Mad @bashfile

BadBoy Joined November 2019

Tweets

363
Followers

40
Following

822
Likes

220

lock @lockedbyte

4 years ago

I developed a Remote Code Execution PoC exploit for the Exim Use-After-Free that was recently disclosed (as part of @qualys 21Nails advisory). Tested just on Exim 4.92. PoC available: github.com/lockedbyte/CVE…

6 303 811 0 85

Download Image

Moxie Marlinspike @moxie

4 years ago

A few months ago Cellebrite announced that they would begin parsing data from Signal in their extraction tools. It seems they're not doing that very carefully. Exploiting vulnerabilities in Cellebrite's software, from an app's perspective: signal.org/blog/cellebrit…

90 2K 5K 0 325

nedwill @NedWilliamson

4 years ago

My fuzzer for the iOS kernel networking stack is now open source! You can read the implementation details here: googleprojectzero.blogspot.com/2021/04/design…

11 310 1K 0 136

Clément Labro @itm4n

4 years ago

After several weeks of work, it's finally there!🔥 Introducing PPLdump, a tool for dumping PPL processes with a Userland exploit!😈 👉Post 1: itm4n.github.io/lsass-runasppl/ 👉Post 2: blog.scrt.ch/2021/04/22/byp… 👉Tool: github.com/itm4n/PPLdump Credit goes to @tiraniddo for the technique.

13 400 742 0 117

Download Gif

blackorbird @blackorbird

4 years ago

Microsoft Office Remote Code Execution Vulnerability(CVE-2021-27059) Internet Explorer Remote Code Execution Vulnerability(CVE-2021-27085) 0day(exploit) in the Wild But no one talk about it😅 msrc.microsoft.com/update-guide/v… msrc.microsoft.com/update-guide/e…

3 190 387 0 28

Download Image

Trend Zero Day Initiative @thezdi

4 years ago

CVE-2021-20226: @_wmliang_ details this #Linux privilege escalation via io_uring originally submitted by @Ga_ryo_. The bug leads to a UAF on any file structure, which can be leveraged for LPE in the kernel. bit.ly/3vbrOEx

2 81 188 0 10

Cyber Advising @cyber_advising

4 years ago

CVE-2021-27905: Apache Solr SSRF PoC github.com/Henry4E36/Solr…

1 64 165 0 28

Download Image

doar-e @doar_e

4 years ago

New blogpost by @0vercl0k: "Reverse-engineering tcpip.sys: mechanics of a packet of the death (CVE-2021-24086)" doar-e.github.io/blog/2021/04/1…

3 222 491 0 61

Download Gif

Rajvardhan Agarwal @rajxnull

5 years ago

My exploit for sudo CVE-2021-3156 that ACTUALLY works. Tested on ubuntu 18.04 and 20.04. github.com/r4j0x00/exploi…

27 453 1K 0 166

Download Video

Lei Cao @iamelli0t

4 years ago

[New Blog] Exploiting Windows RPC to bypass CFG mitigation: analysis of CVE-2021-26411 in-the-wild sample iamelli0t.github.io/2021/04/10/RPC…

1 204 486 0 60

Download Image

Vulmon Vulnerability Feed @VulmonFeeds

5 years ago

CVE-2017-7494 Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is v... vulmon.com/vulnerabilityd… Customizable Vulnerability Alerts: alerts.vulmon.com/?utm_source=tw…

0 2 0 0 0

Vulmon Vulnerability Feed @VulmonFeeds

4 years ago

CVE-2021-27274 This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this vulnerabil... vulmon.com/vulnerabilityd…

0 1 0 0 0

Vigilance Vulnerability Alerts @vigilance_en

4 years ago

Vigil@nce #Vulnerability of ArcGIS Desktop/Pro: three vulnerabilities via Malicious File. vigilance.fr/vulnerability/… Identifiers: #CVE-2021-29096, #CVE-2021-29097, #CVE-2021-29098. #security

0 1 0 0 0

Download Image

Peter Šantavý @PSantavy

4 years ago

OpenSSL critical flaws arstechnica.com/gadgets/2021/0… openssl.org/news/secadv/20… #CVE-2021-3449 nvd.nist.gov/vuln/detail/CV… CVE-2021-3450 nvd.nist.gov/vuln/detail/CV… #OpenSSL #vulnerability #cybsercurity #cybersec #hacking

0 1 0 0 0

Ryan Naraine @ryanaraine

5 years ago

Apple 0day in-the-wild

11 200 513 0 21

Download Image

Sam Curry @samwcyo

5 years ago

1. IDOR on Apple via "X-Dsid" header allows attacker to retrieve name, credit card information, addresses, and various PII of any Apple users via DSID Bounty: $25,000 Could create a "god cookie" which had access to all Apple customers name, address, phone, and billing info.

11 150 621 0 83

Download Image

Sam Curry @samwcyo

5 years ago

2. Reflected XSS/CSRF token bypass on SecureTransport 5.4 via URL parameters Bounty: $7,000 and a comfy backpack from Axway :) Could traverse to a "CSRF debug page" which would auto-submit a request with an appended CSRF token. Also vulnerable to (limited) XSS.