Asif Wani @KernelCrypt

Security Engineering Manager @ DigitalOcean | Ex-Amazon | Security Researcher | Malware Artist kernelcrypt.com Bengaluru, India Joined September 2010

Tweets

132
Followers

103
Following

311
Likes

146

Asif Wani @KernelCrypt

2 years ago

PR Link: github.com/nccgroup/Scout…

0 0 2 122 0

View Details

Exiting news for #DigitalOcean users! My recent PR for #ScoutSuite (security auditing tool) has been merged, enabling misconfiguration scanning for your DigitalOcean cloud! ☁️. This packs support for 27 misconfigurations across 7 major services. #cloudsecurity #infosec #cspm

1 0 4 226 0

View Details

Jonás Andradas @jandradas

2 years ago

A new release of #ScoutSuite has been published! Among some fixes, its main new feature is support for assessing @digitalocean infrastructure. Thanks and kudos to @KernelCrypt for the PR and @lobuhisec for merging and integrating it!

2 4 8 1K 1

View Details

Ihab Hassan @IhabHassane

2 years ago

I swear to God, I’m scared, I swear to God, I’m scared. I just want to leave this place. We can clearly see the horror in the eyes of this terrified child from what he witnessed last night after the invasion of Shifa Hospital in Gaza, where nearly 20,000 displaced people were there.

544 9K 13K 3.9M 878

View Details

Paul Graham @paulg

2 years ago

Oxford surgeon Professor Nick Maynard on what he saw in Gaza:

278 6K 14K 1.4M 1K

View Details

Matan Berson @MtnBer

2 years ago

My Chrome bug just got disclosed! It’s a really cool chain of 4 vulns leading to local file read and universal XSS (including extensions). Maybe I’ll make a blog post about it issues.chromium.org/issues/40942152

21 98 675 56K 213

View Details

Asif Wani @KernelCrypt

2 years ago

Latest FireOS update, PS7669/4007, imposes restrictions on apps, blocking local ADB connections (Android Debug Bridge). #FireOS #android #adb #amazon #security

0 0 0 129 0

View Details

Asif Wani @KernelCrypt

3 years ago

CVE-2023-3224 Nuxt.js RCE⚠️ huntr.dev/bounties/1eb74… #RCE #cybersecurity #nuxt #infosec #BugBounty

0 1 5 572 3

View Details

🧗‍♂️ Matt Holt @mholt6

3 years ago

‼️A Chinese certificate authority ("HiCA", www1.hi.cn/en/) is injecting arbitrary commands into the ACME challenge process, which acme.sh then executes on the client machine. Here's my current analysis: github.com/acmesh-officia…

🧗‍♂️ Matt Holt @mholt6

3 years ago

🤔🤔🤔

2 4 36 371K 8

10 263 822 397K 203

View Details

Edu Novella @enovella_

3 years ago

IDA PRO 8.3 finally has the Goomba plugin built-in! De-obfuscate simple MBAs out-of-the-box! @HexRaysSA github.com/HexRaysSA/goom…😍

1 93 455 52K 70

View Details

Asif Wani @KernelCrypt

3 years ago

You can run use the tool to identify and log IMDSv1 calls from your instance's boot phase. This allows you to pinpoint exactly what you need to update to get your instances ready to use IMDSv2-only(2/2) IMDS Packet Analyzer GitHub: lnkd.in/dDDjJcvq #securityengineering

0 0 1 94 0

View Details

Asif Wani @KernelCrypt

3 years ago

If you're responsible for managing the migration to IMDSv2 within a vast AWS ecosystem, I highly recommend exploring the IMDS Packet Analyzer. This analyzer helps to identify the processes and details related to how IMDS was called. (1/2) #security #cloudsecurity #awssecurity

1 0 1 111 0

View Details

Matt Johansen @mattjay

3 years ago

🧵 HUGE Update around the active exploitation of MOVEit 0day! From @HuntressLabs - CVE-2023-34362 is not just SQLi - they reversed it and found full RCE as well...

4 149 350 74K 84

View Details

ch @chybeta

4 years ago

CVE-2022-36804 Bitbucket Server RCE

9 138 712 0 76

View Details

j00sean @j00sean

4 years ago

Full disclosure for CVE-2021-21042 + CVE-2019-7040 is ready right here. github.com/j00sean/SecBug…

2 64 216 0 47

View Details

Phith0n @phithon_xg

4 years ago

How I make a environment variables injection to a RCE. (in Chinese) tttang.com/archive/1450/

10 179 656 0 127

View Details

Asif Wani @KernelCrypt

4 years ago

💯

e. v. m. @evm_sec

4 years ago

95% of advanced software RE is developing that gut instinct to know when your tools are wrong...

1 11 72 0 10

0 0 1 0 0

View Details

Edward Snowden @Snowden

4 years ago

Coinbase spending $16,000,000 on a Superbowl ad to direct people to their website and $0 to make sure that website doesn't crash 10 seconds after the ad starts is so very internet.