Netanel Ben Simon (@NetanelBenSimon) profile picture

Netanel Ben Simon

@NetanelBenSimon
Joined July 2018
  • Tweets47
  • Following74
  • Followers494
[CPR-Zero] Multiple vulnerabilities in OMX ALAC decoder affecting Android devices based on MediaTek and Qualcomm chipsets that can lead to LPE and RCE via malformed audio file. cpr-zero.checkpoint.com/vuln… cpr-zero.checkpoint.com/vuln… cpr-zero.checkpoint.com/vuln…
10
33
Netanel Ben Simon retweeted
Andrey Konovalov (@andreyknvl) profile picture
Andrey Konovalov@andreyknvl2 May 2022
Wrote an article about #fuzzing the Linux kernel network stack externally with #syzkaller. The article covers: 🧰 Introduction to syzkaller 💉 Using TUN/TAP for packet injection 👽 Integrating TUN/TAP via pseudo-syscalls 🏆 Showcases of found bugs xairy.io/articles/syzkaller-…
🔍 Looking for Remote Code Execution bugs in the Linux kernel

🔍 Looking for Remote Code Execution bugs in the Linux kernel

Using syzkaller to fuzz the Linux kernel network stack externally

xairy.io
5
244
2
670
Netanel Ben Simon retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_28 Apr 2022
Today Wiz Research (@shirtamari, @nirohfeld, @ronenshh and myself) published details on #ExtraReplica, a severe vulnerability that allowed anyone to access the databases of other #Azure customers. Here’s how we did it: 🧵 (1/n) wiz.io/blog/wiz-research-dis…
Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL |...

Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL |...

Wiz Research discovers a chain of critical vulnerabilities in the widely used Azure Database for PostgreSQL Flexible Server.

wiz.io
5
98
13
246
Netanel Ben Simon retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_10 Nov 2021
We (+@nirohfeld) just released the full technical blogpost regarding #ChaosDB - which we also presented today at #BlackHatEurope wiz.io/blog/chaosdb-explaine…
ChaosDB explained: Azure's Cosmos DB vulnerability walkthrough | Wiz Blog

ChaosDB explained: Azure's Cosmos DB vulnerability walkthrough | Wiz Blog

This is the full story of the Azure ChaosDB Vulnerability that was discovered and disclosed by the Wiz Research Team, where we were able to gain complete unrestricted access to the databases of...

wiz.io
2
13
1
46
Do you like reading books? Then you’ll love hacking Amazon’s Kindle. youtu.be/BtpGVa7FaXo Read all the technical details here: research.checkpoint.com/2021…
Amazon Kindle Vulnerabilities Could Have Led Threat Actors to Device Control and Information Theft

Amazon Kindle Vulnerabilities Could Have Led Threat Actors to Device Control and Information Theft

Check Point Research (CPR) found security flaws in Amazon Kindle, t...

youtube.com
2
31
78
[CPR-Zero] CVE-2021-31179 (Outlook, Office): Improper parsing of TLV records leading to Use-After-Free and Heap Corruption in graph.exe cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2021-31179

CPR-Zero: CVE-2021-31179

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
1
14
1
42
[CPR-Zero] CVE-2021-31178 (Outlook, Office): Integer Underflow leading to Stack-based Out of Bound Read in graph.exe cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2021-31178

CPR-Zero: CVE-2021-31178

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
21
2
57
[CPR-Zero] CVE-2021-31174 (Outlook, Office): Stack-based Out of Bound Read in graph's data stream parsing code in graph.exe cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2021-31174

CPR-Zero: CVE-2021-31174

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
10
1
26
[CPR-Zero] CVE-2021-31939 (Outlook, Office): Use-After-Free in graph data parsing code in graph.exe cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2021-31939

CPR-Zero: CVE-2021-31939

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
28
3
83
We have recently discovered 4 security issues applicable in most MS-Office products. Read all the details here: research.checkpoint.com/2021… cc @sagitz_ @NetanelBenSimon
Fuzzing the Office Ecosystem - Check Point Research

Fuzzing the Office Ecosystem - Check Point Research

Research By: Netanel Ben-Simon and Sagi Tzadik Introduction Microsoft Office is a very commonly used software that can be found on almost any standard computer. It is also integrated inside many...

