Darren Martyn @_darrenmartyn

Professional Belligerent. хакер. Caretaker of one fluffy cat. darrenmartyn.ie On the wires Joined October 2019

Tweets

9K
Followers

1K
Following

905
Likes

2K

Darren Martyn @_darrenmartyn

3 years ago

Awesome work, using a symlink exploit in unrar to get pre-auth code exec on Zimbra (and as mentioned in the blog post, can be chained with one of my LPE's).

Simon Scannell @scannell_simon

3 years ago

Awesome work, using a symlink exploit in unrar to get pre-auth code exec on Zimbra (and as mentioned in the blog post, can be chained with one of my LPE's).

10 346 791 0 132

Download Image

0 3 16 0 4

Ryan Naraine @ryanaraine

3 years ago

This was exploited as 0day. Mitel's advisory neglects to say so (cc @maddiestone) mitel.com/en-ca/support/…

1 12 27 0 8

Darren Martyn @_darrenmartyn

3 years ago

Rumour has it you get a discount on the ransom if you subscribe to their SoundCloud.

vx-underground @vxunderground

3 years ago

Rumour has it you get a discount on the ransom if you subscribe to their SoundCloud.

9 27 112 0 9

0 0 3 0 0

Today, we are dropping this repo github.com/star-sg/NotQui… Basically all the bugs in the repo are either ignored or not fixed at all even after vendors acknowledged We hope we will not need to drop in the future Today's bugs are brought to you by @daniellimws

2 43 113 0 17

Darren Martyn @_darrenmartyn

3 years ago

Adventures in disclosure lately: - well known security product vendor: crickets, no security contact, etc. - router vendor that also does firewalls: really responsive PSIRT, surprisingly good. - some other appliance manufacturer: actually directed me to their bug bounty page?!

1 0 1 0 0

Darren Martyn @_darrenmartyn

3 years ago

When will Signal no longer require a phone number to use?

Signal @signalapp

3 years ago

When will Signal no longer require a phone number to use?

198 5K 23K 0 467

0 0 2 0 2

Darren Martyn @_darrenmartyn

3 years ago

Yet again being infuriated by another writeup that uses "inclusion" instead of "disclosure" or "reading" in the context of local files. Unless the file content is evaluated, it's not file inclusion. It's file disclosure or file reading. Thanks for coming to my Ted talk.

0 0 1 0 0

Darren Martyn @_darrenmartyn

3 years ago

Ok, this is fucking hilarious.

Rekt News @RektHQ

3 years ago

Ok, this is fucking hilarious.

6 9 61 0 2

0 0 1 0 0

Darren Martyn @_darrenmartyn

3 years ago

The liquid limit is among the most egregiously pointless, poorly thought out, completely lacking a threat model rules inflicted on us by the aviation security idiots during the US led global war on common sense.

TSA Northeast @TSA_Northeast

3 years ago

7K 467 3K 0 283

Download Image

1 1 7 0 0

Darren Martyn @_darrenmartyn

3 years ago

Scholz can shut the fuck up. We can just give Ukraine the place formerly occupied by the UK. Simples.

The Kyiv Independent @KyivIndependent

3 years ago

Scholz can shut the fuck up. We can just give Ukraine the place formerly occupied by the UK. Simples.

299 329 2K 0 23

0 0 2 0 0

Darren Martyn @_darrenmartyn

3 years ago

I'm gonna hand it to @aydinnyunuss, you may disagree with their methods, but they certainly got everyone's undivided* attention. * For about five minutes, before infosec got distracted by some other shit that's probably less fundamentally important than supply chain security.

1 1 2 0 0

Darren Martyn @_darrenmartyn

3 years ago

Fucking lol

Yunus Aydın @aydinnyunuss

3 years ago

Fucking lol

12 57 156 0 46

0 1 2 0 0

Darren Martyn @_darrenmartyn

3 years ago

The BBC/Apple dinosaur series is very, very good.

0 0 0 0 0

Darren Martyn @_darrenmartyn

3 years ago

I'm not sure which I find worse about this image: The implications Or Their absolute dogshit groupings.

0 0 0 0 0

Darren Martyn @_darrenmartyn

3 years ago

Dried and powdered oyster mushrooms. Looks like they need another go in the dehydrator, get rid of the last of the moisture for storage. This shit is powdered flavour.

0 0 4 0 0

Download Image

Amy @_amykillelea

3 years ago

@OKWildlifeDept

52 293 5K 0 121

Download Image

Oklahoma Department of Wildlife Conservation @OKWildlifeDept

3 years ago

Listen, bear spray DOES NOT work like bug spray. We would like to not have to say that again.

1K 24K 223K 0 2K

Darren Martyn @_darrenmartyn

3 years ago

Dear vendors: the more irritating it is (for me) to download your software, the less likely I am to engage in coordinated disclosure when I find bugs.