Zer0C00L

Netsec dude who likes PY. Im probably making toast in your kitchen via the Internets. I have a thing for Anime. And the Power Glove. RT != Boom boom in yer room

[Zer0C00L @Zer0C00L]

@mkolsek This is awesome. Thank you.

[Mitja Kolsek @mkolsek]

A very good detailed tutorial on analyzing CVE-2019-0708 using remote kernel debugging

[Zer0C00L @Zer0C00L]

@MalwareTechBlog Will IDA 7.0 free edition work ? Or should I get binary ninja

[Brute @BRuteLogic]

Blind XSS Code https://t.co/gOiRVKdVWn

[Zer0C00L @Zer0C00L]

@ryHanson Do you know any good resources to learn that technique? Still working my way up.

[Ryan Hanson @ryHanson]

Tinkered with the RDP bug (CVE-2019-0708) this past weekend and ended up with BSOD. With a good spray, RCE should be straightforward through this vtable call

[Black Hills Information Security @BHinfoSecurity]

BHIS | Tester's Blog

Embedding Meterpreter in Android APK
by: @joff_thyer
Published: 10/15/2018

Learn more: https://t.co/cOHlVGGxYR

[Zer0C00L @Zer0C00L]

@MalwareTechBlog Now that the cat is out of the bag..

[Alisa Esage Шевченко @alisaesage]

Btw, I checked out modern RDP internals a few weeks ago. Microsoft is currently working hard on refactoring the entire Terminal Services infrastructure

[Alisa Esage Шевченко @alisaesage]

I am following the RDP 0day saga. I saw lots of PR, teasing pics and videos that imply nothing with respect to knowledge, and a few low quality publications

Thus far this is the only analysis of CVE-2019-0708 that I can recommed to my followers: https://t.co/d54Doln9Mz #BlueKeep

[Zer0C00L @Zer0C00L]

@alisaesage This writeup is excellent. I am working on my exploit dev skills and this helps with understanding a complex flaw. Soon I hope to learn how to get RCE working for this (and not share it publicly for obvious reasons).

[Florian Roth ⚡️ @cyb3rops]

I am no expert for RDP and the MS implementation.

How can NIDS/NIPS vendors, whose tweets start popping up prevent an exploitation of CVE-2019-0708 #BlueKeep if the payload is protected by TLS?

[Robert Graham @robertgraham]

So I've posted both Windows and macOS binaries (self-contained, statically linked) for scanning for CVE-2019-0708 bluekeep. Just click on the badge at the top of the readme.
https://t.co/aBA6PRkPD5

[Yago Hansen @yadox]

"The Hacker's Hardware Toolkit" has been updated twith 10 more gadgets. Get it paperback in Amazon worldwide:
https://t.co/BKk7ECrD7e

or just for free in PDF (more than 8K downloads):
https://t.co/mGwNs2Uf4i

Just waiting for including your new suggestions!

[Zer0C00L @Zer0C00L]

And then come the articles about how they "can't find good talent." Lel

[Zer0C00L @Zer0C00L]

@find_evil Which is why I've decided to work for myself instead of wasting time futzing around with red tape

[Zer0C00L @Zer0C00L]

@find_evil Which is why I've decided to work for myself instead of wasting time futzing around with red tape

[Binni Shah @binitamshah]

Let's build a Compiler (1 - 16) : https://t.co/oWFKCE0PB4

[Zer0C00L @Zer0C00L]

@malwareunicorn I get two of those a day ffs

[Binni Shah @binitamshah]

Fuzzing Papers : https://t.co/B8Lndu69Iv

[Binni Shah @binitamshah]

MSXSL.EXE AND WMIC.EXE — A Way to Proxy Code Execution : https://t.co/U93AWr2yY2 cc @hunting_threat