red0xff

Vulnerability research at  @apple
Open Source / Offensive Security

[Ivan Krstić @radian]

🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.

[red0xff @red0xff]

Second time I complete flare-on :p, despite the busy month.

ping @RandoriSec

[red0xff @red0xff]

Hello, I will be at @hexacon_fr, come say hi ! I will be glad to discuss anything.
We are also hiring at @RandoriSec ;)

[red0xff @red0xff]

@hardwear_io @tihmstar @Phenol__

[red0xff @red0xff]

@EmmanuelOchubi1 @Ox4d5a @imfaiqu3 @GodfatherOrwa @thehackerish @theXSSrat @Blaklis_ @arth_bajpai This screenshot contains enough information for people to locate the vulnerable website (intext:"..."), if I were you, I would make sure that it's not identifiable from the image (X-AspNet-Version: 4.0.30319 and X-Powered-By: https://t.co/iazWJwEDAI in case you have any doubt)

[red0xff @red0xff]

@alexxubyte @SalahEddineBC

[red0xff @red0xff]

@Shawan_J Can you try now @Shawan_J ?

[red0xff @red0xff]

@Shawan_J Hello, my DMs are disabled? I'm checking

[Taym Haddadi @taym95]

A blog worth reading, thank @red0xff

[red0xff @red0xff]

A random idea I had that turned into a short new blog post.
(This post does not demonstrate a vulnerability, but rather a logic flaw in the execution environments of the most popular competitive programming platforms).
https://t.co/yHTWVHlSEK

[Man Yue Mo @mmolgtm]

This might be the best bug I found. Never thought I'd be writing a kernel exploit as reliable, clean and fast as a browser exploit. For a while I actually used this to root my research phone when can't be bothered to patch the rom: https://t.co/RVp5tIKDU4

[RandoriSec @RandoriSec]

Heap buffer overflow within the Netfilter subsystem of the Linux kernel (CVE-2022-34918).

ps: @metasploit module coming soon.

https://t.co/pDUnelBuCy

#netfilter #0day

[Hexacon @hexacon_fr]

Hajime! We are glad to announce our second ring0 sponsor!

🙏 Thank you @RandoriSec for helping us to gather the infosec community in Paris

⛩️ To find out more about RandoriSec, visit their website at https://t.co/BG5BUezL85

#HEXACON2022

[HyperDbg @HyperDbg]

Here are 11 reasons why we should use #HyperDbg, the differences between HyperDbg and #WinDbg, and how HyperDbg will change our debugging/reversing journey.

A thread (24 tweets) 🧵:

[Davy Douhine @ddouhine]

Just checked the latest #metasploit modules and seen this.

💪💪💪 @red0xff

https://t.co/Jop08JT4kW

[RandoriSec @RandoriSec]

Today is a great day ! @red0xff is joining us as a reverser 🔬
Welcome on board !

[red0xff @red0xff]

@moyix @Rode0day Been using these as cool random hostnames.
https://t.co/GbPNkFSmba
Chrome seems to hate that, thinks it's a new computer when the hostname gets changed (on each boot).

[red0xff @red0xff]

Just published a new article about Keccak/Sha3 (explains its steps in simple words, and explains how leaking the internal state can lead to unwanted consequences)
https://t.co/oZyvZuVJT4
Feedback is welcome (PS: I'm not a cryptographer)

[red0xff @red0xff]

@meriem_laroui Thanks a lot 😄

[red0xff @red0xff]

@Moussaabben Thanks a lot man 😊