initstring @init_string

AT&F&C1&D2&K3%C0 https://t.co/FcLLHui5wV | https://t.co/zOit06UquA | @[email protected] Melbourne, Victoria Joined March 2017

Tweets

90
Followers

1K
Following

71
Likes

63

initstring @init_string

3 weeks ago

Drive-By Attack in Ollama Desktop v0.10.0 Found a bug in Ollama desktop GUI (not the core API) where malicious websites could hijack all private chats. Ollama crew patched it within hours. Make sure to update! Tech details, video, IoCs, and PoC here: gitlab-com.gitlab.io/gl-security/se…

0 0 0 210 0

initstring @init_string

3 years ago

A lot has happened in a year! I’ve refreshed the dynamic data sources for passphrase-wordlist and generated a new file. If you’re into cracking complex passwords, this may be for you. Enjoy! github.com/initstring/pas…

0 0 3 0 2

initstring @init_string

3 years ago

I'm not very active on here, and probably won't be on the next one either. But just in case, here's the new Mastodon profile I set up: @[email protected]

0 0 0 0 1

initstring @init_string

3 years ago

Spent some time recently formalizing our Red Team workflow at GitLab. The process is open-source, and we're sharing our issue templates to track logistics, goals, TTPs, reports, etc. about.gitlab.com/blog/2022/05/1…

1 2 6 0 2

initstring @init_string

4 years ago

I discovered a drive-by #RCE in the @gitlab Development Kit (it's now fixed). This took chaining multiple vulnerabilities and would have allowed me to remotely compromise developer machines. Details and tips to protect yourself from similar exploits here: about.gitlab.com/blog/2021/09/0…

0 7 11 0 2

initstring @init_string

4 years ago

Stealing Bitcoin w/ CSRF via Ride The Lightning + Umbrel. Thanks to the RTL devs for pushing a quick fix! Here's my write-up: initblog.com/2021/rtl-drive…

2 21 40 0 6

Download Video

initstring @init_string

5 years ago

Great finding by @Sambal0x - and a good example of why e2e encryption is important in messaging apps. :)

Richard Tan @Sambal0x

5 years ago

Great finding by @Sambal0x - and a good example of why e2e encryption is important in messaging apps. :)

1 3 14 0 2

0 1 3 0 1

initstring @init_string

5 years ago

Thanks to the @attackndefense team at @mozilla for inviting me on their blog! This is a more personal overview on the Firefox Android bug I disclosed recently.

Attack and Defense @attackndefense

5 years ago

Thanks to the @attackndefense team at @mozilla for inviting me on their blog! This is a more personal overview on the Firefox Android bug I disclosed recently.

0 1 8 0 2

0 2 6 0 1

Richard Tan @Sambal0x

5 years ago

Sharing my talk on Hacking Android Apps with Frida youtube.com/watch?v=iMNs8Y…

4 52 168 0 55

initstring @init_string

5 years ago

This is so cool, thanks @dafthack for the nomination!

strandjs - [email protected] @strandjs

5 years ago

This is so cool, thanks @dafthack for the nomination!

1 2 12 0 0

0 0 1 0 0

initstring @init_string

5 years ago

I found a few privilege escalation bugs in Google Cloud's OS Login. They've all been patched now. gitlab.com/gitlab-com/gl-…

0 55 128 0 22

Beau Bullock @dafthack

5 years ago

The 4/25 training session for my Breaching the Cloud Perimeter course has reached max capacity but don't worry... I'm teaching it again on 5/28 for FREE. New registration link is here: attendee.gotowebinar.com/register/43640…