RE-Solver

Malware Analyst, Reverse Engineer, Court expert assessor, Freelance 🇮🇹

[RE-Solver @solver_re]

Linksys RE6500 Full disclosure, got 4 CVEs! 🤓
CVE-2020-35713 - Base Score 9.8 Critical
CVE-2020-35714 - Base Score 8.8 High
CVE-2020-35715 - Base Score 8.8 High
CVE-2020-35716 - Base Score 7.5 High
https://t.co/v5lF5e9kgZ

[Hunter @HunterMapping]

🚨Alert🚨 CVE-2026-24061 (CVSS 9.8): Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access.
🧐Deep Dive
:https://t.co/HZZTr0KPF4
🔥PoC :
https://t.co/NMdo35SK4a
https://t.co/s8c9pWPRHA
📊 30M+ Services are found on the https://t.co/g3tSyh13yE yearly.
🔗Hunter Link:https://t.co/jBfnZq8Il3
👇Query
HUNTER : protocol=="telnet"
📰Refer:https://t.co/MRJXrVZr5h
https://t.co/nuF42YxqqZ'
#hunterhow #infosec #infosecurity #OSINT #Vulnerability

[RE-Solver @solver_re]

@reportrai3 https://t.co/i3nr6fyWv3

[RE-Solver @solver_re]

PST_PasswordRecovery
Immediately recovers a valid password to open a "protected" Outlook PST file.

https://t.co/aIa556z6lx

#PST #passwordreovery #tool

[RE-Solver @solver_re]

TP-Link TL-R483G Industrial router Config.bin file Decrypted by using @GCHQ's CyberChef tool.
#TPlink #router #config #Openwrt #reverse_engineering #embedded #cybersecurity
https://t.co/0YF7bVmS4p

[RE-Solver @solver_re]

@Dinosn Updates: https://t.co/VXb3cla6ME

[RE-Solver @solver_re]

[ CVE-2022-40602 ] ZyXEL LTE3301-M209
- Hardcoded Superuser credentials allows to bypass web UI auth.
- Hardcoded credentials allows root access via Telnet.
ZyXEL quickly fixed the vulnerability.
#dlink #hacking #backdoor
https://t.co/P3UhtTuu3P
@securityaffairs

[RE-Solver @solver_re]

[ CVE-2022-40602 ] ZyXEL LTE3301-M209
- Hardcoded Superuser credentials allows to bypass web UI auth.
- Hardcoded credentials allows root access via Telnet.
ZyXEL quickly fixed the vulnerability.
#dlink #hacking #backdoor
https://t.co/P3UhtTuu3P
@securityaffairs

[RE-Solver @solver_re]

[D-Link DWR-921 | DWR-925 | DWR-118 ] Hardcoded web page brings up telnetd, and hardcoded backdoor credentials allows an attacker to gain root privileges.
Credentials are hidden, coz D-Link won't release any fix.
#dlink #hacking #backdoor
https://t.co/Eew0jaKJwC
@securityaffairs

[RE-Solver @solver_re]

[CVE-2022-40602] LTE3301-M209 pre-configured password vulnerability.
A similar situation also on D-Link DWR-921, DWR-925, DWR-118.
I'll publish soon a post on my blog. Stay tuned
Thank you @ZyxelNews
https://t.co/86jyYQzvIQ
@ZyXELItalia
#backdoor #vulnerability #CVE #networking

[RE-Solver @solver_re]

@USCGSoutheast R.I.P. Vitali. You will be missed.

[RE-Solver @solver_re]

D-Link won't fix the vulnerability I have reported.
They claim Lan side only, but it's not.
Waiting for the patch to be released by another (much more professional) manufacturer.
Can't publish the details yet.
#Dlink #vulnerability #0day #rce #router
https://t.co/AEQLx8bOad

[RE-Solver @solver_re]

I'm Italian, Ukrainian and such kind of Russian, too. First of all, Human.
#russianinvasion #UkraineRussia

[RE-Solver @solver_re]

@JAMESWT_MHT @PratikA62605018 @demonslay335 @Amigo_A_ @BleepinComputer @struppigel @jedisct1 @RoninDey @LawrenceAbrams @zlab_team @securityaffairs It only contains the decrypt routine. Funny to see a completely unsuitable meterpreter and spyeye tags on filescan[.]io 😑
Thx @JAMESWT_MHT for for applying a proper "safe" tag. 👍

[RE-Solver @solver_re]

DE-Cr1pT0r 🤪🤪🤪
The alpha version of the first #decryptor for the #Cr1pT0r ransomware.
Article here --> https://t.co/K1IQXNgbMH
cc: @demonslay335 @Amigo_A_ @BleepinComputer @struppigel
ccn: @jedisct1 @ronindey @LawrenceAbrams @zlab_team @securityaffairs @JAMESWT_MHT

[RE-Solver @solver_re]

@_giovannigrasso @tomasomontanari A banana plant is technically a large herb because it never forms a woody stem the way a tree does. In botanical terms banana plant is not a tree.
However, monkeys attend both.

[RE-Solver @solver_re]

Months living XSS on @TheSVP's webvideocore domain: https [ ://play.webvideocore ] .net/popplayer.php?title=%3C/title%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E #bug #XSS #CyberSecurity #fixit

[RE-Solver @solver_re]

Hey @TheSVP, isn't that a cute XSS?
It's extremely easy to fix so stop ignoring my email and face it.

[Rajvardhan Agarwal @rajxnull]

My exploit for sudo CVE-2021-3156 that ACTUALLY works. Tested on ubuntu 18.04 and 20.04.
https://t.co/d6pE5dVBWJ

[RE-Solver @solver_re]

D-Link, ADB Global rebranded: YAPL Script Language support - version 2.
Never seen/heard before.
Have I to write a decompiler/interpreter on my own?
@valerio do you know something more about?
#ADB #Router #Openwrt #reverse_engineering

[RE-Solver @solver_re]

@struppigel I've missed your videos, Karsten!👍

[RE-Solver @solver_re]

@campuscodi @malvuln

[RE-Solver @solver_re]

Update: Vodafone has fixed the issue.

[RE-Solver @solver_re]

@VodafoneIT Ricarica OneClick: for all users who have used their top up service at least once, your email remains stored and exposed forever (even if you change your mobile provider)?
No authentication required.
#vodafone #homobile #privacy