Crypt0s @Crypt0s

Application security guy who dabbles in radios, networking, protocols…pretty much anything anyone puts in front of me to hack! github.com/Crypt0s Maryland, USA Joined July 2009

Tweets

9K
Followers

2K
Following

907
Likes

2K

Cathal Mc Daid @mcdaidc

2 years ago

1/12 It has been confirmed that the #Taurus interception was done via “a non-secure line”. Below is my opinion of one way in which it *might* have been done, taking into account the situation and #Russia's previous history. Essentially it involves using #SS7 interception. 🧵

11 106 340 120K 301

Download Image

stacksmashing @ghidraninja

2 years ago

Lenovo X1 Carbon Bitlocker Key Sniffing any% Speedrun (42.9 seconds)

61 835 4K 553K 1K

Download Video

an0n @an0n_r0

2 years ago

OST cannot be stopped. Here is a technique we tested internally 9 months ago: blocking EDR telemetry by leveraging the Windows Filtering Platform. Considered it so evil that we didn't publish it that time. It was pointless, now here it is by @netero_1010: github.com/netero1010/EDR…

14 274 880 125K 531

s1zz @s1zzzz

2 years ago

Discovered and exploited an arbitrary file delete vulnerability that lead to SYSTEM level privileges. Thanks to the goat @filip_dragovic.

7 29 162 21K 38

Download Image

Crypt0s @Crypt0s

2 years ago

0 0 1 87 0

Download Image

Samir @SBousseaden

2 years ago

interesting recent UAC bypass method zcgonvh.com/post/Advanced_…

2 70 214 41K 75

Download Image

Crypt0s @Crypt0s

2 years ago

The best thing about generative AI is that I hear far far less about Web3 bullshit

0 0 3 137 0

Crypt0s @Crypt0s

2 years ago

Are we really not supposed to double space after a period anymore???????

3 0 1 199 0

dragosr @dragosr

2 years ago

Red, Blue, and Purple LDAP Queries. Quite useful. politoinc.com/post/ldap-quer…

0 4 9 2K 2

Crypt0s @Crypt0s

2 years ago

Very cool explanation of CANbus theft technique

0 0 0 172 1

Dirk-jan @_dirkjan

2 years ago

New blog: Obtaining Domain Admin from Azure AD by abusing Cloud Kerberos Trust I teased this a bit during my Windows Hello talks, now found some time to write about this interesting technique. Also contains defenses and detection opportunities. dirkjanm.io/obtaining-doma…

8 334 781 91K 236

Crypt0s @Crypt0s

2 years ago

A certificate reseller bypassed the HTTP verification of the ACME cert protocol by using a remote code injection in ACME.sh to write their own When called out they are surprised Pikachu and say they didn’t know what an RCE was before this. 😬

Ryan Castellucci @ryancdotorg

2 years ago

8 59 282 74K 57

0 0 0 102 0

sophie @netcapgirl

2 years ago

29 886 7K 538K 293

Download Image

Mike Ryan @mpeg4codec

2 years ago

@cybergibbons I'd be pretty interested see how it fares with my new SDR Bluetooth sniffer and a bladeRF. Can it perform all-channel sniffing in real time? Benchmark with ice9-bluetooth -s -f /dev/urandom github.com/mikeryan/ice9-…

1 1 3 167 3

Crypt0s @Crypt0s

2 years ago

It’s like nobody has ever tried to execute a docker container inside of an existing network namespace before

0 0 0 87 0

It's FOSS @itsfoss2

2 years ago

Clean Windows using Linux 😛

38 129 1K 60K 14

Download Image

KF @d0tslash

2 years ago

"Espressif ESP32: Bypassing Encrypted Secure Boot (CVE-2020-13629)" raelize.com/blog/espressif…

2 3 7 850 0

Crypt0s @Crypt0s

2 years ago

Not for a hot minute tho right? Like part of fuzzing could be the AI can generate the test harness but that’s a far cry from current “coding ability” of AI I’ve seen so far. And web is such a hot mess of different stuff… Maybe in 2-3 years?