Testman @_notation

The name was well thought out, the tweets were not. Joined August 2020

Tweets

521
Followers

12
Following

288
Likes

2K

Marcel Böhme👨‍🔬 @mboehme_

4 years ago

Looking forward to a great discussion about fuzzing with @kayseesee, @metr0, and @gannimo (who is on the Mic). * When: Wednesday @ 2pm PDT * Where: ds3summit.github.io We'll each have a few minutes to introduce ourselves. slideshare.net/mboehme/ds3-fu…

0 6 17 0 5

Testman @_notation

4 years ago

I wonder if rant tags... <rant>look better like this to us.</rant> && {"rant":"look better like this to them."} 🤔😂😂 #programminghumor

0 0 0 0 0

Somdev Sangwan @s0md3v

4 years ago

If you have mistakenly pushed sensitive information, revert that commit and make that info unusable. If you just remove the info with a new commit, it stays there. removed sensitive: github.com/search?q=remov… removed API token OR removed API key github.com/search?q=remov…

6 49 174 0 44

Download Image

secret club @the_secret_club

4 years ago

Two years ago, secret club member @floesen_ reported a remote code execution flaw affecting all source engine games. It can be triggered through a Steam invite. This has yet to be patched, and Valve is preventing us from publicly disclosing it.

68 678 2K 0 146

Download Video

Trend Zero Day Initiative @thezdi

4 years ago

Success! @alisaesage also leveraged some ASCII art in her guest-to-host escape on #Parallels Desktop. She's off to the disclosure room to detail her work. #Pwn2Own

1 13 101 0 0

Download Gif

Trend Zero Day Initiative @thezdi

4 years ago

Success! @steventseeley was able to get code execution (and a reverse shell) on #Microsoft #Exchange. He's headed off to the disclosure Zoom to dish all the details of his exploit chain. #Pwn2Own

13 28 142 0 1

Download Gif

Trend Zero Day Initiative @thezdi

5 years ago

A successful #VMware #ESXi demo at #Pwn2Own is worth $150K. @_wmliang_ had 2 unauth RCEs in ESXi patched last week. Not only does he break down the details in his latest blog, he went further & wrote a full code execution exploit for one of the bugs. bit.ly/2OgdfiK

0 86 163 0 13

Trend Zero Day Initiative @thezdi

5 years ago

Looking for an unauthenticated RCE in #BIND? How about one that's been around for 15 years? An anonymous researcher submitted just that to ZDI, and @_wmliang_ has a full analysis of this now patched bug. Read the details then patch. bit.ly/2ZPIGDd

0 51 127 0 13

💾 Astr0 Baby @astr0baby

5 years ago

The latest sudo exploit PoC seems to be architecture independent - works on aarch64 just as well github.com/blasty/CVE-202… Here test against Ubuntu 20.04 aarch64

0 41 115 0 11

Download Image

Webull @WebullGlobal

5 years ago

UPDATE: GME, AMC, and KOSS are no longer restricted.

3K 13K 97K 0 524

Trend Zero Day Initiative @thezdi

5 years ago

(0day) ZDI-CAN-12671: @HexKitchen details this Windows kernel NULL pointer deref originally submitted by Marcin Wiązowski that can lead to DoS, and in rare cases, local privilege escalation. Read the details at bit.ly/39qQn8v

0 21 45 0 2

Trend Zero Day Initiative @thezdi

5 years ago

Escalating privileges through the #Linux eBPF verifier. @_wmliang_ provides the details on triggering this neat bug originally submitted to us by @Ga_ryo_. Read all about it at bit.ly/3nXOQuJ

0 49 85 0 8

Trend Zero Day Initiative @thezdi

5 years ago

Just published: 5 advisories in #SolarWinds, including 2 RCE bugs fixed in CVE-2020-14005, which has been publicly linked with #SunBurst. Other bugs are privilege escalation, info disclosure, and arbitrary file creation. zerodayinitiative.com/advisories/pub…

0 34 90 0 4

ϻг_ϻε @steventseeley

5 years ago

A story on how I gained RCE against Microsoft Exchange Online using CVE-2020-16875 and bypassed their patches twice over. Latest patch bypass is unpatched against on-premise deployments! Making Clouds Rain - Remote Code Execution in Microsoft Office 365: srcincite.io/blog/2021/01/1…

10 377 832 0 124

Trend Zero Day Initiative @thezdi

5 years ago

It's the 1st second Tuesday of 2021, which means the latest patches from #Adobe and #Microsoft are here. Join @dustin_childs as he breaks down this release, including a 0day being exploited in Windows Defender. Read all the details at bit.ly/2K7LQxU

1 17 25 0 1

Soroush Dalili @irsdl

5 years ago

You have `Less Than a Week` to nominate new web hacking techniques - please submit whatever you have found new and interesting in blogs, conferences, etc. in 2020 which are not already in the list docs.google.com/forms/d/e/1FAI…

PortSwigger Research @PortSwiggerRes

5 years ago

7 129 247 0 43

0 2 4 0 0

Cas van Cooten @chvancooten

5 years ago

Had a blast trying to get this as well as shellcode execution to work in Nim together with @ShitSecure and @byt3bl33d3r. Initial experiments in bypassing AV/EDR are successful, even for plain meterpreter shellcode 👀

S3cur3Th1sSh1t @ShitSecure

5 years ago

6 133 508 0 63

Download Image

0 20 51 0 4

R3dF09 @R3dF09

5 years ago

I just wrote a blog about CVE-2020-9971. Sandbox Escape and LPE to root in macOS/iOS. It's an interesting logic bug in launchd process when managing XPC Services. xlab.tencent.com/en/2021/01/11/…

8 100 307 0 37

Moxie Marlinspike @moxie

5 years ago

Lots of people asking how they should move their conversations to Signal today. Here's one idea, start with your existing groups by using Signal group links.

Signal @signalapp

5 years ago

Lots of people asking how they should move their conversations to Signal today. Here's one idea, start with your existing groups by using Signal group links.