Tiziano Marra

Intel #CET killed traditional #callstack #spoofing. Here is how to bypass modern #EDRs telemetry anyway. New: CET-Compliant Callstack Spoofing via Thread Pool & Enum callbacks. Manual shadow stack resync via JMP & #INCSSPQ. Article & Rust PoC included👇 mrtiz.github.io/cet-callstack-…

@5mukx Never mistake a D for a Q. It’s amazing how a single letter in an opcode mnemonic can trigger an existential crisis. 😂

@_MrTiz I Enjoy the read @_MrTiz . The 4-Byte Misalignment 😭 i was struck there for 2 days 😭😭... later i somehow i found it luck when random scroll in my codebase

CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining.. TLDR;- Windows Thread Pool execution for a clean stack base, Enum callback trampolining for a real, legitimate mid-stack frame. Blog:- mrtiz.github.io/cet-callstack-… Blog by:- @_MrTiz

@KlezVirus Thanks man! Really appreciate it. And thanks a lot for all your previous research 🙂

@_MrTiz Nice work, man! ;)

Intel #CET killed traditional #callstack #spoofing. Here is how to bypass modern #EDRs telemetry anyway. New: CET-Compliant Callstack Spoofing via Thread Pool & Enum callbacks. Manual shadow stack resync via JMP & #INCSSPQ. Article & Rust PoC included👇 mrtiz.github.io/cet-callstack-…

Great work by @_MrTiz and a very long read! CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining mrtiz.github.io/cet-callstack-…

@ipurple Thanks Panos! Glad you appreciated the deep dive 🙂

Bypassed fully hardened #MicrosoftDefender on fully updated #Windows11 using only free tools: trojanized a legit MS exe with #Shellter, staged an HTTPS reverse shell with #Hoaxshell, then evaded #AMSI & #UAC, in-memory, no zero-days. Read more: mrtiz.github.io/defender-evasi…

Some blogs and online users claim that through this vulnerability it is not possible to make unauthorized payments. This is not true; in fact, if you use a real P.o.S., instead of a #FlipperZero-like device, Google Wallet makes a physical payment. Try it to believe.

CVE-2023-35671: #Android App Pin security issue exposes payment cards in #Google Wallet to unauthorized payments Full PoC video using @flipper_net: youtu.be/reNinRDiBkM Details: github.com/MrTiz/CVE-2023… nvd.nist.gov/vuln/detail/CV… #system" target="_blank" rel="nofollow noopener">source.android.com/docs/security/… #september-2023" target="_blank" rel="nofollow noopener">source.android.com/docs/security/…

@xbsjeirirjrh @MishaalRahman @flipper_net Yes, but by bringing your smartphone close to a real PoS you can make payments

@_MrTiz @MishaalRahman @flipper_net Is that not the randomised card number GPay creates?

#fakenews are free, real news are behind a paywall. :-/

@eleonoradgr Come la numero 12?

🌟

@elonmusk @neuralink #Neuralink #NeverGonnaGiveYouUp #RickAstley

In passato #TrenItalia era solita inviare la password in chiaro via mail (anch'esse tuttora non criptate) nel momento in cui un utente cercava di resettarla: reddit.com/r/italy/commen… @silvanocerza/trenitalia-non-mi-meraviglia-pi%C3%B9-dopo-aver-scoperto-che-salvano-le-password-in-chiaro-molto-756cc32c2840" target="_blank" rel="nofollow noopener">medium.com/@silvanocerza/… facebook.com/Spottedtrenord… #v=onepage&q=trenitalia%20password%20in%20chiaro&f=false" target="_blank" rel="nofollow noopener">books.google.it/books?id=G3paD…

@LeFrecce salvate ancora le #pwd in chiaro nei DB? La mia pwd contiene caratteri minuscoli che diventano maiuscoli nella richiesta #POST e il #login avviene correttamente, cosa impossibile se le pwd fossero "#hashate". Link bit.ly/33N6Or7 @disinformatico @evaristegal0is

Dear recruiters, if you are looking for: - Java, Python, PHP - React, Angular - PostgreSQL, Redis, MongoDB - AWS, S3, EC2, ECS, EKS - *nix system administration - Git and CI with TDD - Docker, Kubernetes That's not a Full Stack Developer That’s an entire IT department

👆Dovremmo proprio farci una serie sopra 👆