Alexandru "sickness" Uifalvi @_sickn3ss_

Him / He. Security Researcher & Lead Content Developer at Offensive Security. Advanced Windows Exploitation (AWE) author. @[email protected] offensive-security.com Trapped behind a keyboard. Joined June 2010

Tweets

3K
Followers

6K
Following

459
Likes

354

Trend Zero Day Initiative @thezdi

4 months ago

Outstanding! Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG used a single integer overflow to exploit #VMware ESXi - a first in #Pwn2Own history. He earns $150,000 and 15 Master of Pwn points. #P2OBerlin

2 46 279 23K 35

Download Image

Trend Zero Day Initiative @thezdi

4 months ago

Confirmed!! Dinh Ho Anh Khoa (@_l0gg) of Viettel Cyber Security combined an auth bypass and an insecure deserialization bug to exploit #Microsoft SharePoint. He earns $100,000 and 10 Master of Pwn points. #Pwn2Own #P2OBerlin

2 21 166 21K 20

Download Image

Trend Zero Day Initiative @thezdi

4 months ago

Oh my! In a #Pwn2Own first, Nguyen Hoang Thach (@hi_im_d4rkn3ss) of STARLabs SG was able to go from guest to host on #VMware ESXi. Amazing work. He's off to the disclosure room to provide the details. #P2OBerlin

0 25 180 28K 7

Download Image

b33f | 🇺🇦✊ @FuzzySec

4 months ago

I'm reposting my IBM blog dealing with Lazarus and "Direct kernel object manipulation (DKOM) attacks on ETW providers" on knifecoat 🔪🧥 knifecoat.com/Posts/Direct+K…

2 42 131 15K 59

Download Image

sysadafterdark @sysadafterdark

2 years ago

Holy shit this is gold. 😂

16 89 680 63K 34

Download Image

BlueHat IL @BlueHatIL

5 months ago

Vulnerability Researcher @yarden_shafir takes the BlueHatIL stage to explore surprising ways kernel pointers can still be accessed, even with modern security measures in place. From ASLR to event logs, she dives into the creative techniques researchers use to uncover new attack…

1 33 274 70K 86

Download Image

Yarden Shafir @yarden_shafir

6 months ago

I’m not saying you definitely have to go to @BlueHatIL this year, I’m just letting you know it’s free, by the beach and I’ll be there dropping kernel pointers to anyone who asks nicely

4 23 109 15K 10

Download Image

rootsecdev @rootsecdev

a year ago

“Evading Token Protection For EntraID/M365 (2024 Edition)” by rootsecdev rootsecdev.medium.com/evading-token-…

6 118 321 42K 233

Download Image

Samuel Groß @5aelo

6 years ago

I'm very excited to share my blogpost series (including PoC code) about a remote, interactionless iPhone exploit over iMessage: googleprojectzero.blogspot.com/2020/01/remote…

21 501 1K 0 177

Alexandre Borges @ale_sp_brazil

2 years ago

To date I've already written 644 pages to help the security community and, hopefully, more articles will be released in the coming months: 9. exploitreversing.com/2024/01/03/exp… 8. exploitreversing.com/2023/04/11/exp… 7. exploitreversing.com/2023/01/05/mal… 6. exploitreversing.com/2022/11/24/mal… 5. exploitreversing.com/2022/09/14/mal… 4.…

10 291 897 73K 706

Download Image

Satoshi Tanda @standa_t

2 years ago

A write-up and new blog post on one of the Hyper-V issues I reported. Technical write up: github.com/tandasat/CVE-2… Non-technical post: tandasat.github.io/blog/2023/11/1… Case closed

Satoshi Tanda @standa_t

2 years ago

A write-up and new blog post on one of the Hyper-V issues I reported. Technical write up: github.com/tandasat/CVE-2… Non-technical post: tandasat.github.io/blog/2023/11/1… Case closed

0 6 52 82K 6

0 50 153 35K 40

Pavel Yosifovich @zodiacon

2 years ago

New course: training.trainsec.net/mastering-wind… Not completed yet, but has substantial material already.

4 42 227 30K 94

chompie @chompie1337

2 years ago

Many have asked about the process of doing security research. Mostly it's a lot of troubleshooting and getting bullied online. Join me for my new blog post which details the process of exploring an attack surface, finding 0day, and exploit dev. PoC inside securityintelligence.com/posts/critical…

16 205 807 100K 280

Orange Tsai 🍊 @orange_8361

2 years ago

When your cat knows more about Buffer Overflow than you.

Why you should have a cat @ShouldHaveCat

2 years ago

When your cat knows more about Buffer Overflow than you.

452 22K 116K 10.6M 4K

Download Video

11 95 524 66K 28

stacksmashing @ghidraninja

2 years ago

I got JTAG on the iPhone 15! 🥳

33 376 3K 407K 375

Download Image

Maddie Stone @maddiestone

2 years ago

Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬 blog.google/threat-analysi…

7 281 957 327K 226

dmnk.bsky.social @domenuk

2 years ago

Emulated full system snapshot fuzzing by Intel 👀 haunted.computer/@novafacing/11…

2 45 162 17K 46

ReactOS @reactos

2 years ago

Hello all! From now on, activity of #ReactOS Twitter will continue as usual. We got so much news and tests to share with you - stay tuned!

5 11 198 14K 2

0xor0ne @0xor0ne

2 years ago

Incorrect recover from mispredicted vzeroupper (zenbleed) Very cool research work by Tavis Ormandy (@taviso) lock.cmpxchg8b.com/zenbleed.html #amd #cybersecurity

0 31 89 10K 20

Download Image

David Weston (DWIZZZLE) @dwizzzleMSFT

2 years ago

If you are worried about LAZARUS targeting you on twitter here is a power tip. You can launch twitter in a Windows MDAG hypervisor container with a simple shortcut using this argument to MS Edge. This provides an additional layer of isolation even for a full chrome 0day chain.