Emmanuel.Law 🇸🇬🇳🇿🇺🇸

Security Wanderer. Tweets are my own

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

Writeup on exploiting a double-free in PHP double-link-list by manipulating the small heap allocator. https://t.co/MaxAODmuBX #CVE-2016-3132

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@IAmMandatory that is a pretty sweet logo ;)

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@benhawkes @_fel1x congrats @_fel1x ! That's pretty awesome

[The Daily Swig @DailySwig]

A new tool from Emmanuel Law (@libNex) and Claudio Contin (@claudiocontin) manipulates service workers in order to control a victim's browser #BHUSA

https://t.co/uU9zTmOnwX

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

So apparently @claudiocontin and I will be presenting at both BlackHat Arsenal and Defcon Demolabs. Come for our preso if you are in Vegas then!

https://t.co/u59qmcVOt1

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@notdan Wow..that so not cool...

[Claudio Contin @claudiocontin]

https://t.co/m9H7V2AAih Chrome extension to allow or block individual Service Workers installed by web apps. Related to the #kiwicon talk I presented with @libNex

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@Michael05510436 Attack browser -->c2 proxy-> service workers->website

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@Michael05510436 Hey the c2 has 2 functions. To act as a command and control for remote service workers ..as well as to act as a proxy for the attack's browser to proxy their traffic through

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@_devalias @riposte_sec @LittleJoeTables @IAmMandatory +1 to a good talk !

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

It's been fun @kiwicon :) Till next time!

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@_fel1x why are u tweeting on the plane!... FAA regulations..something something...flight mode ;)

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@ajdlinux Good points! I guess It maybe possible for a web page to have a snippet of JS that is uniqely encoded/obfuscated each visit to deregister unauthorized service workers. This would make it harder for an exisiting malicious service worker to nullify the deregistration routine

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@claudiocontin They spelled my name wrong :p

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@ranginui Awesome stuff!

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

Accomplishment unlocked ;) #kiwicon @claudiocontin

[mandatory.bsky.social @IAmMandatory]

@libNex missed your award man :)

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@IAmMandatory Lol.... Not sure how I feel about that award..

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@hyprwired looking good backstage!

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

I AM @IAmMandatory at #kiwicon

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@_fel1x talking about DHCP vulns @ #kiwicon !

[Emmanuel.Law 🇸🇬🇳🇿🇺🇸 @libNex]

@xntrik @claudiocontin Cheers mate !