rh0gue (@rh0gue) profile picture

rh0gue

@rh0gue
Joined September 2013
  • Tweets248
  • Following347
  • Followers249
8Media
Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)Photo by rh0gue (@rh0gue)
No More GIL! the Python team has officially accepted the proposal. Congrats @colesbury on his multi-year brilliant effort to remove the GIL, and a heartfelt thanks to the Python Steering Council and Core team for a thoughtful plan to make this a reality. discuss.python.org/t/a-steer…
A Steering Council notice about PEP 703 (Making the Global Interpreter Lock Optional in CPython)

A Steering Council notice about PEP 703 (Making the Global Interpreter Lock Optional in CPython)

Posting for the whole Steering Council, on the subject of @colesbury’s PEP 703 (Making the Global Interpreter Lock Optional in CPython). Thank you, everyone, for responding to the poll on the no-GIL...

discuss.python.org
59
1,040
327
4,455
1,391,790
Wordle 238 2/6 🟨🟨🟩⬛🟨 🟩🟩🟩🟩🟩
We've finally announced the new project I've been working on for the last few months: a Burpsuite alternative called Caido. We’re looking for beta testers soon. If you're interested, check out the website :D
Caido (@CaidoIO) profile pictureCaido
@CaidoIO9 Aug 2021
Hello world 👋 We’re proud to announce Caido: A high-performance / low memory usage web #security auditing #tool written in Rust 🎉 Interested? Register on our website to reserve your spot in our upcoming beta caido.io #pentest #bugbounty #infosec
Hack at the speed of modern development

Hack at the speed of modern development

The web hacking toolkit designed to scale manual testing through AI and teamwork.

caido.io
13
41
6
263
The guy who maintains Helm, the most important package in Emacs, is a 57-year old alpine mountain guide who learned to program when he was 42, as a hobby. sachachua.com/blog/2018/09/i…
10
112
10
543
To all my CTF friends: libc-database now has an HTTP API and a web frontend: libc.rip/ and courtesy of @ajabep it will soon support a lot of different Linux distributions outside of Ubuntu and Debian.
3
42
2
156
What a weight off my shoulders! It was such an honor to virtually speak at #BlackHat2020 today. If you have any questions, reach out! I will be around at #DEFCONSafeMode to answer questions. Dropping it all the videos here! youtube.com/watch?v=Ml09R38j… youtube.com/watch?v=Z-JFVJZ-…
Compromise any GCP Org Via Cloud API Lateral Movement and Privilege Escalation: Blackhat/Defcon 2020

Compromise any GCP Org Via Cloud API Lateral Movement and Privilege Escalation: Blackhat/Defcon 2020

In this Blackhat/Defcon talk, we detail ways to exploit GCP service...

youtube.com
7
29
4
101
My VirtualBox escape bug/exploit writeup from earlier this year is up! I hope it's an interesting read 😁
starlabs (@starlabs_sg) profile picturestarlabs@starlabs_sg26 Jun 2020
Blog post on "Oracle VirtualBox VHWA Use-After-Free Privilege Escalation Vulnerability” starlabs.sg/blog/2020/06/ora… by our former intern before he got enlisted for NS @__lord_idiot We hope it’s good for everyone to read on a Friday.
9
34
1
177
Create a repo for learning libprotobuf-mutator and how to combine it with libfuzzer and AFL++ : github.com/bruce30262/libpro…
GitHub - bruce30262/libprotobuf-mutator_fuzzing_learning: Learn how to combine libprotobuf-mutator...

GitHub - bruce30262/libprotobuf-mutator_fuzzing_learning: Learn how to combine libprotobuf-mutator...

Learn how to combine libprotobuf-mutator with libfuzzer & AFL++ - bruce30262/libprotobuf-mutator_fuzzing_learning

github.com
1
33
95
So yes, the latest sudo bug (CVE-2019-18634) is fairly trivial to exploit giving any user root access. Tested on Ubuntu and a stock Mint install. Upgrade sudo or ensure pwfeedback is disabled! #CVE #poc #sudo
3
24
3
61
Congrats to the first place team "LaCroix" for winning the @PinterestEng CTF! Walking home with Nintendo Switch Lites! Thanks to @Bugcrowd for sponsoring the prizes! #infosec #cybersecurity #ctf #skills #security #cyber
Image from Cyber Skyline (@Cyber_Skyline)
1
5
28
This is probably the best discussion of methodology of finding and exploiting bugs in difficult targets. This talk, @NedWilliamson’s, and @5aelo’s were prob my fav three from @ccc and @offensive_con. They serve as an excellent quickStart to finding browser bugs.
RET2 Systems (@ret2systems) profile pictureRET2 Systems@ret2systems27 Dec 2018
Tomorrow at #35C3, we will give a behind-the-scenes look at the process of #0day Engineering. Watch as we break common misconceptions regarding this increasingly difficult tradecraft: fahrplan.events.ccc.de/congr…
1
44
2
195
Image from Jazzy (@ret2jazzy)
41
6
125
I'm releasing all the slides (~800!) of my Mobile Security class: mobisec.reyammer.io! They are not perfect, but students learned how to reverse apps, find&exploit real-world bugs, reason about threat modelling / system security, etc. Very proud of them :-) 👶 => 👨‍💻👩‍💻
56
1,165
57
2,618
Here are the slides from my #OffensiveCon19 talk about my approach for JavaScript engine fuzzing: saelo.github.io/presentation… My master's thesis (for which I developed the fuzzer) can be found here: saelo.github.io/papers/thesi… Thanks for the great conference @offensive_con! =)
3
278
1
564
CVE-2019-5736 runc breakout is pretty bad, quick POC demo of a malicious docker container asciinema.org/a/ig41ddZ1Whjk…
1
101
11
207
Stop by and charge your phones @shmoocon! Courtesy of @NSAGov
Image from Rob Joyce (@RGB_Lights)
365
1,847
973
4,959
Great write up on exploiting recent Magellan bug by @Externalist blog.exodusintel.com/2019/01…
Exploiting the Magellan bug on 64-bit Chrome Desktop

Exploiting the Magellan bug on 64-bit Chrome Desktop

In this post, we show how to reverse engineer the Magellan bug from the patch and exploit it on a 64bit desktop environment.

blog.exodusintel.com
2
51
2
87
We made substantial improvements in safety and ride quality during 2018. So proud of the Cruise team for getting us to this point. 2019 is going to be an exciting year! youtube.com/watch?v=cJQLEETP…
14
68
30
158
Merry Christmas and happy holidays from OpenToAll!
Image from OpenToAll (@OpenToAllCTF)
2
4
15
Cheers @hxpctf for a great ctf! Here’s my writeup for the Green Computing series devcraft.io/2018/12/10/green… #hxpCTF

Green Computing - hxp CTF 2018

Green Computing 1 Green Computing 1 - Fixed Green Computing 2

devcraft.io
8
14
Load more