this account is for archival purposes follow me on fedi for updates!
Joined May 2009
- Tweets36.6K
- Following907
- Followers4.4K
- Likes19.2K
Pinned Tweet
I stopped the cross-poster, see you on the other side!
(Of course I had a typo, but we still can't edit tweets :D)
@[email protected] retweeted
For those of you who might like it: Here are the slides from my Alligatorcon talk: gergelykalman.com/the-missin…
I was thinking of sending it to #POC2024, but the @POC_Crew says it only accepts new talks :'(
Getting code execution on Veeam through CVE-2023-27532
blog.scrt.ch/2024/09/10/gett…
@[email protected] retweeted
The recording of our @WEareTROOPERS presentation is now online, enjoy!
#TROOPERS24 - IBM i for Wintel Hackers
youtube.com/watch?v=t4fUvfzg…
#IBMi
@[email protected] retweeted
We're stoked we got to present about low-level #IBMi internals at @reconmtl! Here you can find our ...
...slides: silentsignal.hu/docs/S2-REco…
...and detailed writeup: silentsignal.github.io/Below…
@[email protected] retweeted
It was an honor to present our #IBMi exploits at #TROOPERS24 today! You'll have to wait until @WEareTROOPERS releases the recordings for the full show (incl. live demos), until then you can find our slides here:
silentsignal.hu/docs/S2-TROO…
@[email protected] retweeted
#OffensiveCon24 videos are now up! youtube.com/playlist?list=PL…
@[email protected] retweeted
We are glad to announce that our #IBMi research will be presented at multiple prestigious conferences this June 1/3
@[email protected] retweeted
hey @Blizzard_Ent care to explain why TF is your software create this directory as root in my "~/Library/Application Support":
"drwxrwxrwx@ 3 root staff 96 Feb 24 12:04 Blizzard"
This is amateur hour, and opens up the system to user->root LPE!
@[email protected] retweeted
I keygened all of my Hungarian ISP's routers last year:
gergelykalman.com/hacking-is…
@[email protected] retweeted
Another #IBMi privilege escalation reported by us was just fixed - this is CVE-2023-40375:
"IBM i is vulnerable to a local privilege escalation due to a flaw in the base operating system code related to the Integrated application server for IBM i"
ibm.com/support/pages/node/7…
@[email protected] retweeted
Technical Details of CVE-2023-30988 - IBM Facsimile Support Privilege Escalation
#IBMi
blog.silentsignal.eu/2023/08…
@[email protected] retweeted
Due to lack of time on my #OBTS talk, here's one of the bugs that didn't make the cut:
"unnamed app sandbox escape", aka CVE-2023-32364
gergelykalman.com/CVE-2023-3…
@[email protected] retweeted
IBM fixed multiple #IBMi LPE vulnerabilities reported by us:
ibm.com/support/pages/node/7…
ibm.com/support/pages/node/7…
We'll publish technical details about these soon.
Additionally, CVE-2023-30990 (DDM RCE) got its CVSS score raised:
ibm.com/support/pages/node/7…
@[email protected] retweeted
Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service
#IBMi #AS400
blog.silentsignal.eu/2023/07…
My dear followers, I still don't plan to come back here, please see my updated Fediverse info to get to my microblogz!
@[email protected] retweeted
password manager .. plugins .. BY THE COMMUNITY! mass password compromise is now democratized.
🔔The newly-released @1Password CLI v2.13.0 brings the number of 28 Shell Plugins (the ability to authenticate to a CLI with a fingerprint) - including 12 of which were built by the community!
@[email protected] retweeted
We are growing our browser vulnerability research team! Full time Chrome research, flexible hours, huge bonuses and fun retreats. Contact us at: careers(at)bluefrostsecurity(dot)de
@[email protected] retweeted
The latest update on the GoTo/LastPass breach is not very good 😢
securityweek.com/goto-says-h…
@[email protected] retweeted
In our first blog post of 2023, we continue our series about penetration testing #IBMi. This time we look into how the so-called Adopted Authority mechanism can be abused for privilege escalation!
blog.silentsignal.eu/2023/01…
@[email protected] retweeted
New version of aardwolf RDP client both headless and GUI is out on Github+pip. Added dynamic virtual channel support. Why? Because I love the SockOverRdp project from @xoreipeip and always wanted a python-native client.
Thx for @porchetta_ind supporters
github.com/skelsec/aardwolf/…
