Max @_mxms

rpisec Cascadia Joined December 2010

Tweets

10K
Followers

2K
Following

412
Likes

6K

Justin Campbell @metr0

4 years ago

Fortunately this http.sys bug was an internal find by our team. This one thanks to @_mxms, @fzzyhd1 and everyone who contributes to our tooling and automation.

Trend Zero Day Initiative @thezdi

4 years ago

Fortunately this http.sys bug was an internal find by our team. This one thanks to @_mxms, @fzzyhd1 and everyone who contributes to our tooling and automation.

0 12 33 0 4

1 17 62 0 3

yrp @yrp604

5 years ago

Do you want to gamble on fat bears for charity? #FatBear2020 is here. Get your brackets in before the 30th! Details here: gist.github.com/yrp604/088bd20…

6 5 5 0 0

Download Image

These, combined with recent @WIRED reporting on Chinese espionage campaign Operation Skeleton Key targeting the Taiwan Semiconductor Industry (wired.com/story/chinese-…), suggests possibility of an explosion of new homegrown semiconductor companies in the mainland.

0 5 8 0 1

Max @_mxms

6 years ago

There’s also a format string bug going the opposite direction (when your phones name is %p%p%p...)

Frans Rosén @fransrosen

6 years ago

There’s also a format string bug going the opposite direction (when your phones name is %p%p%p...) https://t.co/QqEfSRVIot

14 205 905 0 24

Download Image

4 73 307 0 25

Download Image

yrp @yrp604

6 years ago

The second annual infosec fat bear bracket is here. Let’s gamble on some fat bears for charity. Brackets due ASAP. dpaste.de/OZ1U

8 4 11 0 1

Justin Campbell @metr0

6 years ago

It's not obvious from the advisory, but the same code runs in RDP client. The issues have been patched in both. This would have allowed a malicious server to compromise a client without any alerting behavior, or a MitM attack with a warning confirmation.

2 9 20 0 2

Justin Campbell @metr0

6 years ago

August Patch Tuesday includes fixes for our internal finds in RDP, including RCE and remote info disclosure, and affecting Win 10 latest. The team successfully built a full exploit chain using some of these, so it's likely someone else will as well. Patch and enable NLA.

Microsoft Security Response Center @msftsecresponse

6 years ago

7 174 155 0 5

1 54 91 0 4

Max @_mxms

6 years ago

Did anyone find / exploit the serialization bugs in TelOoOgram during DEF CON CTF?

0 0 2 0 0

Justin Campbell @metr0

7 years ago

We've built tools for fuzzing based on emulation of a process snapshot captured via minidump. We're considering open sourcing the tool, and I'm curious about interest level from the rest of the world. (1/3)

11 30 169 0 5

Real World CTF @RealWorldCTF

7 years ago

#RealWorldCTF2018 RPISEC has successfully pwned the Safari browser and spawned a calculator on the victim host at their first attampt during the demostration!

0 14 72 0 1

Download Image

Brandon Falk @gamozolabs

7 years ago

Vectorized Emulation: Hardware accelerated taint tracking at 2 trillion instructions per second gamozolabs.github.io/fuzzing/2018/1…

6 138 230 0 8

Gabby Roncone 🇺🇦 🇵🇸 @gabby_roncone

7 years ago

After Trump was elected, I felt unsafe. I thought that electing a man as president who has assaulted women would normalize that behavior, make assault seem inconsequential to a perpetrator. Right now, I feel worse. It’s normalized, all right.

1 2 10 0 0

Max @_mxms

7 years ago

So what’re we supposed to be doing about the ongoing calls from numbers in our area code? It’s old...

3 1 2 0 0

RPISEC @RPISEC

7 years ago

Came in 1st in CSAW 2018 Quals! Kudos to all who played, it was a tough competition this year! See y'all at finals!

CSAW Cybersecurity Games and Conference @CSAW_NYUTandon

7 years ago

Came in 1st in CSAW 2018 Quals! Kudos to all who played, it was a tough competition this year! See y'all at finals!

0 9 31 0 0

Download Image

1 8 64 0 1

Winnona 💾 @__winn

7 years ago

Honored to be speaking at the Forbes 30 under 30 cyber security panel in Boston this October! #under30summit

0 8 45 0 1

Download Image

Hawkheart @Hwakheart

7 years ago

Control my living room lightbulb: lights.hawkhe.art

2 4 9 0 0

Winnona 💾 @__winn

7 years ago

My first technical analysis piece at @RecordedFuture! TL;DR: 1) Chinese backdoor with a daily 180 second entry-window found in Tibet 2) Qinghua University infrastructure, connected to backdoor, scanning #BeltandRoad partners/ US gov entities denouncing #USChinaTradeWar.

Recorded Future @RecordedFuture

7 years ago

0 14 14 0 1

Download Image

3 3 26 0 0

Giovanni Vigna @giovanni_vigna

7 years ago

@oooverflow @defcon I think the scoreboard has been sorted backwards

0 3 26 0 0

RPISEC @RPISEC

7 years ago

Excited we got 10th at #defconctf. Thanks to @oooverflow for hosting. Congrats to all the other teams, it was a hard fought battle. See you all next year!