George Noseevich retweeted
Thing I learned today: Decrypting arbitrary TLS sessions
on Windows (for code utilizing schannel):
b.poc.fun/decrypting-schanne…
Great explanation, and very easy to use code, by @webpentest
George Noseevich retweeted
Thanks @hackerdom, @HITBSecConf , @disruptad, @crowdfense, and all competitors for another great AD CTF!
George Noseevich retweeted
Thanks to @hackerdom and all participating teams for #ructf! It has been fun, as always.
George Noseevich retweeted
Проголосуйте на РОИ за запрет отлова косаток roi.ru/49427/, и вот почему shpilenok.livejournal.com/31…
George Noseevich retweeted
Was happy to make contribution to the final Jenkins RCE exploit and it's a honor to be nominated in @PwnieAwards with @orange_8361 and @webpentest
I am nominated 3 times(2 for best server-side bug) in @PwnieAwards this year, but I guess the winner is #BlueKeep T^T
Anyway, it's still a big recognition to me! Thanks all :P pwnies.com/nominations/
George Noseevich retweeted
I am nominated 3 times(2 for best server-side bug) in @PwnieAwards this year, but I guess the winner is #BlueKeep T^T
Anyway, it's still a big recognition to me! Thanks all :P pwnies.com/nominations/
George Noseevich retweeted
By chaining CVE-2018-1000861(me), CVE-2019-1003005(@0ang3el) and CVE-2019-1003029(@webpentest ), this RCE become more reliable and elegant XD. Thanks you all and I will acknowledge this on my HITBAMS talk!
George Noseevich retweeted
Updated: Request Minimizer
portswigger.net/bappstore/cc…
George Noseevich retweeted
FWIW location tracking is baked into Qualcomm basebands. Even if you have a clean OS and no tracking apps, the baseband does it. The data is commercially available: qualcomm.com/products/izat xitter.cf/zackwhittaker/status/9…
George Noseevich retweeted
Need to send a cross-origin Post request without Content-Type header? Just create a Blob without type and send it using fetch or beacon API. It can be useful for bypassing a buggy CSRF-protection.
xxx.dbggl.pw/send_no_ct.html
George Noseevich retweeted
Cisco IOS SNMP remote code execution (CVE-2017-6737) exploit github.com/artkond/cisco-snm… #cisco #snmp #exploit
George Noseevich retweeted
blog.bushwhackers.ru/slot-ma… Check out our write-up for the hardware challenge from Google CTF finals! #googlectf
George Noseevich retweeted
Chrome XSS Auditor bypass:
<script>alert('evil')</script
PoC:
xn--g3h.ws/example.php?xss=%…
George Noseevich retweeted
Congrats to SRT member @artkond for his accepted talk submission at #defcon25! Check it out: syn.ac/2sI4Yot
George Noseevich retweeted
I am very happy that our team (#Bushwhackers) has qualified for DEFCON CTF this year. There is really much to be done
George Noseevich retweeted
#Bushwhackers won #ictf2017 !
The game was awesome! Special cheers to organizators and other teams (especially to LC/BC).
George Noseevich retweeted
It is unexpected moments like this that make Attack-Defense CTFs so much fun. xitter.cf/webpentest/status/8387… – at San Francisco, CA
One of the platinum #ictf2017 moments. Didn't think I'd ever have to write a ssh flag-stealing "exploit" on a CTF.
