my friends @reefbr and @marcioalm). https://t.co/G7RAXeDK94

[Joao Matos @joaomatosf]

@6thoutof12 @cyb3rops @SolomatovVl that's it!

[Joao Matos @joaomatosf]

@cyb3rops @SolomatovVl do you really believe that the "possible enemy" care about your tools, my friend?

[Joao Matos @joaomatosf]

@cyb3rops hey buddy. Let's suppose that important people thought like you and decided to stop, for instance, selling food to places with "Russian language + timezone". Who do you think would be impacted with this "smart" decision? War Guys or Normal People? =]

[Joao Matos @joaomatosf]

@pwntester Unless the Attacker has the ability to change the things which makes the app/framework/app_server exploitable...

[Joao Matos @joaomatosf]

@pwntester I agree. Changing the things to a non default state in order to make an app/framework/app_server vulnerable should not be considered a real vul also IMHO...

[Joao Matos @joaomatosf]

this is what happens when you entrust your company's security to self-titled "security XPTO" who spend all their time criticizing security researchers on twitter

[caioluders @caioluders]

@cyb3rops @bettersafetynet @flakpaket

[caioluders @caioluders]

@cyb3rops @bettersafetynet @flakpaket

[JD Work @HostileSpectrum]

When researchers said no more free bugs, they were serious. This includes red teams. If vendors fail to appropriately incentivize disclosure against prevailing market rates, somebody is gonna pay the bills.

[Joao Matos @joaomatosf]

@hackerfantastic That's it!

[Joao Matos @joaomatosf]

@amilton_justino @MaxieReynolds nice coin on the table =D

[Joao Matos @joaomatosf]

@n3k00n3 fechado, se puder trocar por dois expressos, ta valendo tbm 😅