Julien Deudon @initbrain

Information Security, Open-Source Intelligence, Python and SDR addict. initbrain.fr France Joined May 2011

Tweets

6K
Followers

545
Following

852
Likes

1K

Thomas Roccia 🤘 @fr0gger_

3 years ago

After a few months of work, we are pleased to announce the new version of Unprotect: your catalog of malware evasion techniques!🤩🧵👇 #unprotectproject #infosec #malware #cybersecurity @DarkCoderSc unprotect.it

8 111 223 0 58

Download Image

Dmytro Oleksiuk 💥 [email protected] @d_olex

3 years ago

Periodic reminder: you don't have to buy skid's crap to get access to #UEFI firmware implant technology. You can download my FOSS & battle-tested UEFI boot backdoor for free, it has much more use-cases and deployment options than #BlackLotus github.com/Cr4sh/s6_pcie_…

0 27 95 0 30

Renaud Lifchitz ⠵ @nono2357

3 years ago

#Google veut vous défendre du Dark Web et ouvre son #VPN à tous ! 01net.com/actualites/goo…

3 1 1 993 0

payloadartist @payloadartist

3 years ago

S3 Bucket Subdomain Takeover On assets.npmjs.com That Could Lead To A Supply Chain Attack shockwave.cloud/blog/subdomain… By @naglinagli #bugbountytips #bugbounty #infosec #cybersecurity

1 21 64 9K 21

Download Image

Alex Matrosov @matrosov

3 years ago

⛓️This is a very important industry-wide disclosure since many vendors are affected by the bug in the TPM reference code and specification. "The attacker can also overwrite protected data in the TPM firmware. This may lead to a crash or arbitrary code execution ..." --@fdfalcon

CISA Cyber @CISACyber

3 years ago

0 25 46 58K 8

2 62 111 41K 14

Lior⚡ @LiorOnAI

3 years ago

Amazon recently released a model that outperforms GPT-3.5 by 16% while being 784x smaller. This was achieved by generating intermediate reasoning steps for prompting demonstrations called chain-of-thought prompting. Paper: arxiv.org/abs/2302.00923 Code: github.com/amazon-science…

49 518 3K 379K 927

Download Image

Orange Cyberdefense France @OrangeCyberFR

3 years ago

Adoptée par le @Europarl_FR, la Directive #NIS2 (Network and Information Systems Directive) vient d’être publiée au Journal Officiel. Les États membres disposent de 21 mois pour transposer la directive au sein de leur droit national. Explications. orangecyberdefense.com/fr/insights/bl…

0 2 4 719 0

an0n @an0n_r0

3 years ago

detecting EDR services remotely without admin privs. indicators: - installed services: [MS-LSAT] LsarLookupNames() - running processes: named pipes (there are some characteristic to EDRs) needs some more testing and cleanup before release, but looks like promising.

21 226 811 191K 228

Download Image

Schneier Blog @schneierblog

3 years ago

Hacked Cellebrite and MSAB Software Released dlvr.it/Sgy7YB

1 17 28 12K 3

Sam Curry @samwcyo

3 years ago

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012. To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

75 1K 5K 0 914

Download Image

cts🌸 @gf_256

3 years ago

OMG WTF

145 1K 9K 0 1K

Download Image

Charlie Miller @0xcharlie

3 years ago

This is interesting research. There is an internet hosted app service that mobile apps talk to that allow the mobile app to do the things the mobile app is allowed to do, like remote start the car. This research points out authentication/authorization issues with this service

Sam Curry @samwcyo

3 years ago

200 4K 13K 0 3K

Download Image

1 21 42 0 7

dmnk.bsky.social @domenuk

3 years ago

We'll present how to emulate basebands next week at @CanSecWest Together with @Digital_Cold @nSinusR (if the international travel gods allow it) secwest.net/csw22presentat…

0 6 27 0 1

nSinus-R (@[email protected]) @nSinusR

3 years ago

Happy to announce the release of swSIM and swICC by Tomasz Lisowski, two open source repositories to enable SIM card emulation: github.com/tomasz-lisowsk…, github.com/tomasz-lisowsk…. Among others, we attached the emulator to a real phone via SIMTrace2 and interact with test networks!

25 358 1K 0 347

Download Image

Swissky @pentest_swissky

3 years ago

Reverse engineering Glasgow’s subway tickets by Ryan Murphy link.medium.com/oh9TIQ9K5ub

1 3 7 0 1

0xor0ne @0xor0ne

3 years ago

Bypass read-out protection (RDP) of STMicroelectronics STM32F1 series. Nice write up if you're interested in hacking microcontrollers. (credits Marc Schink and Johannes Obermaier) blog.zapb.de/stm32f1-except… #stm #hacking #microcontroller #infosec #cybersecurity #iot #embedded

0 29 98 0 26

Download Image

0xor0ne @0xor0ne

3 years ago

Memory Readout protection bypass on Nordic nRF52840 by @LimitedResults (2020) Cool writeup series if you are interested in microcontrollers security Part 1: limitedresults.com/2020/06/nrf52-… Part 2: limitedresults.com/2020/06/nrf52-… #embedded #iot #infosec #cybersecurity #nordic

0 43 104 0 27

Download Image

CERT Orange Cyberdefense @CERTCyberdef

3 years ago

htmLawed #CVE-2022-35914 (used by #GLPI) RCE vulnerability found by @OrangeCyberFR pentester @M4yFly is now massively exploited in the wild. We advise you upgrade ASAP to 9.5.9 or 10.0.3 glpi-project.org/security-updat…

0 4 8 0 0

Andy Nguyen @theflow0

3 years ago

The exFAT vulnerability used in the latest PS4 jailbreak was discovered by me, of course. hackerone.com/reports/1340942

54 160 1K 0 63

P1 Security @p1security

5 years ago

P1 Security is happy to open-source a new project that aggregates several public sources into consolidated datasets of MCC-MNC, MSISDN prefixes, ISPC and geographic information: github.com/P1sec/MCC_MNC