Grzegorz Zieliński

Security Consultant at Nettitude, UK.

Loves pentesting, RE and everything low level

[Gynvael Coldwind @gynvael]

So an AMD engineer and 2 Google engineers walk into a bar... and write an article about how "Hello World" in #Python works.
The article turns out to be 26 pages. From Python, through C, WinAPI/Kernel, font rendering, to GPU.
Enjoy!
https://t.co/rH5l9M9ARe
https://t.co/QOeJR5UfTY

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Introducing Native macOS Implants to PoshC2!

PoshC2 can now be used in a macOS environment for all your Command & Control needs🍎by @l0gan54k.

https://t.co/fEO22fxKzK

[LRQA Cyber Labs @LRQA_Cyber_Labs]

Check out Part 3 of our VM detection series!

This months technique works by detecting the presence of the Hyper-V RAW network protocol. It's written by @gsuberland.

https://t.co/BNuJTcvTY6

[Grzegorz Zieliński @sleepunderflow]

@agrover112 @windowsinsider Admittedly no clue. Could be that updating Windows to build 21337 (dev channel) is enough, might require also running `wsl --update`. Could be though that there is no other way than reinstalling WSL altogether. Still haven't seen any official announcement so don't know.

[Grzegorz Zieliński @sleepunderflow]

Did I miss the announcement of WSL GUI support? Its working out of the box on a fresh install of Windows insider build 21337. Got too excited during installation to take a screenshot 😅. @windowsinsider

[Grzegorz Zieliński @sleepunderflow]

Cleaner screenshot from wsl --install on a second device

[Lukasz Olejnik @lukOlejnik]

My privacy analysis of web browser/w3c Magnetometer sensor, the ability of websites to read magnetic field around the user. Does it facilitate leaks, and what are the risks? https://t.co/JkcKnAfBIO

[Brandon Azad @_bazad]

I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: https://t.co/bmXwdzWywU

[Yarden Shafir @yarden_shafir]

Noticed that twitter is being weird and making it look like this only has the link to part 2, so here's the link to part 1 again, hopefully with a pic this time:
https://t.co/lawE8RB40k

[Yarden Shafir @yarden_shafir]

The WinDbg data model is awesome and still being ignored by way too many people! So I wrote a guide for using it, hoping it would change your debugging experience the same way it changed mine:
https://t.co/lawE8RB40k
https://t.co/YBg10nTQ2n

[Gynvael Coldwind @gynvael]

The next Express.js web security challenge has arrived!
(Level 4)
https://t.co/QSk5kLWivp
Best of luck! :)

P.S. You don't need to know previous levels to have fun with this one.
Some tags: #Expressjs #Nodejs #JavaScript #CTF #Hacking #Infosec #Wargames #OhMy

[Gynvael Coldwind @gynvael]

Another Express.js web security challenge! (Level 3)
https://t.co/csHOyuo0il
The code is very short - can you still find the solution?

Same tags: #Expressjs #Nodejs #JavaScript #OhMy

[Gynvael Coldwind @gynvael]

Here's Level 2 of the Express.js web security challenge :)
https://t.co/p4LIKWlTAH
Good luck!

Some tags: #Expressjs #Nodejs #JavaScript #OhMy

[Gynvael Coldwind @gynvael]

Bored and looking for a 5 minute web security challenge?
http://35.204.139.205:5000/