Moritz @[email protected]

Pentester, IT-Security, Linux, OpenSource and Technology

[Battle Programmer Yuu @netspooky]

Just to be clear:

RTSP - Real Time Streaming Protocol
RTP - Real-time Transport Protocol
SRTP - Secure Real-time Transport Protocol
RSTP - Rapid Spanning Tree Protocol
RTPS - Real Time Publish Subscribe protocol
PSRT - Parsley, Sage, Rosemary and Thyme (Simon & Garfunkel album)

[FFmpeg @FFmpeg]

The xz fiasco has shown how a dependence on unpaid volunteers can cause major problems. Trillion dollar corporations expect free and urgent support from volunteers.

@Microsoft @MicrosoftTeams posted on a bug tracker full of volunteers that their issue is "high priority"

[FFmpeg @FFmpeg]

After politely requesting a support contract from Microsoft for long term maintenance, they offered a one-time payment of a few thousand dollars instead.

This is unacceptable.

We didn't make it up, this is what @microsoft @microsoftteams actually did:
https://t.co/AnmJ4VRyCh

[Matthias Deeg @matthiasdeeg]

Today, my colleague Enrique Hernández published a new software tool called AzurEnum which can be useful when analyzing Microsoft Entra ID configurations for security issues.

You can find his blog article introducing AzureEnum on the SySS Tech Blog:

https://t.co/7DVb1DmlKH

[Willem Melching @PD0WM]

I'm releasing the "automotive" rust crate! It has a fully async CAN adapter and UDS client. This allows building fast scanners or communicating with multiple ECUs in parallel. Both SocketCAN (Linux) and panda (Linux, MacOS, Windows) are supported.

https://t.co/37z6Q4w7JN

[Gerhard Klostermeier @iiiikarus]

I've just released a new version of MifareClassicTool 🎉
Also, we just reached 4000+ stars on Github. 🌟

Wasn't really fun to program, but necessary. Lot's of compatibility fixes and you can now change the language and theme.

Have a great 2024!

[Gerhard Klostermeier @iiiikarus]

🧵1/x
Hello fellow MIFARE Classic nerds. I learned something interesting today. Some MIFARE Classic chips violate the specification with regard to read/write permissions!

[Matthew Green @matthew_d_green]

Chrome just announced that it will be using my browsing history to show me ads. I’m really glad I don’t use Chrome as my main browser, and I wish other folks would stop this.

[Matthias Deeg @matthiasdeeg]

Today, I've published a new SySS PoC video titled "Sorry, But Your Mouse is Still Admin" concerning a further local privilege escalation attack exploiting yet another security vulnerability in Razer Synapse, found by my colleague Dr. Oliver Schwarz.

https://t.co/woT7F7fZw5

[RF Wave @rfwaveio]

Security researchers have disclosed vulnerabilities in AudioCodes desk phones and Zoom Zero Touch Provisioning (ZTP) to gain full remote access to devices

#cybersecurity #audiocodes #zoom

https://t.co/yNAk4N4DSi

[Matthias Deeg @matthiasdeeg]

Great work!

I can highly recommend Moritz' new SySS Tech Blog article describing several security vulnerabilities allowing to remotely exploit desk phones.

[Moritz Abrell @moritz_abrell]

Finally published the blog post about abusing @Zoom for remote attacks on endponits:

https://t.co/ExkeyYooBM

It was fun to present this at @BlackHatEvents

[FragDenStaat.de @fragdenstaat]

Leute, kommt alle, Boris Palmer beantwortet wieder persönlich IFG-Anfragen!

https://t.co/WrRlN3cvvO

[Moritz @[email protected] @Loris1123]

@r99t9r @ArminRohde @YouTube Das ist witzig, weil er die Inhalte der Aussagen überhaupt nicht bestreitet 🤷‍♂️

[Armin Rohde @ArminRohde]

Niemand wird je behaupten können,man habe es nicht gewusst :

[Matthias Deeg @matthiasdeeg]

Today, I have publish yet another proof-of-concept video about a security issue in the rapid software application development tool Omnis Studio.

In this video, a violation of expected behavior concerning "locked" classes is demonstrated.

https://t.co/nysG5lAZ8v

[KnowBe4 @KnowBe4]

The Mitnick Family and KnowBe4 announce the passing of Kevin Mitnick, 59, following a 14-month valiant battle with pancreatic cancer. Kevin will always remain “the world’s most famous hacker”. For more info: https://t.co/l1uvdMrkmL

[Moritz Abrell @moritz_abrell]

🥳 looking forward to see you in Bergamo!

[Matthias Deeg @matthiasdeeg]

It's been a while, but today I have published a new PoC video on YouTube.

In this short video, a security issue is demonstrated that violates expected behavior concerning the rapid application development software tool Omnis Studio.

https://t.co/OjsM5e3fBX