SimoneC @shellcode_it

shellcode.it Italy Joined December 2015

Tweets

53
Followers

212
Following

102
Likes

134

hackerfantastic.x @hackerfantastic

4 years ago

Mining cryptocurrency with energy from the solar rays of the Sun, bouncing our packets through the ionosphere w/@Jennifer_Arcuri

13 48 229 0 28

Download Image

blasty @bl4sty

4 years ago

If you are hard at work scanning the internet for CVE-2021-41773 (apache 2.4.49 path traversal thing).. also try /icons instead of just /cgi-bin, enjoy the increased success rate. :-P

5 99 444 0 68

Mobile Security @mobilesecurity_

4 years ago

How malware gets into the App Store and why Apple can't stop that #MobileSecurity #iOSsecurity by @illusionofcha0s habr.com/ru/amp/post/58…

0 7 17 0 2

Mobile Security @mobilesecurity_

4 years ago

Out of bounds write in V8 | Tested against Samsung Internet Browser v15.0.2.47, which does not yet have Google's patch (PoC CVE-2021-30632) #MobileSecurity #AndroidSecurity by @Zeusb0x pastebin.com/wCNA6UAB

0 13 38 0 6

Bill Demirkapi @BillDemirkapi

4 years ago

Cool Windows Internals trick I found over the weekend. If you name a folder "anything.{D2035EDF-75CB-4EF1-95A7-410D9EE17170}", Explorer will crash when you try to enter that folder.

15 136 623 0 163

Airbus Security Lab @AirbusSecLab

4 years ago

Ever wondered which flags you should use for your C compiler to: - detect the maximum number of bugs or potential security problems? - enable security mitigations in binaries? - enable runtime sanitizers? We got you covered for GCC, Clang and MSVC! airbus-seclab.github.io/c-compiler-sec…

3 173 467 0 87

Download Image

Alexander Popov @a13xp0p0v

4 years ago

I've published the article covering my talk at @ZeroNights! Improving the exploit for CVE-2021-26708 in the Linux kernel to bypass LKRG a13xp0p0v.github.io/2021/08/25/lkr… Slides: a13xp0p0v.github.io/img/CVE-2021-2… PoC exploit demo video: youtube.com/watch?v=O6rsuG… Enjoy!

2 142 290 0 41

Download Image

Alex Plaskett @alexjplaskett

4 years ago

Ever wanted to exploit Windows 10 with CVE-2021-31956? Obsessive about kernel memory layouts? research.nccgroup.com/2021/08/17/cve… is now up focusing on exploit reliability, stability and detection! #windows

NCC Group Research & Technology @NCCGroupInfosec

4 years ago

2 95 229 0 37

Download Image

8 112 265 0 52

Download Gif

an0n @an0n_r0

4 years ago

Here is my PoC for exploiting the @Razer device driver installation LPE using a generic Android phone instead of a stock Razer device. gist for the gadget setup: gist.github.com/tothi/3cdec3ac… Original version using a Razer device was presented by @j0nh4t. Awesome finding, I like it.

8 271 703 0 78

Download Gif

chompie @chompie1337

4 years ago

curious how Android phones interact with embedded hardware (camera, sensors, etc) natively? libhardware tests show how it’s done. why does this matter? APTs persist (or re-exploit) as root and *not* as an individual app. it’s much harder to detect. android.googlesource.com/platform/hardw…

3 37 250 0 55

Duc Phan @flyingpassword

4 years ago

Google CTF Fullchain has been a good opportunity for me to learn PartitionAlloc and Chrome SBX. We did not solve the challenge in time, but finished it nonetheless. Find our write-up (with @ntrung03) here! ret2.life/posts/Google-C… trungnguyen1909.github.io/blog/post/GGCT…

0 25 105 0 21

Rajvardhan Agarwal @rajxnull

4 years ago

I wrote a 1day exploit for chrome CVE-2020-16040. It includes a typer hardening bypass. Works for chrome version <= 87.0.4280.88 github.com/r4j0x00/exploi…

7 236 815 0 81

Download Image

Charles @CharlesDardaman

5 years ago

Kali Linux is not a skill

78 229 2K 0 27

blackorbird @blackorbird

5 years ago

CVE-2021-1732 Exploit Windows Win32k Elevation of Privilege Vulnerability github.com/KaLendsi/CVE-2… Poc & Exp report: bbs.pediy.com/thread-266362.…

2 283 632 0 92

Download Image

John Hammond @_JohnHammond

5 years ago

Patch sudo. (Have backups prepped just in case you, you know, break everything) wget sudo.ws/dist/sudo-1.9.… tar xzvf sudo-1.9.5p2.tar.gz cd sudo-1.9.5p2 ./configure make && sudo make install bash -c "sudo --version"

11 108 323 0 28

celesian @c3l3si4n

5 years ago

Google's ReCAPTCHA will automatically fingerprint Burp Suite Proxy and raise the challenge difficulty to the maximum, making analysis of the app very irritating. To fix this, go into your Burp Suite Project Configurations and activate TLS Passthrough for google.com

9 112 318 0 61

Download Image

✿ Karen/あけみ🍍＠＊ふぁみりん🌺 @akemin_dayo

5 years ago

[UPDATE] AppSync Unified 90.0 — Massive rewrite of AppSync Unified that now fully supports all current iOS 14.x versions, while also improving the experience for all other iOS versions (even iOS 5/6!) reddit.com/r/jailbreak/co…

39 80 481 0 12

Hardik Shah @hardik05

5 years ago

do you want to know about? integer overflow integer underflow Out of bound Read Out of bound Write Double Free Use After Free Memory leaks here is the damn vulnerable c program i coded to explain AFL fuzzing in my videos: github.com/hardik05/Damn_… fuzz it using AFL and see :)

3 109 284 0 65

Chaouki Bekrar @cBekrar

6 years ago

We've confirmed exploitability of Windows Pre-Auth RDP bug (CVE-2019-0708) patched yesterday by Microsoft. Exploit works remotely, without authentication, and provides SYSTEM privileges on Windows Srv 2008, Win 7, Win 2003, XP. Enabling NLA mitigates the bug. Patch now or GFY!