nkx

mobile security

[nkx @nek0x_]

@joseadelos2005 Háblame

[nkx @nek0x_]

@liinx_x hablame

[nkx @nek0x_]

@m_angeelees hablame

[nkx @nek0x_]

@luciajmgr La tiene todavía?

[nkx @nek0x_]

@carolinetambien @isabelcazo La tienes todavía?

[Hackiit @hackiit_ugr]

¡Queremos dar la enhorabuena a nuestro compañero @nek0x_ por obtener la certificación "Burp Suite Certified Practicioner" otorgada por PortSwigger!

---

We would like to congratulate our teammate @nek0x_ for obtaining the BSCP certification awarded by PortSwigger!

[celeste @vmfunc]

this is how modern day security researchers look like

[nkx @nek0x_]

@francidellamora u crazy

[DiegoAltF4 @Diego_AltF4]

A bit late, but here's my cheap PoC for CVE-2023-4911 (Looney Tunables). I hope you like it 💪 https://t.co/RRMC9WlldE

[0xor0ne @0xor0ne]

Learning the basics of Linux kernel exploitation
Excellent series by @k3170Makan

Debugging with QEMU: https://t.co/MFkoXhjCXP
Stack Overflows: https://t.co/E6meVjl5ub
RIP control: https://t.co/mIdgQs4F0f

#cybersecurity #infosec #Linux #kernel

[5pider @C5pider]

The Havoc Framework 0.6 Hierophant Green

- stack duplication
- refactored/rewrote indirect syscalls
- proxy library loading
- random order module loading.
- x86 demon implants.
- cross process arch injection
- AMSI/ETW patching using Hardware breakpoints

https://t.co/WomyArlECm

[hypr @hyprdude]

part 2 of my latest blog post covering the heap overflow I found in MiniDLNA (CVE-2023-33476) is up! this one focuses on the exploit dev process used to get remote code execution and pop a shell. exploits included :D
https://t.co/0s8ENPMCUK

[Juan Antonio @sikumy]

HelloUuuUuUuUUu, nuevo artiQLAZOoOoOoO

En este caso, el compañero @Txhaka_ nos trae su review de la certificación de Burp Suite, el BSCP.

Enjoy it!

https://t.co/2buaRRCInr

[Josewice7 @Josewice7]

Hi guys, these past weeks I have been understanding how serialization and data type comparisons works in PHP and how to exploit these vulnerabilities. Here is the first post followed by one or two more to come!

https://t.co/bvnG0bx1Uq

[Juan Antonio @sikumy]

Después de un mini parón, vuelven los artiQLAZOS

En este caso, @neekoox nos enseña como bypasear el AMSI a través de la función AmsiScanBuffer.

Spoiler: esta es la forma en la que Evil-WinRM lo hace 😳

Enjoy it!

https://t.co/z5BpdBWp8f

[rootsecdev @rootsecdev]

Here is a free course on Offensive Software Exploitation. Content looks very decent and hands on. 👇 https://t.co/HJQPDq9WC3

[HackGit @hack_git]

Chaos-Rootkit is a x64 kernel-mode rootkit that can hide processes or elevate their privileges, work on the latest Windows versions .

https://t.co/h2DLEuE1Qd

#Pentesting #redteam #CyberSecurity #infosec

[nkx @nek0x_]

patching amsiscanbuffer function to bypass amsi.

https://t.co/KClSfxo9hh

#infosec #redteam

[Octoberfest7 @Octoberfest73]

I'm sure i'm late to the party, but MSFT put a user-writable folder in $path (%HOMEPATH%\Appdata\Local\Microsoft\
WindowsApps)??? OneDrive tries to load a non-existant DLL (Microsoft.UI.Xaml.XamlTypeInfo.dll) making for an easy user-level hijack #malware #redteam #cybersecurity

[Alexandre Borges @ale_sp_brazil]

Malware Analysis Series has exactly 450 pages so far:

MAS_1: https://t.co/CqJcmTzygA
MAS_2: https://t.co/49XWAoYgb9
MAS_3: https://t.co/eVgSSSzBhQ
MAS_4: https://t.co/5b3zrZMZXk
MAS_5: https://t.co/JMqvn2wK67
MAS_6: https://t.co/7WKSDijTIb
MAS_7: https://t.co/V3rw0gSZfu