Loqpa

[Anton @nt0x4]

Base64 Decode -> Gzip decompress -> Assembly.Load using only XAML: https://t.co/fwSMnYXG3Y #dotnet #deserialisation #xaml

[Matt Creel @Tw1sm]

I've been exploring ADCS ESC4 recently and detailed some lessons learned and Linux-based enumeration/abuse methods in a new blog post 📜

🛠️ The Python tool used in the blog post can also be found on the Fortalice GitHub, link in the replies!
https://t.co/XU8uTvF7lY

[Loqpa @loqpa]

@vimvn @positive_sec Thats because Teams is Electron based and Electron has--gpu-launcher flag allowing code execution

[Loqpa @loqpa]

@theXSSrat @EnesSaltk7 Opps, my bad. This time character limit almost got me:P

[Loqpa @loqpa]

@roy1235678 @orange_8361 I did not find any (at least in public). Source code analysis is the key (and at least one public research is hinting towards right file)

[Loqpa @loqpa]

Finished reproducing #Proxylogon exploit tonight. What a Journey!

Kudos to @orange_8361 for discovering such a cool bug.

[Loqpa @loqpa]

@gynvael Nice one!