admm @_admm_

Joined August 2014

Tweets

266
Followers

17
Following

360
Likes

1K

Trail of Bits @trailofbits

4 months ago

WebAuthn extensions transform passkeys from simple authentication to cryptographic powerhouses. The prf extension enables key derivation while largeBlob lets authenticators store sensitive data—expanding security possibilities beyond just logins. trailofbits.info/cryptography-b…

0 5 21 2K 12

Sarper⚡ @sarperavci

7 months ago

Just launched CTF Search with 24k+ CTF writeups, covering everything from web exploitation to reverse engineering. Check it out! ctfsearch.hackmap.win

23 318 1K 65K 1K

Download Image

Netmux @netmux

7 months ago

Absolutely fantastic read! The first book in years I couldn’t put down til I was finished. Thanks @bquintero and the founding @virustotal team!

1 12 81 8K 24

Download Image

Matteo Rizzo @_MatteoRizzo

7 months ago

github.com/google/securit… Our newest research project is finally public! We can load malicious microcode on Zen1-Zen4 CPUs!

13 285 820 116K 268

Binni Shah @binitamshah

7 months ago

Your laptop was stolen. It’s running Windows 11, fully up-to-date, device encryption (BitLocker) and Secure Boot enabled. Your data is safe, right? Think again! This software-only attack grabs your encryption key : neodyme.io/en/blog/bitloc… credits @Neodyme

7 164 624 60K 481

Download Image

Akshay 🚀 @akshay_pachaar

9 months ago

Turn any GitHub repository into LLM-ready text! Simply replace "hub" with "ingest" in a GitHub URL and receive a prompt-friendly text ingest for LLMs. Gitingest is 100% open-source and provides: - Directory structure - A brief summary of the project - The entire content as…

55 341 3K 189K 4K

Download Video

Hossam @0xHossam

9 months ago

Just dropped my latest paper on kernel callbacks in Windows. It breaks down key internals and explores how red teamers can exploit them and how developers can use them. Check it out here: bit.ly/404QKA4 #redteam #windows

3 57 224 17K 184

Download Image

0xor0ne @0xor0ne

10 months ago

Abusing the BPF infrastructure to bypass Linux kernel isolation technique cs.brown.edu/~vpk/papers/ep… #Linux #cybersecurity

0 62 277 16K 134

Download Image

Eli @elikaski

10 months ago

I wrote an article about known attacks on Elliptic Curve Cryptography, check it out! github.com/elikaski/ECC_A…

6 129 398 37K 306

Ptrace Security GmbH @ptracesecurity

10 months ago

Container Hardening Process hardenedlinux.org/blog/2024-10-1…

0 4 5 1K 4

Austen Allred @Austen

12 months ago

John Mulaney getting on stage and mercilessly mocking everyone at Salesforce’s Dreamforce conference is one of the funniest things I’ve ever read

404 7K 78K 5.4M 10K

Download Image

Simone Margaritelli @evilsocket

12 months ago

Heap exploitation, glibc internals and nifty tricks. blog.quarkslab.com/heap-exploitat…

0 38 152 16K 116

Alex Matrosov @matrosov

12 months ago

Non-production cryptographic keys are used widely in the industry, and some vendors have the mindset that if it’s not leaked, it’s not a problem. It’s never happened, right? Check out our new REsearch on Supermicro BMC, which shows a new vulnerability in Root of Trust validation

BINARLY🔬 @binarly_io

12 months ago

0 18 23 9K 2

0 5 16 3K 1

Linux Kernel Security @linkersec

12 months ago

Slides and recording for a talk that covers the SLUB allocator internals and explains how common Slab shaping approaches work for exploiting Slab memory corruption bugs.

Andrey Konovalov @andreyknvl

12 months ago

Slides and recording for a talk that covers the SLUB allocator internals and explains how common Slab shaping approaches work for exploiting Slab memory corruption bugs.

2 82 255 32K 173

Download Image

0 14 89 9K 32

Francisco Falcon @fdfalcon

a year ago

CVE-2024-41928: VM escape in FreeBSD's bhyve hypervisor via TPM device passthrough, by @Synacktiv freebsd.org/security/advis…

1 24 77 9K 25

Brandon Miller @zznop_

a year ago

For those into UEFI firmware reverse engineering - we released a blog post last week that you might be enjoy. binary.ninja/2024/08/23/uef…

3 89 340 22K 194

Binni Shah @binitamshah

a year ago

SSHamble : Unexpected Exposures in SSH : github.com/runZeroInc/ssh… It includes : *Interesting attacks against authentication *Post-session authentication attacks *Pre-authentication state transitions *Authentication timing analysis *Post-session enumeration

0 16 57 12K 51

Download Image

Jason Kint @jason_kint

a year ago

wow. an amazing 325 page google strategy document quietly unsealed buried in google antitrust docket. It's gonna take a long thread but I have pulled out the gems. It's from 2017 planning, no doubt Google will just say these were only ideas but many will look very familiar. /1

59 1K 5K 1.2M 7K

Download Image

Gunnar Haslinger @GHaslinger

a year ago

Attention IT Pros! The Microsoft UEFI CA, which SecureBoot relies on, will expire on Monday October 19, 2026, after 15 years of validity. Mark this date in your calendar. Devices require a Firmware/DB update; otherwise, stop booting. 🔒#WindowsSecurity support.microsoft.com/en-us/topic/kb…

13 210 524 83K 480

Download Image

Tom Warren @tomwarren

a year ago

there is no fix for Intel’s crashing 13th and 14th Gen CPUs — any damage is permanent. If you have a degraded CPU then a microcode update isn’t going to help theverge.com/2024/7/26/2420…