@radsec01

Security enthusiast

Joined February 2023
  • Tweets105
  • Following596
  • Followers1.1K
You're back in the room, trapped with us - and a Citrix NetScaler Pre-Auth RCE (CVE-2026-8452) Enjoy... labs.watchtowr.com/youre-bac…

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

Suddenly, you’re in a room. You look around - oh, you’re surrounded by other new starters at your new job. Yes, it’s Monday, and you’re being onboarded. You know the drill - it’s the typical enterp...

labs.watchtowr.com
7
104
11
318
99,737
What do we even say at this point? CVE-2026-8451, a zero-day Memory Overread that watchTowr Labs identified in Citrix NetScaler appliances in March, has just been publicly disclosed with patches. We're not done yet... speak soon... ;-) labs.watchtowr.com/citrixble…

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)

Well, well, well - once again, the cat has dragged us in and spat us out. Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what...

labs.watchtowr.com
6
54
116
10,940
Radman retweeted
skull
@brutecatJun 11
Hacking Google with A.I. for $500,000 brutecat.com/r/hacking-googl…

Hacking Google with A.I. for $500,000

What happens when you unleash an AI across all of Google's infrastructure? 1,500 APIs, 3,600 keys, and $500,000 in bounties later, here's what I found.

brutecat.com
66
536
64
2,577
370,276
Radman retweeted
Yasho
@YShahinzadehFeb 23
It's time for sharing, this is not a simple write-up, we are sharing our methodology and reasoning, detailing how we approached and hunted the flaw, I hope you like it :] blog.voorivex.team/uxss-on-s…
Omid Rezaei
@omidxrzFeb 20
We got permission from the Samsung Security team to disclose this uXSS that we found in Samsung Browser, it was assigned a CVE (CVE-2025-58485) and patched. Here is the PoC, expect the write-up in the next upcoming days.
12
54
1
336
26,721
New blog post with @infosec_au: We found a vulnerability in Subaru where an attacker, with just a license plate, could retrieve the full location history, unlock, and start vehicles remotely. The issue was reported and patched. Full post here: samcurry.net/hacking-subaru

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel

On November 20, 2024, Shubham Shah and I discovered a security vulnerability in Subaru’s STARLINK admin panel that gave us unrestricted access to all vehicles and customer accounts in the United...

samcurry.net
47
312
18
1,017
118,872
سلام با کلی بالا و پایین و پارگی تصمیم گرفتیم یه کنفرانس امنیتی/هانتری برگزار کنیم، امیدواریم که حرکت مثبتی باشه. تاریخ ۲۴ و ۲۵ آبان برگزار میشه، برای ارسال مقالات تا ۴ آبان وقت هست. یه سری موارد هم نمی‌گیم که سورپرایزطور باشه. کلیه جزئیات توی سایت: vooricon.com
26
54
7
458
117,863
New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure: samcurry.net/hacking-kia
84
956
132
3,507
345,116
اینم باج‌گیری سبک جدید، یعنی آلردی دیتات هست پول بدی پاک می‌کنم (شایدم نکنه) حالا اکلیل برینین برای این باتا بگین هکشون جرمه و کارشون قانونیه، جایی بار بخوره بم از این باتا قطعا wipe میکنم، چون با یه سری اصولم در تناقضه و هزینشم میدم مهم نیست، مثل دیروز تا الان که دادم
35
46
3
1,147
62,232
Load more