research.checkpoint.com
1
51
1
113
Netanel Ben Simon retweeted
Ivan Fratric 💙💛 (@ifsecure) profile picture
Ivan Fratric 💙💛@ifsecure8 Jun 2021
Woohoo! research.checkpoint.com/2021… "Another great feature of Jackalope is that it is easily customizable and hackable. The process of adding a custom mutator to the fuzzer was pretty straight-forward and increased our fuzzing effectiveness with very little development cost."
Fuzzing the Office Ecosystem - Check Point Research

Fuzzing the Office Ecosystem - Check Point Research

Research By: Netanel Ben-Simon and Sagi Tzadik Introduction Microsoft Office is a very commonly used software that can be found on almost any standard computer. It is also integrated inside many...

research.checkpoint.com
1
23
82
Our researchers found that CVE-2017-0005, a 0-Day attributed to the Chinese APT31, is a replica of an Equation Group 0-Day, that was caught and repurposed by APT31 during 2014, 3 years before the Shadow Brokers leak. Read the complete story on our blog. research.checkpoint.com/2021…
The Story of Jian - How APT31 Stole and Used an Unknown Equation Group 0-Day - Check Point Research

The Story of Jian - How APT31 Stole and Used an Unknown Equation Group 0-Day - Check Point Research

Research by: Eyal Itkin and Itay Cohen There is a theory which states that if anyone will ever manage to steal and use nation-grade cyber tools, any network would become untrusted, and the world...

research.checkpoint.com
76
9
141
Netanel Ben Simon retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_13 Jan 2021
Nostalgic hacking session with @NetanelBenSimon MapleStory v83 Private Server cheats 95% python, 5% asm, 100% fun :)
2
4
23
Gamers Beware We recently turned our eyes to a major networking library used by a sizeable chunk of online gaming - Valve’s "Steam Sockets". Here is our report on the library, and the vulnerabilities we found in it. research.checkpoint.com/2020…
Game On - Finding vulnerabilities in Valve’s “Steam Sockets” - Check Point Research

Game On - Finding vulnerabilities in Valve’s “Steam Sockets” - Check Point Research

Research by: Eyal Itkin Overview The beautiful thing about video games is that there’s something for everyone. You can play as a 19-year-old Canadian redhead trying to climb a difficult mountain; or...

research.checkpoint.com
35
3
86
[CPR-Zero] CVE-2020-1310 (Windows 8.1/10 Kernel): Use-After-Free in win32k.sys triggered from Desktop Window Manager cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2020-1310

CPR-Zero: CVE-2020-1310

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
58
2
117
[CPR-Zero] CVE-2020-1247 (Windows 10 Kernel): Out-Of-Bounds Read\Write in the StrechBlt function in win32kfull.sys cpr-zero.checkpoint.com/vuln…
CPR-Zero: CVE-2020-1247

CPR-Zero: CVE-2020-1247

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
46
1
125
Netanel Ben Simon retweeted
sagitz (@sagitz_) profile picture
sagitz
@sagitz_14 Jul 2020
CVE-2020-1350: A cool Windows DNS Server vulnerability (2003->2019) we found at @_CPResearch_ and got patched today #PatchTuesday research.checkpoint.com/2020…
SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers...

SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers...

Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses....

research.checkpoint.com
5
53
7
122
We discovered a 17-year-old vulnerability in all of Windows DNS Servers. SIGRed (CVE-2020-1350) is a wormable, critical vulnerability that can be used to achieve full Domain Administrator privileges. research.checkpoint.com/2020…
SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers...

SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers...

Research by: Sagi Tzadik Introduction DNS, which is often described as the “phonebook of the internet”, is a network protocol for translating human-friendly computer hostnames into IP addresses....

research.checkpoint.com
8
703
55
1,118
The transition to working remotely has severe security implications, as demonstrated by our new research on this wide-spread clientless solution for remote desktop. See our full paper on Remote Code Execution and Privilege Escalation in Apache Guacamole research.checkpoint.com/2020…
Would you like some RCE with your Guacamole? - Check Point Research

Would you like some RCE with your Guacamole? - Check Point Research

Research by: Eyal Itkin Overview In many companies, the daily routine involves coming to the office each day to work on your company computer, safely inside the corporate network. Once in a while, a...

research.checkpoint.com
2
44
4
82
[CPR-Zero] CVE-2020-1054 (Windows 10 Kernel): Out-of-Bounds Write in the DrawIconEx function in win32kfull.sys cpr-zero.checkpoint.com/vuln…

CPR-Zero: CVE-2020-1054

Check Point Research Vulnerability Repository

cpr-zero.checkpoint.com
22
1
55
Load more