psycomoto (@psycomoto06) header
psycomoto (@psycomoto06) profile picture

I have psychomotor problems.

Singapore
Joined November 2007
Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)Photo by psycomoto (@psycomoto06)
Imhex : A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM : github.com/WerWolv/ImHex credits @WerWolv
17
454
16
1,697
Reverse RDP – The Path Not Taken research.checkpoint.com/2020…
8
21
“This feature should be easy. It’s just a little bit of code, right?” —How to spot a non-developer.
23
85
13
362
TIL that Heartbleed is technically an RCE (well, at least heap corrpution) on architectures where `sizeof(int) == 2`. Learned this the fun way by questioning my 6502 build of OpenSSL for finding Heartbleed!
3
17
69
psycomoto retweeted
Counterpoint: talk to any enterprise security team or half of infosec. They totally overestimate the security of iphones and have no clue how many parties have access to lists of 0-days
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
3
3
5
psycomoto retweeted
[PoC] CVE-2019-11932 Whatsapp 2.19.216 Remote Code Execution 1. set the listner ip (nc -lvp 5555) 2. run ./exploit and save the content to .gif 3. exploit.gif file and send it as Document with WhatsApp to another WhatsApp user github.com/dorkerdevil/CVE-2… github.com/awakened1712/CVE-…
13
676
25
1,390
The better you get at something, the lower you rate your own skill level, because you're continually raising your idea of what 'good' is. If you used to think you were pretty good, and now you think you've got a long way to go, then congratulations, you‘ve learned something!
4
66
3
240
lecturer: all i know is C. i can't keep up with all these new languages me: what a phony. i'd never want to stop learning ~ 5 years later ~ coworker: we're going to start using containers, so- me: you're making me learn CONTAINERS now? seriously? "cOnTaInErS". give me a break
27
180
22
2,016
This is super badass and helpful. Cheat sheet for all the IDAPython APIs for IDA Pro for both versions 7.x and 6.x. (7.0 is when the APIs changed.)
A fancy IDAPython cheat sheet, with SVG github.com/inforion/idapytho…
21
88
Debug registers in production A11 iPhones allow full-featured kernel debugging bugs.chromium.org/p/project-…
9
172
19
603
psycomoto retweeted
When someone goes on Linkedin to brag about passing XYZ certification and posts: - Exam report including their full name, ID, etc - Picture of "labbing" with a braindump clearly displayed on their laptop screen ...is pretty much like wearing an internet "kick me" sign
15
6
107
I am very excited myself - partially because I will have achieved peak keynote: Keynoting about offensive security more than a year after not doing it any more :-)
We are very excited that @halvarflake will be the keynote speaker for #OffensiveCon20!
4
13
84
Google has discovered a flaw in a Chromebook security feature which allows owners to press their device’s power button to initiate U2F 2FA. twib.in/l/gEoA4jMRXeG6 via @InfoSecHotSpot
1
6
5
LastPass could leak the last used credentials due to a cache not being updated. This was because you can bypass the tab credential cache being populated by including the login form in an unexpected way!
lastpass: bypassing do_popupregister() leaks credentials from previous site bugs.chromium.org/p/project-…
21
335
30
737
i keep hearing that 7 round google/ms interviews are designed to hire "the best". i knew a dude who got halfway through an ms interview, said "i dont think i want to do this anymore" and then walked out of the room. that, there, is the best developer.
66
378
41
3,546
On an unrelated note, Apple is very difficult for outside researchers to work with. Several people, including myself, have given up on trying to help because we’re ignored completely. It’s like talking to a brick wall, eventually one of you will give up. (Hint: not the wall)
4
16
109
Cybersecurity attacks can cripple small businesses that aren't prepared. TechRepublic's Karen Roby talks with a security expert about ransomware, phishing attacks, and inadequate IT defense plans. twib.in/l/EBE9eKz9yXX5 via @InfoSecHotSpot
1
1
psycomoto retweeted
Aren't most Bug Bounty programs just Black Box Pentests which are paid on a per finding basis?
10
5
69
OMG all 3 teams got this wrong in @defcon hacker jeopardy. Answers were 21, 22, and 25.
127
121
118
731