oren @_oren_

Developer, Exploit Writer, and Security Researcher. Buenos Aires, Argentina Joined March 2010

Tweets

21
Followers

83
Following

470
Likes

48

Mark Baggett @MarkBaggett

4 years ago

Some time ago @_r00k_ showed a technique for moving python2 cli based buffer overflows to Python3. Today I realized you can do it with an environment variable that requires less changes to your code! Check this out! @Steph3nSims @SANSOffensive #python #Hacking #redteam

5 29 87 0 12

Download Image

Mathy Vanhoef @vanhoefm

4 years ago

I found some design and implementation flaws in Wi-Fi again. All Wi-Fi devices are affected. It was a long ~9 months embargo, over this time a lot of info has been collected and that info now available at fragattacks.com

33 1K 3K 0 390

Juliano Rizzo @julianor

4 years ago

"Most of the vulnerabilities in this advisory are memory corruptions, and despite modern protections such as ASLR, NX, and malloc hardening, memory corruptions in Exim are easy to exploit:" qualys.com/2021/05/04/21n…

0 5 20 0 0

Infiltrate @InfiltrateCon

4 years ago

SILICA 7.43 released! Check out the demo: vimeo.com/537915679 Includes Known Beacons Attack, improved Deauth Attack, and updated management of probe request MAC randomization.

0 1 1 0 0

Infiltrate @InfiltrateCon

4 years ago

We’re back… Infiltrate Speaker Series ~ featuring Raphael Rigo & his now infamous Xerox saga! The cease & desist order is lifted, are you curious what happened and why??? Join us LIVE 4/22 11am ET. Register here... infiltrate.clickmeeting.com/-attacking-xer… # of attendees are limited to 200!

0 16 18 0 0

Infiltrate @InfiltrateCon

5 years ago

1 9 10 0 0

Download Image

Hamid Kashfi @hkashfi

6 years ago

The new SILICA version is now out and really cool! It now supports spoofing SSL via the CryptoAPI ECC bug when you set up your fake AP. If you own an Apple device you might giggle at Windows users for that, until you notice you've been jacked too, via Apple's EAP CVE-2019-6203

1 3 3 0 0

Download Image

briankrebs @briankrebs

6 years ago

Sources say Microsoft on Tuesday will fix an extraordinarily scary flaw in all Windows versions, in a core cryptographic component that could be abused to spoof the source of digitally signed software. Apparently DoD & a few others got an advance patch krebsonsecurity.com/2020/01/crypti…

36 1K 2K 0 83

Mathy Vanhoef @vanhoefm

6 years ago

Slides of the #Dragonblood attack against WPA3 and EAP-pwd, given at #realworldcrypto together with @eyalr0 papers.mathyvanhoef.com/rwc2020.pdf

0 63 117 0 7

Download Image

Immunity Inc. @Immunityinc

7 years ago

NEW RELEASE: SILICA v7.37. Included in this release is a new visualization mode that is useful for both pentesters and network administrators trying to understand complex wireless environments. immunityinc.com/products/silic…

1 7 7 0 0

Download Image

Immunity Inc. @Immunityinc

7 years ago

NEW - SILICA 7.33 Release: This release includes a new Attack Tree Tab that shows scan and attack results in a centralized way. It also includes a new Network Printer Attack. The Network Probe module has also been updated. View the demo of new features: vimeo.com/270182796

0 4 2 0 0

oren @_oren_

8 years ago

Demo of the zero key krack attack in SILICA.

0 1 4 0 0

Immunity Inc. @Immunityinc

8 years ago

We have been hard at work implementing the KRACK attack on SILICA. Stay tuned for updates and releases. SILICA not in your tool kit?Ask us how you can add it - [email protected] immunityinc.com/products/silic… #wpa2 #attack #KRACK #KRACKAttacks #KRACKattack #SILICA #CyberSecurity