https://t.co/41EtihxSNx
It's been well over 20 days to say a single f... word on the hackerone report I have with them.
@Hacker0x01, @TMobile when can I publicly disclose?
Here is why NetNTLMv1 should be disabled in prod networks ASAP. Besides cracking the hash back to NTLM (and then forging Silver Tickets) is straightforward, there is also a lesser known but immediate relay attack path by removing the MIC and doing RBCD abuse. Demo in screenshots.
We are excited to announce our friend @corg_e will be the new manager of vx-underground merchandise.
In the following days (or weeks?) we will have a new e-commerce domain.
tl;dr kawaii merchandise, or something
I have like 50 RCE bugs on this BB target. But EVERY time I have submitted a bug to this company it's a dup.
So I'm conditioned to not submit them.
I think bug bounties are creating some type of bystander effect...
It’s like I always say: “These sequence diagrams aren’t going to animate themselves!”
CVE-2021-1732 (win32k kernel type confusion -> OOB-R/W)
(Based on https://t.co/EmpEzw3nyq)