Vasco

[Trail of Bits @trailofbits]

We're open sourcing new Semgrep rules to detect CSRF and CORS misconfigurations in Apollo GraphQL. Check out how we used Semgrep's taint mode to make the rules more accurate and easier to write. https://t.co/8kj4R7PI8M

[Trail of Bits @trailofbits]

Earlier this week, a post detailed how we escaped Webviews in real-world misconfigured VSCode extensions. But can you escape the extensions if they are well-configured? (Hint: You can and we did.) https://t.co/5m827vUYVy

[Trail of Bits @trailofbits]

Why should you care about the security of VSCode extensions? How does compromising a local machine, stealing all local files from that machine, or even swiping your SSH keys sound? https://t.co/rlUU1MaloX

[𝗥𝗬𝗔𝗡 𝗦𝗧𝗢𝗥𝗧𝗭 @withzombies]

Very cool, @nveloso__ used Rattle to build a symbolic execution engine for EVM

https://t.co/mc8yX0inYT

[Jorge Martins @jorge_cmartins]

Successfully pwned QEMU (CVE-2020-14364) 😀

[Vasco @V_jofra]

My writeup for F-hash: https://t.co/4lLhvP10go
Using @fridadotre to memoize the results of a recursive function. #volgactf #volgactf2020 #ctf @STTSec

[Pedro Bernardo @bl4ck_pwn]

New writeup with @jorge_cmartins and @V_jofra!

Dark Honya – nullcon HackIM 2020 | @STTSec
@nullcon

https://t.co/PKlyz1GNIo

[Vasco @V_jofra]

@h2hconference @gynvael @bsdaemon @pagedout_zine You can find the plugin here: https://t.co/6HBbdiEkCh

[Vasco @V_jofra]

It was an honor to speak at @h2hconference. Thanks to all of you that attended the talk and thank you @gynvael and @bsdaemon for choosing my article as best securiy/RE in issue #1 of @pagedout_zine and giving me this opportunity. #H2HC #H2HC2019

[Centro Nacional de Cibersegurança @CNCSgovpt]

Parabéns à equipa portuguesa que terminou o European Cyber Security Challenge 2019 na 10ª posição!!

[Gynvael Coldwind @gynvael]

Paged Out! #1 is out! (and it's free to download!)
https://t.co/XT3HXa7gH3
There are 57 articles in 12 categories:
Electronics
Programming
Assembly
Reverse Engineering
Sec/Hack
Retro
File Formats
Algorithmics
SysAdmin
Radio
Phreaking
OS Internals
Enjoy! #PagedOut!

[Gynvael Coldwind @gynvael]

All articles for Paged Out! reviewed!
Now we just need to finish the PDF-making scripts :)
Expect Issue #1 to be out around DEF CON this week*.

* Subject to Murphy's law

[Vector 35 @vector35]

It's now even easier to install your favorite plugins and discover new ones thanks to the new Plugin Manager UI.

https://t.co/cs5kSunKN3

[Arlindo Oliveira @arlindooliveira]

https://t.co/28Dh4p08EE