Tanic

Curious, breaking stuff apart, failing my way through life, opinions are of one of the aliensrrr on Omicron Persei 8, where did I put my keys?

[Gal Zror @waveburst]

After two years of research that started at @alephsecurity and ended at @CyberarkLabs, I'm very excited to present my research on attacking ISPs via layer-2 PPPoE protocol live at @defcon!!!!
#defcon #defcon30 #pppoe #ppp @CyberArk

https://t.co/xZBjTjmCtZ

[Jonathan Afek @JonathanAfek]

I am releasing some of the stuff I have been working on, on side branches as the work is not complete and still pretty raw. This is in case anyone wants to use it as is or continue to work based on this.

[Gal Zror @waveburst]

#Ruckus has confirmed six additional CVEs for my latest research. I will present new RCEs on Ruckus devices using these vulnerabilities at #defcon28 #DEFCONSafeMode

[Tanic @tzachyh]

After a long wait, my 2nd blogpost on Homograph attacks. Specifically, bypassing chrome's IDN policy.

[Aleph Research @alephsecurity]

After some delay, here's the 2nd part of our Homograph research in which we show how we bypassed browsers IDN policy and take a deep dive into Unicode definitions.

https://t.co/Ob42I9hpLd

[Gal Zror @waveburst]

#defcon teams are investing so much effort in #defcon28 safe mode and I feel so honored to be part of this year's talks. Get ready for some #ruckus :)

[Vera Mens @V3rochka]

Small @GHIDRA_RE script that colors executed instructions to ease the debug procedure. Hope soon will add regs state to it :))
https://t.co/QHnVrdx8Pj

[Jonathan Afek @JonathanAfek]

There is an open position for a senior researcher on my team (located in Herzliya). Please contact me if relevant. @alephsecurity

[Jonathan Afek @JonathanAfek]

@offensive_con has been amazing! Truly the best conf I have been to. A special thanks for having the opportunity to present the research #iOS on #QEMU that me and my team were working hard on. The slides and the code with the new features are now released. Enjoy!

[Azeria @Fox0x01]

Continuing the iOS exploit development series:

Part 1: Heap Exploit Development: https://t.co/vtvfasQlie

Part 2: Heap Overflows and the iOS Kernel Heap https://t.co/DdDynOqh2G

✨NEW: Part 3: Grooming the iOS Kernel Heap https://t.co/OA5jBgcrIM

[Infiltrate @InfiltrateCon]

#INFILTRATE20 Speaker Highlight: Jonathan Afek (@JonathanAfek) will be presenting 'Simplifying iOS Research: Booting the iOS Kernel to an
Interactive Bash Shell on QEMU' https://t.co/RPFj4KDr6R

[Swissky @pentest_swissky]

Windows / Linux Local Privilege Escalation Workshop (Materials included !) 🥳
https://t.co/7B3ZXVoFGh

[Nathan @nj_dav]

Did you know that the address '<[email protected]>[email protected]' when given to SES will send an email to [email protected]? this could lead to interesting exploit scenarios with some email parsing libraries/code https://t.co/alq065VFn5

[Florian Hansemann @CyberWarship]

Given a Pcap File, plot a network diagram displaying hosts in the network, network traffic, highlight important traffic

#infosec #pentest #redteam #blueteam
https://t.co/qHoWiQjCzW

[@[email protected] @1njection]

I wrote some automation around gophish, evilginx2, and postfix for faster phishing deployment. Looking for feedback and pull requests :D
https://t.co/Oz7A6CJTNa
https://t.co/w6ZmqDp5xY

[Jonathan Afek @JonathanAfek]

Can't wait to present the progress we've made since #BHEU at @offensive_con! tfp0, full disk mounts with our own block device driver, most of the iOS services running, ssh and a textual framebuffer. #offensivecon

[Tanic @tzachyh]

Can be really helpful indeed

[Vera Mens @V3rochka]

Ghidra Script that sets the names for missing function names by looking for relevant patterns in the binary!

Hope that will help you too :)

https://t.co/yvEFtWMiPp

[Tanic @tzachyh]

@juliocesarfort @alephsecurity BTW, this research has started at the beginning of 2019 so I didn't have some of the references that available today.

[Tanic @tzachyh]

@juliocesarfort @alephsecurity Just saw your presentation, great work! Regarding the Australian paper, I couldn't find it, do you have some reference to it by any chance? Also, the references are in the links.

[Tanic @tzachyh]

Part of my latest research, check it out:

[Aleph Research @alephsecurity]

Phishing is anyone's problem, but now it can get you in ways you didn't expect and for many users, no proper mitigation is currently available. Check it out: https://t.co/4vPNoK2X04

[💡✍️ Deine Meinung zählt – Gestalten wir Zukunft @PolitikStimme]

➦ 36C3 - SELECT code_execution FROM * USING SQLite;

»

https://t.co/xcWKS8rXrH