Andrei Saygo

[v1n @0xv1nx0]

Dropping new LOLBin/LOLBAS inspired project today called LOLGlobs, to document some cool ways of commandline evasion using wildcards and some other obfuscation techniques that go beyond B64 encoding: https://t.co/weesvN45Vd

[Tom Dörr @tom_doerr]

Intercepts and analyzes traffic from mobile devices

https://t.co/uVDYQYhbyB

[Dark Web Informer @DarkWebInformer]

‼️CVE-2026-24061: Telnet RCE Exploit

GitHub: https://t.co/zataEPbh8f

This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable.

CVSS: 9.8

Usage:

python telnet_rce.py <host> [-p <port>]

Arguments:

host: Target IP address or hostname (required)
-p, --port: Target port (default: 23)

Example:

python telnet_rce.py 192.168.1.100
python telnet_rce.py https://t.co/bnffeRl6fd -p 23

[MalDev Academy @MalDevAcademy]

As promised, today we released DumpBrowserSecrets a tool which extracts passwords, tokens, cookies and other data from several browsers.

https://t.co/EaswGdihdU

[Tom Dörr @tom_doerr]

Installs macOS on Proxmox VE

https://t.co/hmZ3oLgzKj

[Andrei Saygo @malwrforensics]

Found an interesting sample on @anyrun_app and did a quick analysis: https://t.co/UOBFZWrF7s
It's a fake 7-Zip installer that takes advantage of a EoP in Windows to steal ntdis.dit and SYSTEM files and copies them over to a remote share.

[Andrei Saygo @malwrforensics]

@anyrun_app Just did a quick analysis on this sample: https://t.co/UOBFZWrF7s Interesting stuff!

[Microsoft Security Response Center @msftsecresponse]

MSRC security researchers Andrei @malwrforensics and Jhilakshi @jhilakshi_ talk about how Yara, the pattern-matching Swiss knife, can be used from an AppSec/Red team approach.

Learn more: https://t.co/OAVqmUN5Ui

[Andrei Saygo @malwrforensics]

Neat way of using Yara to find vulnerabilities in source code (in some cases it works for binaries as well).

https://t.co/266hZg2LG8

#Yara #vulnerabilities #Vulnerability #BugBounty #bugbountytips

[Jan Kopriva @jk0pr]

New update of the list of interesting online malware analysis sandboxes is out at https://t.co/e0f92H5UkL. I especially recommend that you check out @hatching_io Triage, which is now open to public.

[Orange Tsai 🍊 @orange_8361]

SSRF + TLS rebinding! This must be one of my favorite web hacking technique in this year!

[quarkslab @quarkslab]

[BLOG] A Deep Dive Into Samsung's TrustZone (Part 3)
In which code execution at Exception Level 3 (EL3), the highest privileged, is achieved.
Work by @patateQbool @NeatMonster_ @lyte__ presented at BlackHat Las Vegas 2019
* includes a new bug, now fixed.
https://t.co/gdvESyubiS

[elttam @elttam]

New blog post: Hacking With Environment Variables https://t.co/zsit7EWm4G

[Jesse D'Aguanno @0x30n]

macOS on Apple Silicon:
- W^X
- KIP
- PAC
- PCIe device isolation with per device IOMMU

https://t.co/w70zWyowDX

[Nicolas Grégoire @Agarri_FR]

If you ever have to exploit a Postgres SQLi, here's a resource much cooler than the usual cheat sheet you may find online 🤩 https://t.co/g4SK8cAGYl

[spaceraccoon | Eugene Lim @spaceraccoonsec]

Wrote the first public exploit of CVE-2020-10665 Docker Desktop Local Privilege Escalation! It was challenging picking up C++ as well as multiple exploit stages (hard link spraying, DLL overwrite, printer API call) but learned a lot :) https://t.co/zMcO3keyfc

[Ignis @ahakcil]

As promised, here it is - All the useful data i collected from 1.000.000.000 leaked credentials on the internet.

And yes, it includes a wordlist of most common ones too, and it has a %80 mismatch rate with rockyou.txt.

https://t.co/AoXNSydFS1

#infosec #bugbounty

[TrendAI Zero Day Initiative @thezdi]

In a guest blog, the security researcher known as d4rkn3ss details a heap overflow leading to RCE in the #NETGEAR Nighthawk R6700 router inspired by #Pwn2Own Tokyo. His write-up includes root cause and PoC. Read it at https://t.co/TA9HTzpCSl

[Yuki Chen @guhe120]

I have 16 bugs fixed in Microsoft's June security update, some are RCE, some are LPE, but this one is a little bit different, it's a buffer overflow in RPC marshalling for both RCE and LPE:
https://t.co/83VI0nTjnl

[Grzegorz Tworek @0gtweet]

cmd.exe /c "ping 127.0.0.1/../../../../../../../../../../windows/system32/calc.exe" 😂