kutio

no free lunch / Not really a bug, pass correct parameters and it will work correctly.

[optistream @optistreamio]

Check out latest #vulnerability discovered by Optistream: CVE-2024-37393 affecting SecurEnvoy MFA <= 9.4.513 #ZeroTrust solution.
Unauthenticated attackers may exfiltrate your Active Directory from the Internet.
#ldapinjection #2fa #mfa
https://t.co/R2WQcYfCD3 @ANSSI_FR

[optistream @optistreamio]

Check out our first episod of #redteam tales where we share a real-world case of XXE exploitation during client #pentest engagement.

#webexploitation #bugbounty #infosec #cybersecurity
https://t.co/nhzyB7rPi5

[kutio @kutioo]

@EthCC Looking for one ticket ! Thank you

[kutio @kutioo]

yo #36c3

[BeeRumP @BeeRumP_Paris]

Jamais Troie sans mon cheval.... enfin, je m'égare :

"Breaking Chrome" par @__x86 !

[TyphoonCon🌪️ @typhooncon]

Happy to reveal another one of our great speakers! Jeremy Fetiveau @__x86 will talk about Attacking Turbofan at TyphoonCon. A highly recommended talk, especially for browser exploitation enthusiasts!
TyphoonCon // June 10-14 // Seoul Korea

[Julien Perrot @nieluj]

Ma solution du challenge #SSTIC 2015 est disponible à l'adresse : http://t.co/qYVq4spksv

[Axel Souchet @0vercl0k]

Yet another example of breaking a weak checksum algorithm with z3py: https://t.co/5zEyYX0XMP

[kutio @kutioo]

@naehrwert https://t.co/JZaYnLtEkX ok found

[kutio @kutioo]

@naehrwert could you share the files on your blog plz :)

[kutio @kutioo]

https://t.co/hVlDI14QLe @Fr1sk0 #Paris

[kutio @kutioo]

@doegox @0vercl0k @Shiftreduce @elvanderb good job dude ! was the hardest task of the challenge !

[André Moulu @andremoulu]

Abusing Samsung KNOX to remotely install an application: story of a half patched vulnerability http://t.co/8XsTnRLU1R #pwn2own #fail

[kutio @kutioo]

http://t.co/1b5nobueoD MIPS Statistical analysis : kthxbye ! nice solution

[kutio @kutioo]

CVE-2014-8485 http://t.co/2PVGMPFDnL FR write up

[kutio @kutioo]

http://t.co/GN8aTcYN3q #shellshock

[kutio @kutioo]

@Fr1sk0 http://t.co/MV9GVRm3v0 Paris graph flow without hidden instructions

[Julien Perrot @nieluj]

Et les différents outils développés également poussés dans la foulée : https://t.co/V4X8fEWfku #SSTIC

[Julien Perrot @nieluj]

Ma solution en ligne sur le repo github https://t.co/V4X8fEWfku #SSTIC

[kutio @kutioo]

@reon_wi Nice article, IsBadWritePtr can also be used as an anti debug with a non writable address cc msdn