Former #CTF player @SentryWhale - Blockchain enthusiast
Joined October 2018
- Tweets154
- Following1.4K
- Followers341
- Likes755
2phi retweeted
A tweet from my streamer friend @capetlevrai sent me digging into OBS security.
That rabbit hole led from one Twitch chat message to full compromise of the streamer's PC. Share the mitigations with other streamers until the patched version lands.
blog.scrt.ch/2026/09/22/how-…
2phi retweeted
BREAKING: BYBIT $1 BILLION HACK BOUNTY SOLVED BY ZACHXBT
At 19:09 UTC today, @zachxbt submitted definitive proof that this attack on Bybit was performed by the LAZARUS GROUP.
His submission included a detailed analysis of test transactions and connected wallets used ahead of the exploit, as well as multiple forensics graphs and timing analyses.
The submission has been shared with the Bybit team in support of their investigation. We wish them all the best.
NEW ARKHAM INTEL BOUNTY: BYBIT HACK
We’ve created & funded a bounty to help identify the person or organization behind today’s >$1B Bybit hack.
Submissions to this bounty will be shared with the Bybit team to support their investigation.
Reward: 50K ARKM
Bounty: intel.arkm.com/exchange/boun…
2phi retweeted
1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
gist.github.com/hackermondev…
2phi retweeted
The wayback machine has been compromised.
See you all in HIBP!
Readers added context they thought people might want to know
This account is sharing the news that the Archive has been attacked. It is not proclaiming it led the attack.
wired.com/story/internet…
2phi retweeted
How to fix the Crowdstrike thing:
1. Boot Windows into safe mode
2. Go to C:\Windows\System32\drivers\CrowdStrike
3. Delete C-00000291*.sys
4. Repeat for every host in your enterprise network including remote workers
5. If you're using BitLocker jump off a bridge
2phi retweeted
1/ How Lazarus Group laundered $200M from 25+ crypto hacks to fiat from 2020 - 2023
zachxbt.mirror.xyz/B0-UJtxN4…
2phi retweeted
There's still a load of potential for further research and discoveries in HTTP request smuggling. This massive-impact finding from @deadvolvo exploiting Akamai/F5 is a great example:
blog.malicious.group/from-ak…
2phi retweeted
1/ It’s unfortunate I have to make this thread but I am being sued by MachiBigBrother for an article I published in June 2022.
Today Machi filed the defamation lawsuit. The lawsuit is baseless and an attempt to chill free speech. I intend to fight back & defend free speech.
2phi retweeted
Discover how we compromise systems through misconfigured WSUS (Windows Updates) - Remote Command Execution as #SYSTEM
immunit.ch/en/blog/2023/05/0…
#pentest #windows #wsus #injection #rce
2phi retweeted
Did you enjoy the latest blogpost on PHP filter chains? Well, our ninja @_remsio_ strikes again with a new article detailing how you can abuse them to leak files from the targeted system, as well as a freshly developed tool to exploit it! synacktiv.com/publications/p…
2phi retweeted
Loyalist: $4m stolen from over 400 victims
zachxbt.mirror.xyz/chj355oHn…
2phi retweeted
Very nice little article. Bug hunting is more accessible than you might think; although it does obviously require some technical skills you don't have to be a seasoned veteran to find issues. blog.chain.link/smart-contra…
2phi retweeted
Aurelien the founder charged today by the DOJ in the $2.9m rug pull of Mutant Ape Planet also happens to be the co-founder of another $1.6m rug pull I did a thread on called Crazy Camel Club (attached below)
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
2phi retweeted
The Dedaub team has disclosed a Critical vulnerability to the Uniswap team!
Funds are safe - Uniswap addressed the issue and redeployed the Universal Router smart contracts on all its chains 👏
The vulnerability allows re-entertrancy to drain the user's funds, mid-tx.
🧵
2phi retweeted
Wrote down my experience with MEV research, and the people who drove it to maturity
medium.com/@Prestwich/mev-c4…
