straightblast

[straightblast @straight_blast]

Here is my RCE exploit code and writeup for (CVE-2021-21974) VMware ESXi OpenSLP heap-overflow discovered by @_wmliang_. Thank you again for your write-up.
[PoC] https://t.co/MCf3TV6IjH
[writeup] https://t.co/LoKlsYVyAJ

[straightblast @straight_blast]

My good friend @darkfloyd1014 and his crew will be hosting the VXcon security conference https://t.co/oIVUDegfT9 in Hong Kong 🇭🇰 this year. It will be packed with great talks. Security enthusiasts in the Asia Pacific area should go check it out.

[straightblast @straight_blast]

@saidelike All the best in your new journey!

[RyotaK @ryotkak]

I recently developed and posted about a technique called "First sequence sync", expanding @albinowax's single packet attack.

This technique allowed me to send 10,000 requests in 166ms, which breaks the packet size limitation of the single packet attack.

https://t.co/puM7hZWIlE

[Sonar Research @Sonar_Research]

🔥 XSS on any website with missing charset information? 😳

Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post:

https://t.co/Ji3V0fK5b6

#appsec #security #vulnerability

[straightblast @straight_blast]

@Rider_Host Sure

[straightblast @straight_blast]

The Delinea Secret Server auth bypass vulnerability I discovered earlier this year, that can net access to all stored secrets, has just been assigned CVE-2024-33891. Relive the story - https://t.co/9H0LzYAsh4

[CVE @CVEnew]

CVE-2024-33891 Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx. This is related to … https://t.co/zl8KFoVgh4

[straightblast @straight_blast]

@alexlauerman @riskybusiness Thanks for sharing Alex 🙏

[straightblast @straight_blast]

Here is my writeup and PoC for the AuthN/AuthZ bypass vulnerability in Delinea Secret Server I found some time ago. The patch is available, go update.
[Write up/PoC] - https://t.co/9H0LzYAsh4
[Patch Information] - https://t.co/vmuZiNupG8
[Vendor Update] - https://t.co/cpsrc0ST4L

[Atredis Partners @Atredis]

Last year, Brandon and Ali went looking for new attack surface area in Microsoft Exchange. Ultimately, they were able to crash the Exchange file scanner by simply sending an email. Read more on our blog: https://t.co/a2srsBGLIm

[Tib3rius @0xTib3rius]

Unfortunately I have to reshare this as I'm still looking for a position.

Had several good initial opportunities but in a lot of cases they were looking for someone less senior and not a web app SME.

If your company are hiring specifically web app testers, please DM me. ��

[straightblast @straight_blast]

@Switshady @_wmliang_ It is exploitable if an individual can make a packet reach the vulnerable service

[straightblast @straight_blast]

Here is my RCE exploit code and writeup for (CVE-2021-21974) VMware ESXi OpenSLP heap-overflow discovered by @_wmliang_. Thank you again for your write-up.
[PoC] https://t.co/MCf3TV6IjH
[writeup] https://t.co/LoKlsYVyAJ

[Samuel Groß @5aelo]

Here are the slides from the "Attacking JavaScript Engines in 2022" talk by @itszn13 and myself @offensive_con. It's a high-level talk about JS, JIT, various bug classes, and typical exploitation flows but with lots of references for further digging! https://t.co/DtHsLa34Da

[maxpl0it @maxpl0it]

- Use-after-frees from JIT
- CodeQL for variant analysis
- Never-before-seen exploit primitives
- Tenured heap tomfoolery

I’ve packed just about everything in this post!

[straightblast @straight_blast]

@richinseattle Congrats Rich

[straightblast @straight_blast]

@adamely I believe some countries already adopted such approach. Is there some reason why we don’t see it done (if any) in USA?

[straightblast @straight_blast]

One of my Zoom Client finding CVE-2021-34425 that I discovered when I was still with Walmart Global Tech got announced.

[CVE @CVEnew]

CVE-2021-34425 The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat’s “link preview” functionality. In versions prior to 5.7.3, if a user we... https://t.co/LyjBxH8j6w

[Ian Beer @i41nbeer]

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists,
activists and dissidents around the world. https://t.co/RYsqpTHF5j

[James Kettle @albinowax]

Just watched "Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond" - must-read research by @intruder_io's Daniel Thatcher
https://t.co/KJTnPwGOAe

[Maddie Stone @maddiestone]

✨ New Workshop! Android Exploits 101 🔥📱

I put together an introductory overview of the "shape" of modern 0-day exploit chains for Android. Hope it's helpful 😊

https://t.co/MQGHsgMpTs

[aaron @arinerron]

Here's a cool project I've been working on during my boring intro CS classes! It's heaptrace, a heap debugger that replaces addresses with symbols to help you understand a program's heap operations.
https://t.co/VMpCVbaaRd