Zensploitation

Zen && the Art of Popping Shell ||
Inspirational exploitation quotes by @yannayli, @yoavalon, friends and foes ||

DMs are open

[Zensploitation @zensploitation]

Contributed by @0x_shaq

[Zensploitation @zensploitation]

"... but if it were it would bypass MTE"

[Zensploitation @zensploitation]

@tiraniddo https://t.co/A8fIqVYp8o

[Zensploitation @zensploitation]

The most elegant vulnerabilities I found were in unreachable code

[Zensploitation @zensploitation]

Crashing is not an option

[Zensploitation @zensploitation]

https://t.co/M2mfY6h1GR

[Zensploitation @zensploitation]

Serenity comes from a coherent data and code cache

[Zensploitation @zensploitation]

The most elegant vulnerabilities I found were in unreachable code

[Zensploitation @zensploitation]

@cveiche @daveaitel Thanks! This definitely goes in the queue. When we have enough we'll start posting again 😊 DM is open

[Zensploitation @zensploitation]

First read here:
https://t.co/lf0rCclsl4
Thanks @0xdea

[raptor @0xdea]

“… we devised an unusual method that bypasses NX and ASLR, but does not work against a full-RELRO binary. This does not mean, however, that a full-RELRO binary is not exploitable: other methods may exist, the only limit to malloc exploitation is the imagination.” — @qualys

[Zensploitation @zensploitation]

Imagine there's no stack pivot, I wonder if you can...

Inspired by https://t.co/xyJX9Naf2c

[Zensploitation @zensploitation]

Every blue teamer should pop a shell sometimes,
every red teamer ought to read SIEM alerts every once in a while

[Zensploitation @zensploitation]

Some say anyone can be this hacker one day

[Johnathan Norman @spoofyroot]

100% chance this ends up in a slide deck

[Zensploitation @zensploitation]

Horizontal scaling is key

[Zensploitation @zensploitation]

Inspired by @naehrdine
https://t.co/IMLkiOKMxh

[Jiska @naehrdine]

@is_eqv @jiska___ Don't write a fuzzer. Be the fuzzer.

(If this one isn't one for @zensploitation then I don't know...)

[Jonas L @jonasLyk]

@zensploitation It is not about the stacks you smash- but the smash you stack :)

[Zensploitation @zensploitation]

Some of the best primitives were once bugs

[Zensploitation @zensploitation]

@buherator https://t.co/3Z9tqXUhl2

[Zensploitation @zensploitation]

The intersection is not empty