psycomoto retweeted
Imhex : A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM : github.com/WerWolv/ImHex credits @WerWolv
psycomoto retweeted
Reverse RDP – The Path Not Taken research.checkpoint.com/2020…
psycomoto retweeted
“This feature should be easy. It’s just a little bit of code, right?”
—How to spot a non-developer.
psycomoto retweeted
TIL that Heartbleed is technically an RCE (well, at least heap corrpution) on architectures where `sizeof(int) == 2`. Learned this the fun way by questioning my 6502 build of OpenSSL for finding Heartbleed!
psycomoto retweeted
Counterpoint: talk to any enterprise security team or half of infosec. They totally overestimate the security of iphones and have no clue how many parties have access to lists of 0-days
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
psycomoto retweeted
[PoC] CVE-2019-11932 Whatsapp 2.19.216 Remote Code Execution
1. set the listner ip (nc -lvp 5555)
2. run ./exploit and save the content to .gif
3. exploit.gif file and send it as Document with WhatsApp to another WhatsApp user
github.com/dorkerdevil/CVE-2…
github.com/awakened1712/CVE-…
psycomoto retweeted
The better you get at something, the lower you rate your own skill level, because you're continually raising your idea of what 'good' is. If you used to think you were pretty good, and now you think you've got a long way to go, then congratulations, you‘ve learned something!
psycomoto retweeted
lecturer: all i know is C. i can't keep up with all these new languages
me: what a phony. i'd never want to stop learning
~ 5 years later ~
coworker: we're going to start using containers, so-
me: you're making me learn CONTAINERS now? seriously? "cOnTaInErS". give me a break
psycomoto retweeted
This is super badass and helpful. Cheat sheet for all the IDAPython APIs for IDA Pro for both versions 7.x and 6.x. (7.0 is when the APIs changed.)
psycomoto retweeted
Debug registers in production A11 iPhones allow full-featured kernel debugging bugs.chromium.org/p/project-…
psycomoto retweeted
When someone goes on Linkedin to brag about passing XYZ certification and posts:
- Exam report including their full name, ID, etc
- Picture of "labbing" with a braindump clearly displayed on their laptop screen
...is pretty much like wearing an internet "kick me" sign
psycomoto retweeted
I am very excited myself - partially because I will have achieved peak keynote: Keynoting about offensive security more than a year after not doing it any more :-)
We are very excited that @halvarflake will be the keynote speaker for #OffensiveCon20!
psycomoto retweeted
Google has discovered a flaw in a Chromebook security feature which allows owners to press their device’s power button to initiate U2F 2FA. twib.in/l/gEoA4jMRXeG6 via @InfoSecHotSpot
psycomoto retweeted
LastPass could leak the last used credentials due to a cache not being updated. This was because you can bypass the tab credential cache being populated by including the login form in an unexpected way!
lastpass: bypassing do_popupregister() leaks credentials from previous site bugs.chromium.org/p/project-…
psycomoto retweeted
i keep hearing that 7 round google/ms interviews are designed to hire "the best".
i knew a dude who got halfway through an ms interview, said "i dont think i want to do this anymore" and then walked out of the room.
that, there, is the best developer.
psycomoto retweeted
I don't think naming your vulnerability after a popular security tool is a good idea. Have these researchers never heard of netcat? thehackernews.com/2019/09/ne…
psycomoto retweeted
On an unrelated note, Apple is very difficult for outside researchers to work with. Several people, including myself, have given up on trying to help because we’re ignored completely. It’s like talking to a brick wall, eventually one of you will give up. (Hint: not the wall)
psycomoto retweeted
Cybersecurity attacks can cripple small businesses that aren't prepared. TechRepublic's Karen Roby talks with a security expert about ransomware, phishing attacks, and inadequate IT defense plans. twib.in/l/EBE9eKz9yXX5 via @InfoSecHotSpot
psycomoto retweeted
Aren't most Bug Bounty programs just Black Box Pentests which are paid on a per finding basis?
psycomoto retweeted
OMG all 3 teams got this wrong in @defcon hacker jeopardy. Answers were 21, 22, and 25.



























