Rafel (Rafi) Ivgi - רפאל רפי איבגי

Obviously my opinions are my own (not my employer's).

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@KayBurley Instead of asking

"How do you deal with the great conflict of having to release extremely dangerous terrorists to get back innocent civilians who were literally kiddnapped from their own home?"

You spoke as if Israel has control on hamas demands for exchange. You are be fired.

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@ItakGol Brilliant 👌

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Impressive!

Our efforts in this space led to the ability to control the DNS zones of the following ccTLDs: .ai, .bj, .bw, .ci, .gl, .ke, .kn, .lb, .ly, .mr, .ms, .mz, .ng, .py, .rw, .so, .ss, .td, .zm.

.ms
https://t.co/atz7yvy8L6
https://t.co/0cG1x2hdIv
https://t.co/kl8964FzcY

[Sam Curry @samwcyo]

New blog post on hacking EPP servers:

How we could've taken over the .ai, .bj, .bw, .ci, .gl, .ke, .kn, .lb, .ly, .mr, .ms, .mz, .ng, .pyc, .rw, .so, .ss, .td, and .zm TLDs.

https://t.co/rDDUHBEv0L

Work from @rhyselsmore, @bbuerhaus, @infosec_au, and myself.

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@danawt זה פייק רק כי לא אמרת את זה בקול רם.

זה כנראה מאוד משחרר
להגיד בדיוק את מה שאתה חושב
דרך ערוץ של פייק 🥰

[Haifei Li @HaifeiLi]

Today, Microsoft issued CVE-2023-21715, a "Microsoft Publisher Security Features Bypass Vulnerability" related to macros, which is said being exploited as ZERO-DAY IN THE WILD (!), according to https://t.co/OIVjdP6ZEZ.

I did a closer look, let's see what it really is..:) 1/n

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@_EthicalChaos_ @Hexacorn @Gi7w0rm @dr4k0nia This is a funny one:
experienceFPlentyAntivirusCapitol

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@_EthicalChaos_ @Hexacorn @Gi7w0rm @dr4k0nia 💯Code injection

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

😎

[Charlie Bromberg « Shutdown » @_nwodtuhs]

Updated the DACL abuse mindmap. New dark theme, used BloodHound's iconography, added the ACE inheritance path for Containers and Organizational Unit.

🧑‍🍳 The Hacker Recipes https://t.co/iMrOGWv63j

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Cool work 😎

[Spiky Sabra @SpikySabra]

Spotlight function in MIOB Driver - InterlockedExchangePointer - Kernel API function allows to switch pointers for functions in other drivers, and maliciously (or defensively) hooks those drivers (rootkits)
#kernel #IRP #driver #hook #maldev #offensive #security #BYOVD

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Great work 🏆

[Mor Davidovich @dec0ne]

Happy to share a new blog post I wrote about how I managed to dump LSASS undetected using a simple MiniDumpWriteDump against some of the most advanced EDRs in the market.

"It’s all in the details: The curious case of an LSASS dumper gone undetected"

https://t.co/YoDUW8LwKy

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Impressive work bypass Mac OSX security 🏆

[Wojciech Reguła @_r3ggi]

I am sharing the slides from my latest presentation: “0-Day Up Your Sleeve – Attacking macOS Environments” I gave at @nullcon
👉https://t.co/iAhbnCbKaN

[Federico Kirschbaum @fede_k]

And boom 💥 @labscon_io 💥 has started!

Nice fireside chat with Thomas Rid @C_C_Krebs @juanandres_gs

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@cyb3rops PowerSCCM SCCMSystem SCCMUp SCCMSploit BadSCCM DarkSCCM SharpSCCM SCCM#

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Gotta love them potatoes 😍

[Antonio Cocomazzi @splinter_code]

#JuicyPotato is back! 🔥

Get instant SYSTEM access if you have SeImpersonate or SeAssignPrimaryToken privs!

Checkout our new #JuicyPotatoNG 👇

https://t.co/mqB9dZ3YCA

cc @decoder_it

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

It is satisfying to see an old static field finally evolving 🎉

[Youstin @iustinBB]

I'm excited to release the first version of a context-discovery tool I've been working on. https://t.co/4d7IEAvk7z - Chameleon can automatically detect the technologies running on a host and adapt to a calibrated wordlist.
https://t.co/VIMWwvmDxm

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Amazing results 🥳🦈😎

[Project Zero Bugs @ProjectZeroBugs]

Windows: Credential Guard Domain-joined Device Public Key EoP https://t.co/kp914mjucz

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

@orange_8361 That's how they solved race conditions in the 90s 🤣🤣

[Rafel (Rafi) Ivgi - רפאל רפי איבגי @rafelivgi]

Prepare for 0-season 🫣

[Haifei Li @HaifeiLi]

I still refuse to believe we are about to see symbols for wwlib.dll / mso*.dll / vbe7.dll / winword.exe / excel.exe / powerpnt.exe / outlook.exe. That's! #NewEra

[illustria.io @illustriaio]

#trust was the foundation of #OpenSource, but it was never a safe place.
Our #biggest #Challenge is that we cannot rely on people - @illustriaio is here to #mitigate #risk. @KimZetter @maddiestone @florianroth @vxunderground https://t.co/hbE0lDWRyB