Alejandro G.

Vulnerability researcher

[Alejandro G. @lockedbyte]

@BorjaMerino Thanks! :)

[Alejandro G. @lockedbyte]

I developed an N-day exploit for CVE-2022-2586: Linux kernel nft_object Use-After-Free (UAF). I sent my exploit and writeup to the oss-security mailing list: https://t.co/E6YZiBG8xW

[Alejandro G. @lockedbyte]

This vulnerability was used in Pwn2Own Vancouver by @Seasecresponse: congratulations and thanks for this amazing discovery!

[Alejandro G. @lockedbyte]

@AravGarg3 @XI_Research Awesome!

[Alejandro G. @lockedbyte]

@AravGarg3 Nice work!

[Alejandro G. @lockedbyte]

@AravGarg3 Awesome!

[Alejandro G. @lockedbyte]

Thanks to the researchers from @cor_ctf for pumping out this awesome bug!

[Alejandro G. @lockedbyte]

Now that the discoverers have published their exploit and writeup, I sent my exploit and writeup for CVE-2022-0185 (Linux kernel integer underflow to slab OOB write) to the oss-security mailing list: https://t.co/ZREvAFG3Xd

[Alejandro G. @lockedbyte]

@AravGarg3 nice work!

[Alejandro G. @lockedbyte]

@AravGarg3 Nice one!

[Alejandro G. @lockedbyte]

@dor0n1 I tested it and works on multiple VMs, people tested it and works for them, it is your problem to find the issue and fix it, not mine

[Alejandro G. @lockedbyte]

CVE-2021-40444 simple demonstration PoC Exploit: https://t.co/xsBFeTpDlX

[Alejandro G. @lockedbyte]

@dor0n1 what do u mean? My last commit was 9 hours ago, this repo was created 6 hours ago...

[Alejandro G. @lockedbyte]

@AravGarg3 @Void_Sec Nice!

[Alejandro G. @lockedbyte]

@0xdea @AdeptsOf0xCC Huge thanks for feedback! Appreciate it a lot

[Bad Sector Labs @badsectorlabs]

ProFTPd UAF (@lockedbyte), API hacking (@hakluke and @Farah_Hawaa), file extension tricks on cloud storage (@mrd0x), built-in AD searching with ADSI (@Gr1mmie), DCE/RPC fingerprints (@hdmoore), SAML issues (@Secureworks, @joonas_fi), and more! https://t.co/bC89YPewHx

[Alejandro G. @lockedbyte]

@AravGarg3 @d0lph1n98 @alexjplaskett Nice one!

[GitHub Security Lab @GHSecurityLab]

A very detailed exploit demonstration of @Nosoynadiemas 's CVE-2020-9273 (ProFTPd UAF)

[Adepts of 0xCC @AdeptsOf0xCC]

Dear Fellowlship, How is your summer going?

Our N-Day owl @lockedbyte was bored in his holidays and decided to build an exploit for CVE-2020-9273. Check our post:

Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)

https://t.co/nfdZ6UMiYn

[Bad Sector Labs @badsectorlabs]

Exim RCE (@lockedbyte), Windows kernel exploit writeup (@33y0re), plaintext RDP creds from memory (@jonasLyk, @n00py1), MS Defender ATP bypasses (@Tyl0us), hashcat 6.2.0 (@hashcat), persist and blend C2 with Teams (@BlackArrowSec), and more! https://t.co/d1UVl4ad3L