dreadl0ck @dreadcode

Tortures computers for fun and profit. Interested in network security monitoring, machine learning, Golang and Rust. Shellscript ninja. Will debug for food. github.com/dreadl0ck Amsterdam, The Netherlands Joined June 2017

Tweets

237
Followers

341
Following

1K
Likes

6K

Simone Margaritelli @evilsocket

11 months ago

Attacking UNIX Systems via CUPS, Part I evilsocket.net/2024/09/26/Att…

180 1K 4K 1.1M 2K

Craig Rowland - Agentless Linux Security @CraigHRowland

2 years ago

I'm glad everyone has discovered memory safe languages after several decades. Now can we start looking at secure package management or are we just going to import memory safe rando libs from ninja876 on Github forever?

3 7 36 4K 3

Erik Bernhardsson @bernhardsson

2 years ago

My dystopian vision of an AI-powered future is that LLMs drives down the cost of generating long text even further, and the only way for readers to keep up is to use LLMs to summarize.

Christian Keil @pronounced_kyle

2 years ago

My dystopian vision of an AI-powered future is that LLMs drives down the cost of generating long text even further, and the only way for readers to keep up is to use LLMs to summarize.

178 455 4K 567K 532

Download Image

21 63 265 63K 31

dreadl0ck @dreadcode

2 years ago

Guest: “Is that a RAM stick glued to your door?” Me: “Yes. Old memories.”

1 0 5 180 0

Download Image

Sebastian @sebastian_paul

3 years ago

Best security quote I heard this week: "Do you want to mitigate against an auditor, or against an attacker?"

29 411 2K 219K 131

dreadl0ck @dreadcode

3 years ago

Finally, a book for dealing with those rusty locks 🔒 thanks @m_ou_se

0 1 20 2K 1

Download Image

Bellingcat @bellingcat

3 years ago

Bellingcat and investigative partners @derspiegel and @the_ins_ru have discovered a hitherto secretive group of engineers involved in Russian missile strikes on Ukraine. These strikes have killed hundreds and left millions without heating or power bellingcat.com/news/uk-and-eu…

71 2K 4K 0 211

dreadl0ck @dreadcode

3 years ago

Awesome 👏 go.dev/blog/vuln

0 0 0 0 0

Simone Margaritelli @evilsocket

3 years ago

You can force any v8/Electron process to execute arbitrary js code (child_process, http, etc) by forcefully enabling and abusing the builtin debug mechanism ... here's VS Code executing Calc, but I suspect any Electron app is susceptible 🔥 it works with SIP enabled on macOS

17 194 671 0 121

Download Image

Steven Kruyswijk @kruithoph

3 years ago

@BadgeteamNL thanks for the great #MCH2022 badge - here's my Music Computing Handheld app, to be found in the Hatchery in ESP32 - Games. Happy soloing

0 4 26 0 0

Download Video

Maltego @MaltegoHQ

3 years ago

Do you know you can set up a custom Transform server in #Maltego? The #DittoTRX Transform developed by @dreadcode can be used to investigate #IDNHomographAttack and imposter domain on various websites. Learn how to set it up here: maltego.com/blog/dittotrx-…

1 2 8 0 3

Ross Anderson @rossjanderson

4 years ago

The Trojan Source vulnerability allows supply-chain attacks on software written in C, C++, Go, Java, Javascript, Python and Rust. We're releasing details after a 99-day coordinated disclosure period, and some of these compilers will be patched quickly. See lightbluetouchpaper.org/2021/11/01/tro…

19 382 817 0 123

Brendan Dolan-Gavitt @moyix

4 years ago

Wow, just realized C is turning 50 next year. Not sure how to tell students that we're learning about security problems caused by a language that's half a century old.

27 71 683 0 23

Nasko Oskov @nasko

4 years ago

Memory safety in a huge codebase is hard. We've published some work and an update on our work in the Chromium codebase - security.googleblog.com/2021/09/an-upd….

5 92 364 0 47

𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @netresec

4 years ago

We're releasing CapLoader 1.9 today! 🔁 Better detection of periodic beacons 🔍 More L7 protocols identified 🚀 Faster 🛠️ Improved filtering of flows 🔭 OSINT lookups w/ CIRCL, ThreatFox, RIPEstat etc. netresec.com/?b=2159bda

0 15 31 0 5

dreadl0ck @dreadcode

4 years ago

Ever dreamed about analysing a PCAP file properly in Maltego? Next netcap release will have a full blown Maltego integration, currently have ~200 entities, ~120 local transforms and 4 machines :) #madewithmaltego #golang #netcap

0 3 7 0 2

Download Image

dreadl0ck @dreadcode

4 years ago

Open sourced my Maltego (@MaltegoHQ) integration for @evilsocket's ditto tool and wrote a blogpost about it: dreadl0ck.net/posts/ditto-trx Happy graphical link analysis! #madewithmaltego #golang #ditto