@sleepunderflow

Security Consultant at Nettitude, UK. Loves pentesting, RE and everything low level

Joined January 2015
  • Tweets198
  • Following222
  • Followers41
10Media
Grzegorz Zieliński retweeted
Gynvael Coldwind
@gynvael11 Oct 2022
So an AMD engineer and 2 Google engineers walk into a bar... and write an article about how "Hello World" in #Python works. The article turns out to be 26 pages. From Python, through C, WinAPI/Kernel, font rendering, to GPU. Enjoy! gynvael.coldwind.pl/?lang=en… asawicki.info/news_1762_hell…
Adam Sawicki@Reg__11 Oct 2022
"Hello World under the microscope" - an article we wrote together with @gynvael and @j00ru! Originally published in issue 100 (1/2022) of the Programista magazine, now available online in Polish and English. asawicki.info/articles/Hello…
12
236
10
841
Grzegorz Zieliński retweeted
LRQA Cyber Labs@LRQA_Cyber_Labs14 Apr 2021
Introducing Native macOS Implants to PoshC2! PoshC2 can now be used in a macOS environment for all your Command & Control needs🍎by @l0gan54k. labs.nettitude.com/blog/posh…

PoshC2 - Introducing Native macOS Implants

Over the past few years, we have seen an increase in the number of macOS environments we are asked to assess. While PoshC2 has “supported” macOS by way of Python since the very early days, increasi...

lrqa.com
3
46
5
88
Grzegorz Zieliński retweeted
LRQA Cyber Labs@LRQA_Cyber_Labs7 Apr 2021
Check out Part 3 of our VM detection series! This months technique works by detecting the presence of the Hyper-V RAW network protocol. It's written by @gsuberland. labs.nettitude.com/blog/vm-d…
32
2
76
Did I miss the announcement of WSL GUI support? Its working out of the box on a fresh install of Windows insider build 21337. Got too excited during installation to take a screenshot 😅. @windowsinsider
2
1
2
more replies
1
Cleaner screenshot from wsl --install on a second device
1
Grzegorz Zieliński retweeted
Lukasz Olejnik
@lukOlejnik12 Jun 2020
My privacy analysis of web browser/w3c Magnetometer sensor, the ability of websites to read magnetic field around the user. Does it facilitate leaks, and what are the risks? blog.lukaszolejnik.com/priva…

Privacy analysis of web browser access to Magnetometer sensor

Magnetometer is a less known sensor. It equips web browsers with the ability to read the magnetic field strength using the built-in magnetometer device sensors and the W3C Magnetometer API. It might...

blog.lukaszolejnik.com
2
19
3
33
Grzegorz Zieliński retweeted
Brandon Azad@_bazad11 Jun 2020
I've compiled a summary of every original public iOS kernel exploit from app context since iOS 10, describing the high-level exploit flow to get stable kernel read/write. The trends of how these exploits have evolved over time are quite interesting: googleprojectzero.blogspot.c…

A survey of recent iOS kernel exploits

Posted by Brandon Azad, Project ZeroI recently found myself wishing for a single online reference...

projectzero.google
14
373
13
1,016
Grzegorz Zieliński retweeted
Yarden Shafir@yarden_shafir21 May 2020
Noticed that twitter is being weird and making it look like this only has the link to part 2, so here's the link to part 1 again, hopefully with a pic this time: medium.com/@yardenshafir2/wi…

WinDbg — the Fun Way: Part 1

A while ago WinDbg added support for a new debugger data model, a change that completely changed the way we can use WinDbg. No more…

medium.com
1
20
87
Grzegorz Zieliński retweeted
Yarden Shafir@yarden_shafir21 May 2020
The WinDbg data model is awesome and still being ignored by way too many people! So I wrote a guide for using it, hoping it would change your debugging experience the same way it changed mine: medium.com/@yardenshafir2/wi… medium.com/@yardenshafir2/wi…

WinDbg — the Fun Way: Part 1

A while ago WinDbg added support for a new debugger data model, a change that completely changed the way we can use WinDbg. No more…

medium.com
9
248
3
695
Grzegorz Zieliński retweeted
Gynvael Coldwind
@gynvael13 May 2020
The next Express.js web security challenge has arrived! (Level 4) challenges.gynvael.stream:50… Best of luck! :) P.S. You don't need to know previous levels to have fun with this one. Some tags: #Expressjs #Nodejs #JavaScript #CTF #Hacking #Infosec #Wargames #OhMy
Gynvael Coldwind
@gynvael9 May 2020
Another Express.js web security challenge! (Level 3) challenges.gynvael.stream:50… The code is very short - can you still find the solution? Same tags: #Expressjs #Nodejs #JavaScript #OhMy
12
19
3
77
Grzegorz Zieliński retweeted
Gynvael Coldwind
@gynvael9 May 2020
Another Express.js web security challenge! (Level 3) challenges.gynvael.stream:50… The code is very short - can you still find the solution? Same tags: #Expressjs #Nodejs #JavaScript #OhMy
Gynvael Coldwind
@gynvael5 May 2020
Here's Level 2 of the Express.js web security challenge :) challenges.gynvael.stream:50… Good luck! Some tags: #Expressjs #Nodejs #JavaScript #OhMy
14
27
4
89
Grzegorz Zieliński retweeted
Gynvael Coldwind
@gynvael5 May 2020
Here's Level 2 of the Express.js web security challenge :) challenges.gynvael.stream:50… Good luck! Some tags: #Expressjs #Nodejs #JavaScript #OhMy
Gynvael Coldwind
@gynvael1 May 2020
Bored and looking for a 5 minute web security challenge? http://35.204.139.205:5000/
16
20
1
61
Grzegorz Zieliński retweeted
Gynvael Coldwind
@gynvael1 May 2020
Bored and looking for a 5 minute web security challenge? http://35.204.139.205:5000/
25
49
6
233
Grzegorz Zieliński retweeted
Nat Friedman
@natfriedman14 Apr 2020
Today we're making GitHub free for teams of unlimited size, for private and public work. 🎉 Every developer on earth should have access to GitHub, and price shouldn't be a barrier. github.blog/2020-04-14-githu…
249
5,138
948
13,849
Load more