SeriousM 🧭

20+ years computer magican, software engineer/architect, team lead, mentor, aspiring hacker and very curious

[SeriousM 🧭 @seriousm_bbh]

Describe your daily job conversations

[SwiftOnSecurity @SwiftOnSecurity]

Lk f u wsh th msle kn wr u r

[Florian Roth ⚡️ @cyb3rops]

Interesting finding : Quick Assist
https://t.co/plcd0LxHf4

[Alisa Esage Шевченко @alisaesage]

Releasing full 2+hr video of my browser exploitation workshop from VXCON 2024: https://t.co/SBn4fMarPU

In which I show what goes inside the mind of a skilled hacker while exploiting a highly non-trivial vulnerability in v8, from zero to exploit concept.

Especially this workflow requires advanced abstract thinking, thereby emphasize the role of theoretical modeling in attacking hard zeroday research targets, which is a part of why it's fun. @zerodaytraining

[SeriousM 🧭 @seriousm_bbh]

I just read the History of Control Flow Integrity/Guard by Microsoft Research. Very interesting read!

https://t.co/D0IcBlegPJ

[SeriousM 🧭 @seriousm_bbh]

@7h3h4ckv157 Do you have a 100day Playlist or just pick as you feel?

[SeriousM 🧭 @seriousm_bbh]

@7h3h4ckv157 Do you puck them at a random order or is there a 100-day playlist?

[Bipin Jitiya @win3zz]

PoC - Privilege Escalation in Ubuntu/Kali Linux (CVE-2023-2640 and CVE-2023-32629)

Code is available at: https://t.co/uM2SfV7RIU

For more details, refer to the original research article: https://t.co/ohMVBkEXeI

[SeriousM 🧭 @seriousm_bbh]

@milan_milanovic As of late 2018, Stack Overflow (Stack Exchange) have migrated away from NetGain, instead using Kestrel's inbuilt web-socket support over HTTP/1.*

[SeriousM 🧭 @seriousm_bbh]

Oldie but goldie!

[♌DrSmoke @Dr2moke]

RT WonderHowTo "RT NullByteWht: Wi-Fi jamming is made easy with #MDK3 and #Aireplay. https://t.co/mbnSu8iicA"

[SeriousM 🧭 @seriousm_bbh]

@fedelarrocca @muse_pablo X can be such a nice place!

[SeriousM 🧭 @seriousm_bbh]

@cyb3rops So you want to tell me that retool uses google accounts for their employees? Didn't the learned from the past that, if google is funny and bans their serviceaccount, the company is just doomed ina matter of seconds?

[SeriousM 🧭 @seriousm_bbh]

@0gtweet Instead of "set | findstr..." you can just call "set NUMBER_OF_PROCESSORS" which will do the filtering on its own.

[SeriousM 🧭 @seriousm_bbh]

Can anyone help me checking my phone for malware? My phone acts funny from time to time any the battery drains suddenly sometimes. #malware #hacking #detection #devicecare

[SeriousM 🧭 @seriousm_bbh]

Step by step, well explained, thank you!

[Alee Amini🐞 @AleeAmini]

I wrote a detailed analysis of the recent Winrar vulnerability cve-2023-38831.
For those who don't exactly what happen.
This vuln has two sides: one is a programming mistake and another is a problem (or a feature :D) in ShellExecuteExW.
#vulnerability

https://t.co/TY06cceLGj

[SeriousM 🧭 @seriousm_bbh]

That's very interesting! Backups are such a underestimated source of sensitive information.
Here is the tool that makes it even easier to explore: https://t.co/NNtdg5rrnl

[Mobile Hacker @androidmalware2]

Finding backup vulnerabilities in Android apps

✅android:allowBackup="true"
https://t.co/yHoK313zmc

[Mobile Hacker @androidmalware2]

JAMBOREE

Portable all in one tool to install essential Android tools (Java, Android tools, Magisk, BurpSuit, Objection, Root Emulator, Frida etc.)
https://t.co/l9QOOY6Xw9 via @operat0r

#pentest #BugBounty #android

[SeriousM 🧭 @seriousm_bbh]

What a writeup! Prepare to spend an hour to read yet learn the content of weeks!

[0xor0ne @0xor0ne]

Excellent writeup about Linux kernel io_uring subsystem exploitation (CVE-2022-1786)

https://t.co/6kk3YEnH3Q

#hacking #Linux

[SeriousM 🧭 @seriousm_bbh]

Circumvent root detection combined with LSPosed is the way for a liberated phone usage. Thank you so much @androidmalware2

https://t.co/L2gGzfubac

[Mobile Hacker @androidmalware2]

Android Root Detection Bypass using Frida (Part 3 – OWASP Uncrackable 3)
https://t.co/fmvXuo2bo2

[SeriousM 🧭 @seriousm_bbh]

@Kostastsale A bit off topic: what tool can create such a beautiful and useful flow diagram?

[SeriousM 🧭 @seriousm_bbh]

@cyb3rops You are a source of new knowledge to me and I really like your rule files because of the nice structure. Could you please elaborate the $upx1 definitions and usage? Why the checks for filesize four times in different pe bitness settings? Thank you!

[Clandestine @akaclandestine]

GitHub - C0MPL3XDEV/Hacking-Security-Ebooks: Top 100 Hacking & Security E-Books (Free Download) https://t.co/Ek9Xi5T3Ba