Kirill Efimov @byte89

github.com/kirill89 Israel Joined January 2012

Tweets

358
Followers

152
Following

346
Likes

721

Kirill Efimov @byte89

3 years ago

Apple knows how to sell stuff. You buy watches for $500, it has annoying metallic clip which scratches your laptop. You buy a clipless band for additional $100.

2 0 1 0 0

Kirill Efimov @byte89

3 years ago

Dear @Hacker0x01, in my experience you have the worst support team ever!

0 0 1 0 0

Kirill Efimov @byte89

3 years ago

Morning hack

1 0 4 0 0

Download Image

OMG C# is the best! Since C# 8.0 you can write ``` using var file = new System.IO.StreamWriter("myFile.txt"); // code ``` Instead of ``` using (var file = new System.IO.StreamWriter("myFile.txt")) { // code } ``` No crazy nesting anymore ❤️

1 0 0 0 0

Snyk @snyksec

3 years ago

⚠️ We recently discovered over 200 malicious packages in the #npm registry. In case you missed it, @byte89 shared the findings and insights of the targeted attacks aimed at businesses and corporations that Snyk was able to detect. snyk.co/ueDK3

0 4 8 0 0

Snyk @snyksec

3 years ago

Got C/C++ on your mind? 🧠 Check out this post by @byte89, where he takes a look at how directory traversal vulnerabilities work on web servers written on C/C++, as well as how to prevent them. #CPP snyk.co/uesgU

0 2 13 0 0

Liran Tal | 🤖 Hacking MCP Servers @liran_tal

3 years ago

This article isn't about typosquatting or benign "malicious" modules. It's about disclosing the underlying security research and its findings. A really great write-up by Kirill Efimov (@byte89) and the work done by @snyksec's security research team

0 1 2 0 0

Snyk @snyksec

3 years ago

🚨 A malicious actor targeting a still unknown company is using an internal #JS package "gxm-reference-web-auth-server". If your company uses this package, make sure to inform your #AppSec team. More info here. 👇 #npm #JavaScript snyk.co/uewZH

1 11 19 0 0

Aviad @_0xffd

3 years ago

A short time ago, we started supporting C/CPP here at @snyksec :) 🦮 So we created a non-intimidating introductory to C/CPP vulnerabilities and exploitation (while using a lot of Harry Potter refs UwU) Check it out! snyk.io/blog/unintimid… @snyksec

0 1 3 0 0

Kirill Efimov @byte89

3 years ago

Spring4Shell exploit for Glassfish and Payara by @snyksec team github.com/CalumHutton/CV… 💪 #Spring4Shell #java #CyberSecurity

0 1 1 0 1

Snyk @snyksec

3 years ago

We 💜 Capture the Flag (CTF) challenges. That's why we're thrilled to host a hands-on #CTF 101 workshop! Join us on Apr. 28 to learn how to solve your first CTF challenge (with live support). Tag someone who'd be great at it. Register here! ⬇️ snyk.co/uescx

0 6 9 0 1

Snyk @snyksec

3 years ago

🌍 Living in a C/C++ world? Check out this post by @byte89, where he takes a look at how directory traversal vulnerabilities work on web servers written on C/C++, as well as how to prevent them. #CPP snyk.co/uesgU

0 4 5 0 1

Kirill Efimov @byte89

3 years ago

Read my post about new directory traversal vulnerabilities in popular C and #CPP web servers! snyk.io/blog/exploring… All CVEs from the post are discovered by @snyksec research team 💪

0 1 6 0 0

Kirill Efimov @byte89

3 years ago

Hey #Java folks, I have another PoC for today. This time it is CVE-2022-22963 – remote code execution in org.springframework.cloud:spring-cloud-function-core github.com/Kirill89/CVE-2…

0 1 5 0 1

Kirill Efimov @byte89

3 years ago

Yet another #Spring4Shell proof of concept – simplified and explained in simple terms: github.com/Kirill89/CVE-2…

0 0 2 0 1

Aviad @_0xffd

4 years ago

My writeup on visibly invisible malicious npm packages is out! I invite you to (not 👹) see how such an attack can compromise your systems (and yes - your devs are targeted first) @snyksec snyk.io/blog/visibly-i…