Somewhere I belong
Joined March 2011
- Tweets204
- Following1.4K
- Followers125
- Likes8.7K
Here is a short writeup of #PrettyPrague exploit for dropped 0day (lpe) on Avast (genDigital) antivirus: blog.binary.house/2026/08/ge…
Claude and I found a bug in ESET’s macOS antivirus and exploited it in an interesting way.
ESET declined to acknowledge the AI assistance, despite this practice already being used by the Linux kernel.
Full story:
blog.binary.house/2026/07/pl…
As supply chain attacks are roaring everywhere. I wanted to take a look whether after getting initial access an attacker could reach far beyond. It resulted in: blog.jetbrains.com/teamcity/…
Martin Orem retweeted
Kamoškovci z Binary House sa pozreli na náš podpisovač Autogram a našli dieru. Dieru sme fixli za chvíľu. Teraz o tom napísali pekný článok. blog.binary.house/2026/03/pr…
Martin Orem retweeted
[plz RT for range] A soft DEADLINE for article submissions for Issue #7 of Paged Out! has been set:
30 June 2025
We're looking for articles on literally everything that's computer related, technical, and nerdy.
As always: 1 page limit :)
More info: pagedout.institute/
Martin Orem retweeted
Bored in isolation? Do not despair! #OffensiveCon20 videos are now up! youtube.com/playlist?list=PL…
Martin Orem retweeted
“Take Down MacOS Bluetooth with Zero-click RCE” by 360 Alpha Team blogs.360.cn/post/macOS_Blue…
Martin Orem retweeted
And we're live!
🎥 #OBTS v3.0 live-stream:
youtube.com/watch?v=Zt3HxoXJ…
Join us!
Martin Orem retweeted
* Posting about vulnerable boxes that were found via Shodan isn't hacking.
* The phrase "The 'S' in IoT stands for Security" was funny once, but is now annoying.
* Passing the OSCP is equivalent of learning how to ollie on a skateboard.
* Follower count != skill level.
Martin Orem retweeted
Want a free Safari 0day? (Ok, it's actually a 1day because it's fixed in the latest WebKit version, but it still works in the latest version of Safari) Then go to github.com/LinusHenze/WebKit…
Please don't do evil stuff with this.
Martin Orem retweeted
Kudos to @gnupg for providing useful, actionable information and preventing the build-up of hype.
Martin Orem retweeted
“Pen testers who can’t write or read code” is a thing because companies go with the low bid on RFPs. This leads to quantity over quality, where the pen test company is forced to only ever hire and retain new talent who simply don’t have skills.
Martin Orem retweeted
Latest blog from @abdhariri and @WanderingGlitch detail a #VMware guest-to-host escape used at #Pwn2Own 2017. The exploit chain finished with an uninitialized buffer & earned $105K. Will we see more escapes at this year's contest? #StayTuned bit.ly/2t5afep
Martin Orem retweeted
I wrote a paper titled "Weird machines, exploitability, and provable unexploitability", which is slated to be published in TETC and is which now available on IEEE preprint site: ieeexplore.ieee.org/stamp/st…