0xecutor @0xecutor

Fuck all MAGA traitors The Internet Joined December 2018

Tweets

77
Followers

74
Following

187
Likes

164

Philippe Lagadec @decalage2

4 years ago

After testing another CVE-2021-40444 sample that works with html+cab payload on a remote web server, I can now confirm that "mhtml:" and "x-usc:" are not needed in the remote OLE URL for the exploit to work. But the double URL http:...!http:... seems required.

Philippe Lagadec @decalage2

4 years ago

8 100 229 0 35

3 43 84 0 10

0xecutor @0xecutor

4 years ago

I posted this in a few threads, so I might as well post it here. Deobfuscated js used in CVE-2021-40444 seen in the wild. #CVE #CVE202140444 #MSHTML pastebin.com/4e9LgNPe

0 0 2 0 0

0xecutor @0xecutor

4 years ago

Didn't realize that was set to private, whoops.

0xecutor @0xecutor

4 years ago

Didn't realize that was set to private, whoops.

0 1 5 0 4

0 0 0 0 0

0xecutor @0xecutor

6 years ago

#EternalBlue and SQL Too. Hybrid #fileless worm with some on disk persistence just for shits and giggles.

0 2 5 0 0

Download Image

0xecutor @0xecutor

7 years ago

Fucking Bingo

0 0 0 0 0

Ange @angealbertini

7 years ago

Hexyl - A command-line hex viewer github.com/sharkdp/hexyl/…

14 343 1K 0 89

Download Image

wu @0x558BEC

7 years ago

Decrypting EMOTET’s strings using IDAPython #EMOTET medium.com/@levwu/decrypt…

0 27 38 0 4

0xecutor @0xecutor

7 years ago

wow @twitter, @BankofAmerica. Good job insulting the threat intel community.

0 0 0 0 0

Nicolas Krassas @Dinosn

7 years ago

Cuteit - Make A Malicious IP A Bit Cuter (IP Obfuscator) kitploit.com/2019/01/cuteit…

1 50 106 0 15

0xecutor @0xecutor

7 years ago

Excellent blog on emotet backend logistics. It's easy to get lost in the endpoint rabbit hole of debugging and analysis - I love seeing stuff like this.

0 0 1 0 0

0xecutor @0xecutor

7 years ago

I hate to admit that I'm curious

briankrebs @briankrebs

7 years ago

I hate to admit that I'm curious

14 235 272 0 9

0 0 0 0 0

sshell @sshell_

7 years ago

a power plant exploding during a 911 outage in the middle of a government shutdown is very representative of the current state of affairs in america

5 17 67 0 0

Steve YARA Synapse Miller @stvemillertime

7 years ago

With one easy script, you too can "probe the U.S. power grid": github.com/zmap/zgrab github.com/nmap/nmap/blob… github.com/moki-ics/modsc…

1 5 14 0 2

AviationDE @de_aviation

7 years ago

AgentTesla User too stupid to activate TLS🤣🤣By Analyzing the network traffic you can easily find out the Email Address & corresponding Password (Base64 Encoded, easy to decode: base64decode.org) app.any.run/tasks/875c816a… @anyrun_app @abuse_ch #malware #pws #trojan

2 11 33 0 0

Download Image

Archon Security @archonsec

7 years ago

#cybersecurity #infosec #IoT VIA @McAfee_Labs IoT malware increasing alongside 4️⃣8️⃣0️⃣ threats/min More 👉 bit.ly/2ER5HfW @ChuckDBrooks @mclynd @cybersecboardrm @jbarbosapr @sarbjeetjohal @avrohomg @IIoT_World @fogoros @TheCloudand_Me @NeilCattermull @NeiraOsci

1 11 10 0 0

S⃣ A⃣ S⃣ A⃣ @gorimpthon

7 years ago

Observed #ursnif in Japan from 12/28/2018 6:00 AM (UTC). Hashes of attached doc files are the almost same as yesterday.

S⃣ A⃣ S⃣ A⃣ @gorimpthon

7 years ago

Observed #ursnif in Japan from 12/28/2018 6:00 AM (UTC). Hashes of attached doc files are the almost same as yesterday.

1 2 12 0 0

0 5 13 0 0

Didier Stevens @DidierStevens

7 years ago

New blog post "Update: XORSearch Version 1.11.2" blog.didierstevens.com/2018/12/27/upd…

0 7 16 0 2

Download Image

Binni Shah @binitamshah

7 years ago

Anti-forensic and File-less Malware : 0x00sec.org/t/anti-forensi…

0 69 148 0 11

0xecutor @0xecutor

7 years ago

#PLEAD / #BLACKTECH group is running hxxp://*.androiddatacenter.com, aggresively targetting Japanese companies. RC4 encrypted blobs from the last few samples I've gathered are all phoning home to this host owned by Xianuotec of Beijing. #MALWARE #APT

0 1 3 0 0

Download Image

Bishop Fox @bishopfox

7 years ago

This #infosec write-up from @_bl4de - "Guide to Finding and Exploiting Hidden Web Directories and Files" - is well worth your time this morning. bit.ly/2Lxu1EZ