liam
187 posts
You can find me on BlueSky:
bsky.app/profile/gareth…
It's pretty cool you can have your own domain handle. If anyone I follow wants an invite let me know I have 2 spare.
English
liam retweetledi
This video changed how I used vim forever. And I’m super thankful for it. @TomNomNom @stokfredrik. Tomorrow I’ll be posting a (very small) follow-up use case of some tricks in this video combined with ai. youtu.be/l8iXMgk2nnY?fe…
YouTube
English
liam retweetledi
Featuring Bishop Fox's Kelly Albrink talking about #FlipperZero! (which you can potentially win tomorrow as part of our #DEFCON livestream 📻)
Truffle Security@trufflesec
Have you ever attended a Chatham House Rules talk?? It's where all the good stuff is shared 🤫🤫 Join us in Vegas to hear from some amazing speakers lu.ma/bh2023
English
liam retweetledi
liam retweetledi
One cool thing I didn't mention in the presentation is that you can also use the single-packet attack via Burp Repeater, even in the free edition. This should make testing & creating replication steps for triagers a bit easier!
English
liam retweetledi
English
liam retweetledi
Attention @BlackHatEvents attendees! 🚨
@2600AltF4 and David Vargas from Bishop Fox present their #security research TODAY; don’t miss “Badge of Shame: Breaking into Secure Facilities with #OSDP” starting at 11:20 AM today in South Seas CD, Level 3. bfx.social/3q5aeoX
English
liam retweetledi
English
liam retweetledi
A deep dive into crypto vulnerabilities my team discovered that enabled @bishopfox's security research + exploit development in FortiGate firewalls 🔥🧱 bishopfox.com/blog/breaking-…
Bishop Fox@bishopfox
Join us as we dive deeper into #Fortinet #security – this time, we’re taking an in-depth look at breaking firmware #encryption. Doing so enabled our team to perform detection, conduct fingerprinting, and develop an #exploit (the focus of a prior post). See for yourself the detailed step-by-step process that we used. #infosec #cryptography bfx.social/3KtHgpF
English
liam retweetledi
We are over the moon to announce that Senior Security Engineer Tom Hudson (@tomnomnom), the mastermind behind popular #opensource gems like jsluice and gron, is gracing our #DEFCON 31 edition of #BFLive! 🚀
Get ready to dive into the secrets of his exceptional #hacking tools and uncover the methodologies fueling them – and hear his unique #offensivesecurity perspective as well. bfx.social/3NNr57F
English
liam retweetledi
4⃣@TomNomNom and @BishopFox release JSluice a new tool to extract URLs, paths and secrets from Javascript files github.com/BishopFox/jslu…
English
liam retweetledi
🛠️ jsluice
A command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code
By @bishopfox's @tomnomnom
#bugbountytips #pentesting
github.com/BishopFox/jslu…
English
liam retweetledi
One week until this talk. I got a preview of Jon's section on building an exploit for a FortiGate CVE and it will be great. Plus, hear the tale of how I accidentally found vulns in Windows and InTune while looking for the same type of issue in a product we assessed.
Bishop Fox@bishopfox
Don’t miss #WhatTheVuln Episode 3! In this #BFLive event, Jon Williams & @0x00C651E0 will be discussing #vulnerabilities in #Microsoft OS environments like #CVE-2023-21541 as well as a novel #exploit we made for #Fortinet CVE-2022-42475! #infosec bfx.social/3qA5aZE
English
liam retweetledi
My brilliant team at @bishopfox developed a safe, no-crash vulnerability check for the recent CVE-2023-27997 heap overflow in FortiGate firewalls allowing RCE. You can try the tool out yourself at github.com/BishopFox/CVE-…. Check out the blog, too! Clever technique, worth a read.
Bishop Fox@bishopfox
We’ve created a tool to quickly check if a remote #FortiGate firewall is affected by critical #vulnerability #CVE-2023-27997. @noperator walks through the design of the timely #vulnerabilityassessment tool in this write-up. #infosec bfx.social/3pbdEGj
English
@TomNomNom Also, you only install it once. You may refer to usage instructions far more often.
English
@TomNomNom I like Usage, because it sort of fleshes out what the tool does. Then, when you've had a chance to see whether it meets your needs, install instructions
English