Ricardo

Infosec curious/learner.

[Paulo Monteiro @pjgmonteiro]

PHP2Shell: understand the vulnerabilities, assess your exposure, and take action. Our technical analysis covers exploitation conditions, mitigation measures, and patching considerations.

https://t.co/Unetawn60T

#PHP2Shell @morisson @sanineties

[No Starch Press @nostarch]

Evading EDR, by Matt Hand, gives an inside look look at how Endpoint Detection & Response agents pinpoint adversary activity. Learn the ways each sensor component collects data, how to design an EDR, & how to evade one. Pre-order at 30% off w/ code GOTCHA: https://t.co/FqSeVmtGGg

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

OH: Success is like alcohol. It magnifies the person you already are.

So if you’re nice, you’ll be nicer. And if you’re an ass, you’ll become more of one.

[BSidesLisbon @Bsideslisbon]

ICYMI: tickets are available and the CFP is still open (talks and workshops). https://t.co/XopVKFv3jb We’re less than 3 months away from the con!

[BSidesLisbon @Bsideslisbon]

Video up! Securing^WAttacking Kubernetes - Vincent Ruijter @_evict https://t.co/oY9naGHKhe

[Vitor Oliveira @r0t1v]

So I finally decided to write about a cool (old) story with JBoss
https://t.co/e9G09jl3xf
/cc @henshinpt @morisson

[Warren Mercer @SecurityBeard]

@stevelord “there’s better ways to get laid than reversing micro controllers” #BSidesLisbon 😂👏🏻

[Matthew Green @matthew_d_green]

Several SSDs with hardware encryption appear to be busted. But the really terrible thing is that Bitlocker apparently relies totally on the SSD encryption if you have it. https://t.co/UGTsvnFv9Y via @ProfWoodward

[BSidesLisbon @Bsideslisbon]

Tickets are now available! Enjoy! :) https://t.co/DiM5Et2Lel

[Petr Beneš @PetrBenes]

So, I did this: https://t.co/tc0CErrVjo

If you ever wanted to write your own hypervisor, experiment with SGX, perf. counters, fiddle with CPUID or MSRs, just include this file and you're good to go. https://t.co/49ZzQXcQPW

No more tiring copy-paste-editing from Intel Manual.

[Ben Gras @bjg]

Overview and full details on #TLBleed including paper is online at https://t.co/GYHRDXImv6 cc @kavehrazavi @vu5ec @c_giuffrida @herbertbos

[Alexander Kot @Alex_S_Kot]

@MalwareJake

[Scott Bollinger @kfalconspb]

For those who say hardware 2FA tokens have no use today.

[GoSecure @GoSecure_Inc]

Our latest research blogpost is out!

Beyond XSS: Edge Side Include Injection
Abusing Caching Servers into SSRF and Client-Side Attacks
https://t.co/QPbj9hJybJ

#injection #ssrf #xss #appsec #allthatgoodstuff

[Francisco Müller Amato @famato]

Just finishing my fuzzer for MacOS Sierra authentication bypass

[STT @STTSec]

STT entre as 5 melhores equipas europeias na final do CSAW CTF 2017 #GoSTT https://t.co/JBiB0BWR6Y via @istecnico

[Sonar Research @Sonar_Research]

How to takeover Joomla! in 20 seconds via blind LDAP injection - 8 years overlooked vulnerability detected by RIPS https://t.co/30MdcVxZ2q

[WiseCrowd @WiseCrowdGlobal]

The Periodic Table of #CyberSecurity {Infographic} #infosec #CyberAttack #autonomous #IoT #Insurtech #fraud #IIoT #networksecurity #mobile

[Timo Hirvonen @TimoHirvonen]

What's in an address: understanding DDR memory mapping https://t.co/uyjErQgL44

[Peerlyst @Peerlyst]

Europe‍'s general #data protection regulation‍ policy‍.. https://t.co/xT84CSHorp