Punk Rock Warlord. Breaker of Ciphers, Destroyer of Networks, Mad Professor of Dark Arts. I did it #35minutesago Aut inveniam viam aut faciam - Hannibal Barca
Views and opinions are my own.
Joined July 2021
- Tweets438
- Following151
- Followers171
- Likes62
Pinned Tweet
If you saw my @AppSec_Village talk at @defcon on
#connectwise #screenconnect and my new #exploit technique "HTTP status code injection" , the PoC code is available:
github.com/SYNgularity1/HTTP…
Not sure if their site still works, but it works with all kinds of #SSRF against many things beyond their port test page!
DO NOT use this for abuse or evil.
#ASV #APPSECVILLAGE #DEFCON31 #defcon #hacking #exploit
syngularity retweeted
What an amazing opportunity! @agreenbhm @syngularity1 Are world class researchers! I got the opportunity to partake in the research for Living of the Land inside your WiFi! Thank you for all the Q&A during our work shop it you all see what we see!
Last day of @defcon 🥹Please come by and say hi. We have so many activities waiting for you starting at 10am!
Finding #0days and developing #exploits is like fly swatting with a sledgehammer.
You will wildly swing around before you hit your target.
The less clumsy or inefficient you are, the better.
Always consider abuse of functionality and tools, test for unintended results.
Attacks don't need to be clever or elegant to accomplish your task... they just need to work.
#infosec #pentesting #cybersecurity #bugbounty
#Hacking
In response to the 50 texts I just got about the #eas Emergency Alert System test:
No, I'm not responsible... But pretty sure my work @defcon @IoTvillage was a factor. 😂😂🔥🔥
#hacking #defcon
Still awesome..
Never did get a apology for calling me crazy from a few folks.
youtu.be/d2ASPQSHwJ4?si=9gAd…
*fade in to man with #ssh window and @PortSwigger #burpsuite on monitor, chugging energy drink.*
"So I obliterated this entire #switch ecosystem (cisa alert) and started getting curious about what it got me into when...."
*DOZENS of #CVE across all sorts of critical infrastructure... Or about 45 minutes later.*
"I gotta talk to someone at @DHSgov. Fast. I broke a whole lot of stuff."
*cliffhanger*
"What started as a simple web application vulnerability, upon closer inspection, turned out to be two previously-unreported flaws affecting hundreds of thousands of devices, according to Pyle, from routers and printers to cable modems. One bug is a denial-of-service vulnerability that a hacker could use to take the switches, and the networks that rely on them, offline. Another flaw could reveal sensitive information about a switch’s configuration."
Oh, I had a *lot* more control *that night* than a #hacking a paltry few hundred thousand devices, TV, radio, broadcasts....
True story.
cyberscoop.com/shmoocon-cisc…
To all of you trying to hack the #eas in @IoTvillage #defcon31 @defcon... Here is the only hint I'm going to provide:
Back in 2019, I popped the system in just a few minutes.
(I've waited YEARS for the payoff with this..)
The second coolest thing I did in 2022 was disclose my EAS work and make headlines...
The answer is staring you in the face.
Real goths don't wear black, they sack Rome.
@briankrebs
syngularity retweeted
@syngularity1 is hacking away, come join the crowd and see what Cybir is up to! We'll be here all day😎
Hey @lonelyharddrive
You dropped something. Luckily, I have a #forensic imager handy for such an occasion.
#Hacking #defcon31
Lots of #exploits coming out of the lab this week.
Swing on through.
#defcon #appsecvillage #iotvillage
m.youtube.com/watch?v=WX46ZG…
I'll be speaking at @AppSec_Village next month.
Living off the Land with Connectwise : How I built a attack platform & #botnet in 23 lines of Python
showing #proofofconcept, code snippets, all the good stuff. Even came up with a new way to exploit something.
#defcon31 #hacking #cybir #exploit #mspsecurity
I set a new #ddos amplification record via #routers! (YOU can only hope to match it.)
Recreate it at @IoTvillage as part of our planned activities showing this along with a bunch of other fun exploits! @defcon
#cybir #hacking #defcon31 #iotvillage #cybersecurity #0day
If you missed it last year, I'll be bringing my Emergency Alert System lab work back to @IoTvillage with some updates. :)
@defcon #defcon31 #iotvillage
Come hack and learn.
#undergroundking #hacking #eas
If you saw my exploit research at @defcon @IoTvillage last year, I talked about this exact type of incident, how it can be be abused & easy it is to make this happen by accident.
The answer isn't publicly dragging people. #defcon #cybir #eas #iotvillage
cnn.com/2023/04/20/tech/flor…
"If anyone tells you that a certain person speaks ill of you, do not make excuses about what is said of you but answer, 'He was ignorant of my other faults, else he would not have mentioned these alone.'"
-Epictetus
All the #stoicism you will ever need.
My #Ruckus #rce #exploit work is getting some nice coverage.
I'm showing this and other exploit work #0days as part of @IoTvillage at @defcon this year.
#proofofconcept
#Hacking #iotvillage #cybir #defcon
thestack.technology/ruckus-n…
