Naomi

Exploit Dev / Reverse Engineering at @ImmersiveLabs

[Naomi @rushisec]

@notchompie

[Naomi @rushisec]

@GoatSniff @SavinTheBees my two passions brought together, beautiful

[Naomi @rushisec]

If you're interested in AI security, have a go at our prompt injection challenge on @immersivelabs. I've spent the last couple of weeks working on the frontend so hopefully it's a good user experience 😄 Let me know what you think! 🤖 #ChatGPT #ai https://t.co/ggDBWUpqfI

[Naomi @rushisec]

@GoatSniff @Hacker0x01 Grats!!

[Naomi @rushisec]

@SandboxEscaper @JenniferGCarson great picture, you're very pretty :)

[Naomi @rushisec]

@met_sec see you there!

[Naomi @rushisec]

@TransCTF defo going to try and make a few things to submit for this :)

[Mat Rollings @stealthcopter]

I had a small adventure with leaky websocket that would spit out plaintext credentials. The blog post documents the journey from discovery to disclosure.

https://t.co/j4kBzPaYZ9

[Naomi @rushisec]

@catc0n @iagox86 @jeffmcjunkin @TomSellers god i can relate to this one far too much

[Naomi @rushisec]

@misosoupysan ROP emporium is such a great resource - awesome writeup :)

[Immersive @immersivelabs]

What’s the difference between a ‘zero-day’ and ‘one-day’? Read our latest blog by Will Roberts @rushisec, Cyber Security Engineer, to see how he developed a proof of concept exploit using limited details from Microsoft. https://t.co/kPncBc5Rs9 #cybersecurity

[Naomi @rushisec]

Little weekend project, starting to learn some assembly and got around to setting up my Pi to run some ARM code. Hoping to make something slightly more complex next but it's a good start!

[Naomi @rushisec]

@joshva_jebaraj As far as I know the exploit only works out-of-the-box on desktop versions of Ubuntu, running as the systemd-network user. If you're trying it with vagrant then it may be running with Ubuntu server, which requires some extra configuration as stated in the readme

[Naomi @rushisec]

My exploit script for Nimbuspwn (CVE-2022-29799/CVE-2022-29800) has been released and is available below. Method for hitting the race is a little lazy but usually works in 12 attempts or less. Comes with a Sigma rule for blue teamers. Have fun!
https://t.co/BfmVVY9DxA

[Naomi @rushisec]

@burg0o @Essb33 But ofc this will vary a lot based on the company and area, just what I've noticed within my group!

[Naomi @rushisec]

@burg0o @Essb33 Oh for sure, I was speaking from the context of someone going into their first job. Once you've got your foot in the door with some experience I think it gets a lot easier

[Naomi @rushisec]

6 months old and still doesn’t know how to drink water 🙄

[Naomi @rushisec]

@iagox86 Much appreciated! And yeah, good shout - I’ll update the script soon so it cleans up after itself a bit more thoroughly 🙂

[Naomi @rushisec]

@iagox86 Glad to see my PoC get some use😄 Have to admit that getting to grips with D-Bus took about 5x as long as actually writing the exploit..