Simon Robin

InfoSec Enthusiast. Senior Security Consultant @IOActive. Always on a learning curve, chasing the white rabbit.

[IOActive, Inc @IOActive]

Mario Ballano, Gabriel Gonzalez, Josep Pi Rodríguez, and Simon Robin, Security Consultants at IOActive, disclosed multiple vulnerabilities to Moog EXO series Cameras on June 18, 2020. Read the advisory: https://t.co/3rdrWBH5er

[IOActive, Inc @IOActive]

Mario Ballano, Gabriel Gonzalez, Josep Pi Rodríguez, and Simon Robin, Security Consultants at IOActive, disclosed multiple vulnerabilities to Verint PTZ Cameras on June 18, 2020. Read the advisory: https://t.co/riEJaiiQ41

[n00py @n00py1]

Awesome series of posts by @ipurple in regards to MS Exchange:

https://t.co/JvYu6Xr6m4
https://t.co/vJy1oAyWEb
https://t.co/ZWg0OOkC2W
https://t.co/ISnRl02GI5
https://t.co/uN2ZuYrO1e
https://t.co/Gj8kGbKaEy
https://t.co/HVF5mYkCbB

[Simon Robin @sljrobin]

@PaulWebSec Félicitations ! :)

[Google VRP (Google Bug Hunters) @GoogleVRP]

Learn how to write fuzzers for Chrome and put your vulnerability rewards on autopilot with @dor3s and @nedwilliamson: https://t.co/SuGjyMEfBk

[Maddie Stone @maddiestone]

It's finally here! I have published my Intro to Android App Reverse Engineering workshop! If you're interested in learning how to begin RE'ing Android apps (both DEX and native code), check out this workshop. #reverseengineering #android #infosec
https://t.co/8h2WjfM2T1

[Ring3API 🇺🇦 @ntlmrelay]

Windows Boot Process

[putsi @putsi]

Wrote a blog post about how to host private Burp collaborator instance. It also has some scripts to make it a bit easier and faster.
https://t.co/YQc2mbNcNg

[Binni Shah @binitamshah]

Linux (x86) Exploit Development Series : https://t.co/AnapmPt0vR

A-1 ) Classic Stack Based Buffer Overflow : https://t.co/DWvb1FSklv

A-2 ) Integer Overflow : https://t.co/RYCi3uH1xX

A-3 ) Off-By-One Vulnerability (Stack Based) : https://t.co/PmRJQlkeTn

[Malware Unicorn @malwareunicorn]

Yay RE101 and RE102 workshops are back online:
https://t.co/hxnT4iwlpp

[Gaurav Narwani @gauravnarwani97]

Hello Guys, here is my new blog post.
An interesting xss filter bypass on a web application.
Read more about it here:
https://t.co/pI278ZpOgv
There is also a Bug Bounty tip at the end of the post.
Please Subscribe to my blog!

[Emad Shanab - أبو عبد الله @Alra3ees]

Swagger API PenTest. https://t.co/bhz3pLrGa9

[Paul Sec.jpeg .exe @PaulWebSec]

#Nginx Admin's Handbook: https://t.co/wX3w3q46wg
Might be old but still a real goodie.

[stephen @_tsuro]

Here are the slides from my #Zer0con2019 talk about TurboFan (Chrome's javascript compiler).
If you have any questions, please leave a comment in the slides and I'll try to explain it in the speaker's notes.
https://t.co/G5DAt58tbn

[the_storm @the_st0rm]

And the initial docs about pyre static analysis are up :)
https://t.co/DhR0QwGnnm

#pyre /cc @OWASPLondon #python #Facebook

[Dani Kachakil @Kachakil]

My latest research, presented some days ago at #RootedCON, is live in @IOActive's blog.

In short, any malicious app without any permission can read and write all your downloads in Android (e.g. Play Store, Gmail attachments, Chrome), read metadata, etc.

https://t.co/CtO33AjDPg

[LiveOverflow 🔴 @LiveOverflow]

I never thought I would experience a XSS on Google Search. But @kinugawamasato blew my mind!

This is a video going over the difficulties of sanitizing HTML in JavaScript.

https://t.co/T61VJJEuDE

[Simon Robin @sljrobin]

@matthewhughes @dawnisabel, @Fox0x01, @HollyGraceful, @hasherezade, @pinkflawd are really talented people!

[Jobert Abma @jobertabma]

Hackers, I've built a small game that helps improve your XSS skills! It dynamically generates (increasingly more difficult) levels for you to exploit XSS vulnerabilities. No level is the same. Let me know what you think. Happy hacking! https://t.co/bch4wIOAO4 #TogetherWeHitHarder