titon retweeted
A short time lapse of the fragmentation event on LUCH (OLYMP) #40258 that took place today, 2026-01-30 from 06:09:03.486 UTC.
titon retweeted
Internal Domain Name Collision 2.0 - Philippe Caturegli @hack_lu
youtu.be/Dq0iCgEQNhM
CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Microsoft:
Exploitation less likely
Security Researchers:
Hold my beer…
github.com/CloudCrowSec001/C…
Yo @CheckPointSW, 1998 called and they would like their directory traversal vulnerability back ! #CVE-2024-24919
2
372
Good write up about Palo Alto GlobalProtect RCE (CVE-2024-3400)
labs.watchtowr.com/palo-alto…
350
titon retweeted
So far @lemonodor has the trophy for best find... Pilots & Jets on tarmac at "31.92458, 117.66220" CN-0147 Feidong Air Base as seen from the @djiglobal @djienterprise @djisupport @djiflysafe 2017 AWS leak. clausa.app.carto.com/map/f7f…
Visualize the DJI 2017 AWS data leak with @CARTO to help grok what it may mean with regard to #HR2864 cc @EliseStefanik @RepStefanik @DeptofDefense @StateDept @djiglobal @djienterprise @djisupport @djiflysafe #DronesHelp #DronesForGood #DJI #DJIEnterprise clausa.app.carto.com/map/f7f…
titon retweeted
I created a hyper realistic and handwavey re-enactment of the lockbit CVE-2023-3824 attack after some insights from PHP internals expert @cfreal_
titon retweeted
Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing!
r.sec-consult.com/smtp
Good write up !
F5 BIGIP is vulnerable to a smuggling request vulnerability that an attacker can exploit to achieve unauthorized RCE. Our vulnerability research team responsibly disclose this to F5, which released a hotfix today. hubs.ly/Q026ThPw0 #vulnerabilityresearch #f5 #cve
3
170
titon retweeted
One cool thing I didn't mention in the presentation is that you can also use the single-packet attack via Burp Repeater, even in the free edition. This should make testing & creating replication steps for triagers a bit easier!
titon retweeted
We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class:
portswigger.net/research/sma…
titon retweeted
If you're on an engagement, keep an eye out for the SPN HTTP/<company>.kerberos.okta.com. It provides delegated auth to Okta for a compromised AD user (and usually doesn't require MFA when proxied). getST.py -spn HTTP/company.kerberos.okta.com.
PurpleTeam opsec gone wrong. 🙃
Kicked off our Black Hat training today! Going to have a blast over the next four days! 🎉 #BHUSA @Ben0xA @HackingDave @BlackHatEvents
2
66
Mad props to @_cablethief, @TH3_GOAT_FARM3R, @singe (and the rest of the @sensepost crew) for giving an awesome 4 days Wi-Fi hacking class full of realistic labs using nothing but cloud instances ! 🤯
titon retweeted
We've analyzed the patch diffs for CVE-2023-3519 (Citrix Pre-Auth RCE) and have published our findings so far on our blog post here:
blog.assetnote.io/2023/07/21…
So far, we haven't found an endpoint where this issue is exploitable without SAML being enabled. Will update blog if we do.
🎶On the second day of Christmas, my true love sent to me
- 2 RCE
- 1 day to patch (two critical vulns) 🎶
CVE-2022-42475 - Unauthenticated remote heap-based buffer overflow in Fortinet SSLVPN
CVE-2022-27518 - Unauthenticated remote arbitrary code execution in Citrix GTW/ADC
1
titon retweeted
More car hacking!
Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.
Here's how we found it, and how it works:
titon retweeted
CVE-2022-26766: the CoreTrust bug
"For years, macOS allowed any root certificate when checking code signatures, making code signing completely useless."
// bug discovered by @LinusHenze
// writeup by @zhuowei
worthdoingbadly.com/coretrus…
