Rob @Rogunix

Joined August 2010

Tweets

4K
Followers

1K
Following

444
Likes

6K

Josh @passthehashbrwn

8 months ago

New blog from me on using CLR customizations to improve the OPSEC of your .NET execution harness. This includes a novel AMSI bypass that I identified in 2023. By taking control of CLR assembly loads, we can load assemblies from memory with no AMSI scan. securityintelligence.com/x-force/being-…

13 149 427 55K 231

Kyle Avery @kyleavery_

2 years ago

I've been getting questions about this again recently, so I wrote a small post. Patching .NET functions from an unmanaged CLR harness: outflank.nl/blog/2024/02/0…

2 41 107 17K 38

Bobby Cooke @0xBoku

2 years ago

We just released Reflective Call Stack Detections and Evasions! This was co-authored by our @XForce Red intern Dylan Tran @d_tranman! Dylan is wicked smart and it was fun working with him! Check it out!🥷 securityintelligence.com/x-force/reflec…

15 155 386 91K 148

doar-e @doar_e

2 years ago

New blogpost by @0vercl0k: "Competing in Pwn2Own ICS 2022 Miami: Exploiting a zero click remote memory corruption in ICONICS Genesis64" doar-e.github.io/blog/2023/05/0…

2 40 98 11K 18

Download Gif

eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33

2 years ago

Wrote a blog post for my company on how we implement obfuscation for our C# post-exploitation arsenal. Discussing some detection opportunities and our ways around them. Special thx to @Flangvik for his video on SharpCollection, which is our pipelines base r-tec.net/r-tec-blog-net…

7 157 400 53K 159

Daniel @VirtualAllocEx

2 years ago

Ready to rock! The last few months have definitely been a journey from high to low for me. I challenged myself once again by creating this workshop for @RedTeamVillage_ at @defcon 31 and presenting my biggest project yet to the #infosec community. I hope it is useful and a…

3 17 65 17K 26

b33f | 🇺🇦✊ @FuzzySec

2 years ago

I have posted the slides for the #BlackHat talk @chompie1337 and I gave yesterday -> Close encounters of the advanced persistent kind: Leveraging rootkits for post-exploitation github.com/FuzzySecurity/…

16 241 682 105K 184

Download Image

Ricardo Narvaja @ricnar456

2 years ago

Lo prometido es deuda, el research sobre el CVE-2023-28252 ya esta publicado con su PoC junto a la explicacion detallada del reversing que hicimos con mi amigo @SolidCLT. github.com/fortra/CVE-202… Mas dificil que barrer escaleras para arriba. Ojala les sirva.

8 90 233 24K 35

Daniel @VirtualAllocEx

2 years ago

With my new blog post "Direct Syscalls: A journey from high to low" I try to explain what a syscall is, what a direct syscall is, why an attacker (red team) uses it, etc. I also try to explain how to build and understand your own shellcode dropper step by step, starting with…

14 143 320 53K 150

h0mbre @h0mbre_

3 years ago

Short write-up on baby's first UAF challenge h0mbre.github.io/PAWNYABLE_UAF_…. Post is meant to serve more as an advertisement for pawnyable.cafe/linux-kernel/. It was a great resource for me to get started on Linux Kernel exploitation. Also I need a new blog layout yikes

5 28 135 0 51

Jack Halon @jack_halon

3 years ago

Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field. Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-browser…

16 473 1K 0 629

Byungho Min @tais9

3 years ago

a beautiful write-up : CVE-2022-1786 A Journey to the Dawn blog.kylebot.net/2022/10/16/CVE…

0 8 30 0 8

Man Yue Mo @mmolgtm

3 years ago

This is probably the most complex exploit I've done so far. A UAF in Android kernel freed by kfree_rcu (introduces a delay) in a tight race + kCFI + Samsung RKP. Yet its still possible to gain arbitrary kernel RW, disable SE and root from untrusted app. github.blog/2022-06-16-the…

4 163 506 0 104

chompie @chompie1337

3 years ago

Up your security research skills: This Windows LoadLibrary port for Linux by @taviso is a great project to contribute to. You'll learn how *both* OS's work internally. Use it to fuzz Win binaries faster on Linux github.com/taviso/loadlib…

5 115 417 0 109

GitHub Security Lab @GHSecurityLab

4 years ago

Do you want to learn how to find vulnerabilities in Google Chrome? @Nosoynadiemas just released the last exercise of Fuzzing101! github.co/3s8m12H

0 140 405 0 125

Download Image

0xSha @0xsha

4 years ago

I just released more details about the recent Samba (pwn2own) vulnerability. #CVE-2021-44142. as hot 🔥 as still being reserved on Mitre. 🙃 writeup: 0xsha.io/blog/a-samba-h… PoC (level-0) : gist.github.com/0xsha/0859033e… 1/2

5 198 532 0 81

Samuel Groß @5aelo

4 years ago

Here are the slides from the "Attacking JavaScript Engines in 2022" talk by @itszn13 and myself @offensive_con. It's a high-level talk about JS, JIT, various bug classes, and typical exploitation flows but with lots of references for further digging! saelo.github.io/presentations/…

6 255 727 0 173

Chris Au @netero_1010

4 years ago

Check my first blog about alternative process injection without allocating new memory to bypass EDR. netero1010-securitylab.com/eavsion/altern…

7 144 355 0 83

Ben 'epi' Risher @epi052

4 years ago

Morning! Just pushed a new blog post that's intended to be the first in a series using LibAFL to solve Fuzzing101 exercises. I've been wanting to dig in to LibAFL for awhile and learning the library "in the open" seemed like a fun idea. epi052.gitlab.io/notes-to-self/…

3 115 303 0 91

SecureAuth @SecureAuth

4 years ago

SecureAuth #Impacket 0.9.24 is now available. Discover the new features including ways to dig deeper into #ADCS, a more hardened #SMB server and delegation features. Read the blog by @0xdeaddood: ow.ly/ZB4550GzycC #offensivehacking