Vishal (aLt)

Security Researcher

[Vishal (aLt) @v1sh41]

Agile Security Automation
#AppSec #Automation #ZAPproxy

https://t.co/qUvdnZQ6UQ

[Microsoft BlueHat @MSFTBlueHat]

Vishal Mishra (@v1sh41), Senior Security Engineer, Azure Cloud Security at Microsoft presented a talk titled "The Dusky Shark: TDS Downgrade” at #BlueHatIndia. During his talk, Vishal discussed TDS protocol and earlier exploits, existing mitigation for TDS downgrade (including preventing downgrade, role of driver in mitigation, and clients flags), and the vulnerability & exploit details for CVE-2024-0056.

[Vishal (aLt) @v1sh41]

I will be presenting my work at BluehatIndia conference! 🎉 Excited to share insights and connect with fellow professionals. Looking forward to a fruitful exchange of ideas. See you there! #BluehatIndia #CloudSecurity #Appsec #informationsecurity #Networking #Presentation

[Microsoft BlueHat @MSFTBlueHat]

📣SPEAKER ANNOUNCEMENT📣

Our next #BlueHatIndia speaker is Vishal Mishra (@v1sh41), Senior Security Engineer, Azure Cloud Security at Microsoft. Vishal will present a talk titled "The Dusky Shark: TDS Downgrade." 👏

[Microsoft BlueHat @MSFTBlueHat]

📣SPEAKER ANNOUNCEMENT📣

Our next #BlueHatIndia speaker is Vishal Mishra (@v1sh41), Senior Security Engineer, Azure Cloud Security at Microsoft. Vishal will present a talk titled "The Dusky Shark: TDS Downgrade." 👏

[Evilcry_ @Blackmond_]

How a double-free bug in WhatsApp turns to RCE https://t.co/By83bbWKpS

[renorobert @renorobertr]

VirtualBox VM escape - CVE-2018-2844 PoC exploit - https://t.co/uky6eRTc9K

[Vishal (aLt) @v1sh41]

@zaproxy Very true. 👍

[Vishal (aLt) @v1sh41]

https://t.co/JpOxvspMGc

[Zed Attack Proxy @zaproxy]

The Attack Surface Detector add-on from @secdec is now on the ZAP Marketplace https://t.co/TJcPt5tNzN

[Vishal (aLt) @v1sh41]

Patching DoublePulsar to Exploit Windows Embedded Machines https://t.co/TnXsZNjbnd

[Binni Shah @binitamshah]

Bypass Data Execution Protection (DEP) : https://t.co/Mxt9pvaQWz

[Vishal (aLt) @v1sh41]

https://t.co/ZBFX4tiAl4

[BlackArch Linux @blackarchlinux]

We've just started to build the new ISOs and OVA image. They will be released on the 1st of June. Stay tuned and just retweet this SH!T for all noobs, wannabes, pentesters and real hackers out there. #blackarch #linux #pentest #pentesting #hacktheplanet

[Omar Espino • @omespino]

#Protip need execute some command but "space" is blocked? try with:

IFS=,;`cat<<<cat,/etc/passwd`
cat$IFS/etc/passwd
cat${IFS}/etc/passwd
cat</etc/passwd
{cat,/etc/passwd} OR {ls,-las,/var} with args
X=$'cat\x20/etc/passwd'&&$X

#BugBounty #infosec

[Frida @fridadotre]

Frida 10.8 is out with brand new fork()-handling, early instrumentation of subprocesses aka. "child gating", and other goodies: https://t.co/xtVzYLNzbe

[Vishal (aLt) @v1sh41]

https://t.co/DQO9at3n9W

[The Hacker News @TheHackersNews]

Researcher publishes PoC code and explanation for a severe buffer overflow vulnerability (CVE-2018-6789) in all versions of #Exim mail transfer agent (below 4.90.1) that could allow pre-auth remote code execution.

https://t.co/2TuzrNaZSr

[Vishal (aLt) @v1sh41]

#nullcon #Nullcon2018

[James Forshaw @tiraniddo]

I do wonder if there'll be a day when there aren't stupid bugs in SAML implementations. Perhaps when no one uses SAML? https://t.co/5VwaxOKBno