Dave Vieira-Kurz

🇧🇷 Full-time Security Ninja since 2007. I have Shuriken throwing stars in my tool chain. 🇩🇪

[Dave Vieira-Kurz @secalert]

In my web security training I often get asked for multi context payloads. This is the one I've created and learned to love in the past 10 years. Try yourself with @owasp_juiceshop by @bkimminich #bugbounty #hacking #juiceshop #owasp #hackerone #Security #WordPress #number23

[Dave Vieira-Kurz @secalert]

@intigriti My first critical zero-days, publicly disclosed responsibly, date back to 2006: an RFI in a leading payment/billing firm and an RCE in the top domain & server management portal of the time.

[Dave Vieira-Kurz @secalert]

How often do you use ChatGPT and alike weekly?
#ChatGPT #OpenAI

[Dave Vieira-Kurz @secalert]

@MameHaze exactly :)

[LiveOverflow 🔴 @LiveOverflow]

During a recent code review I noticed something in the VSCode Language Server JSONRPC implementation that made my brain tingle.
Why not investigate this on stream? Maybe we find nothing, maybe we find something useful.

https://t.co/X3ezcY4Uq3

[Johnny Fishcake @johnnyspandex]

DroppedConnection - a fake VPN server that captures credentials and executes code via the Cisco AnyConnect client.

https://t.co/X8IlRj8BIt

[Dave Vieira-Kurz @secalert]

@harshbothra_ 2007

[Dave Vieira-Kurz @secalert]

@CristiVlad25 %27%20or%202005%21%3D2006%2B--%2B

[Dave Vieira-Kurz @secalert]

@coder_rc Well put :D

[Dave Vieira-Kurz @secalert]

@hakluke take pictures of dangerous wild animals with 90mm. and only 10 ft away.

[Dave Vieira-Kurz @secalert]

@Agarri_FR Yeah. Imagine one types in the URI, has a typo and identifies "you have an error in your syntax" error-based sql injection :D

[Dave Vieira-Kurz @secalert]

@alosdev I am proud of @alosdev to be part of those awesome individuals.

[Dave Vieira-Kurz @secalert]

@akamai_research 1. Trust your instincts
2. Keep focused
3. Be patient
4. Read a lot
5. Don't wait for the next rainy weekend, start now!

[Dave Vieira-Kurz @secalert]

@taviso Wait a second. Let me start numega SoftICE on my Windows 98 machine. 😂

[Dave Vieira-Kurz @secalert]

@hexpwn NSA is listening 📶

[Dave Vieira-Kurz @secalert]

@HackenProof RCE using multibyte character to bypass their protection.

[Ollie Whitehouse @ollieatnowhere]

A prototype @Burp_Suite extension for Enterprise/Pro using the new Montoya API. Leverages the Google Safe Browsing API to check that any URLs in the enumerated site map aren't known to be malicious.

Help detect those watering holes!

Code 👇
https://t.co/TO02ZJ1uAL

[1/2]

[Dave Vieira-Kurz @secalert]

@novasecio my brain and instincts

[Dave Vieira-Kurz @secalert]

@kyREcon So many wonderful memories with my beloved combo in the early 2000s:
W32Dasm (+Bratpatch), numega SoftICE, hiew, PEiD, LordPE.
#reverseengineering #warez #reversing

[Dave Vieira-Kurz @secalert]

@SEKTOR7net de_dust2 5v5

[Tim Blazytko @mr_phrazer]

New blog post and updated #binaryninja plugin: "Statistical Analysis to Detect Uncommon Code" We use statistics to identify obfuscation in an #Anticheat, a mobile DRM, a #Windows kernel module & malware.

Link: https://t.co/AxDgMwgxmT

Code: https://t.co/wWPTnvSflh