reversebrain @reversebrain

Penetration Tester | Red Team Operator | Incident Response Operator | CTF player with @mhackeroni reversebrain.github.io /dev/null Joined March 2012

Tweets

593
Followers

2K
Following

581
Likes

2K

Sam Curry @samwcyo

2 years ago

New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate. Full disclosure: samcurry.net/hacking-kia

86 973 4K 344K 1K

View Details

reversebrain @reversebrain

2 years ago

Ever heard about cross-queries? 👀 During a recent penetration test, I uncovered the powerful capabilities of cross-queries in PostgreSQL. Discover how this feature can be exploited to dump tables in complex scenarios: reversebrain.github.io/2024/09/19/Cro…

0 0 2 175 0

View Details

Flipper Devices @flipper_net

2 years ago

Firmware 1.0 released! 🔥 What’s new: Apps catalog, JavaScript support, New NFC subsystem, 2X faster Bluetooth, External radio module support and more! 🤩 Read the blog post: blog.flipper.net/released-firmw…

19 217 1K 92K 173

View Details

Dark Web Informer @DarkWebInformer

2 years ago

🚨A Threat Actor Has Allegedly Leaked Data to Capgemini

18 90 714 134K 262

View Details

mhackeroni @mhackeroni

2 years ago

Now that we're all back and caught up on sleep it's @defcon CTF @Nautilus_CTF wrap-up time! 🐚🚩 we managed a great 6th place in a tough competition with conventional pwnage, GenAI-powered spaceships, and LiveCTF duels

2 26 97 12K 3

View Details

mhackeroni @mhackeroni

2 years ago

And that's it for this year @defcon #CTF: your favorite Italian team got 6th place after 3 intense days of !sleeping. Thanks to the organizers @Nautilus_CTF and all the amazing teams that competed with us in this backdoor-sharing event! See you next year! ♥️ #defcon #defcon32

1 30 114 8K 3

View Details

Pwnie Awards @PwnieAwards

2 years ago

Some of you may already be aware but due to extenuating circumstances we've made an early award! The 2024 Pwnie for Epic Fail goes to @CrowdStrike for the CRWD2K bug! 🦃

11 99 443 49K 22

View Details

Patrick Wardle @patrickwardle

2 years ago

I don't do Windows but here are some (initial) details about why the CrowdStrike's CSAgent.sys crashed Faulting inst: mov r9d, [r8] R8: unmapped address ...taken from an array of pointers (held in RAX), index RDX (0x14 * 0x8) holds the invalid memory address @_JohnHammond

45 730 4K 923K 2K

View Details

techAU @techAU

2 years ago

Job 1 in repairing CrowdStrike.. get access to computer.

techAU @techAU

2 years ago

This is the reality for IT Admins hit by @CrowdStrike hope they send an invoice for their time and downtime.

22 150 1K 1.5M 129

82 1K 7K 1.5M 1K

View Details

Pwnie Awards @PwnieAwards

2 years ago

CRWD Showing up in the 11th hour to claim the Pwnie for Epic Fail.

0 12 60 6K 1

View Details

Sonar Research @Sonar_Research

2 years ago

🔥 XSS on any website with missing charset information? 😳 Attackers may leverage the ISO-2022-JP character encoding to inject arbitrary JavaScript code into a website. Read more in our latest blog post: sonarsource.com/blog/encoding-… #appsec #security #vulnerability

7 205 612 109K 494

View Details

Ruikai Peng @ruikai

2 years ago

My latest blog about my discovery for Evernote Client All-platform RCE via PDF.js font-injection to preload.js exposed ipcRenderer-BrokerBridge-boron.actions bypassing Electron's nodeIntegration | context-isolation; Enjoy reading! 0reg.dev/blog/evernote-…

10 124 461 33K 200

View Details

WikiLeaks @wikileaks

2 years ago

JULIAN ASSANGE IS FREE Julian Assange is free. He left Belmarsh maximum security prison on the morning of 24 June, after having spent 1901 days there. He was granted bail by the High Court in London and was released at Stansted airport during the afternoon, where he boarded a plane and departed the UK. This is the result of a global campaign that spanned grass-roots organisers, press freedom campaigners, legislators and leaders from across the political spectrum, all the way to the United Nations. This created the space for a long period of negotiations with the US Department of Justice, leading to a deal that has not yet been formally finalised. We will provide more information as soon as possible. After more than five years in a 2x3 metre cell, isolated 23 hours a day, he will soon reunite with his wife Stella Assange, and their children, who have only known their father from behind bars. WikiLeaks published groundbreaking stories of government corruption and human rights abuses, holding the powerful accountable for their actions. As editor-in-chief, Julian paid severely for these principles, and for the people's right to know. As he returns to Australia, we thank all who stood by us, fought for us, and remained utterly committed in the fight for his freedom. Julian's freedom is our freedom. [More details to follow]

7K 84K 276K 20.1M 12K

View Details

mhackeroni @mhackeroni

2 years ago

📢 Calling all Sponsors! Get mhackeroni to the DEF CON 32 CTF finals 🚩🍝 Would you like to be a part of moving the kitchen to Las Vegas this summer & secure a spot for your logo in our highly-demanded t-shirt? Contact us! Your favourite Italian Acheri™️ need your help!

4 32 105 13K 2

View Details

bohops @bohops

2 years ago

Windows Defender doesn't like it when you name your Hyper-V VM "Invoke-Mimikatz"

10 43 446 49K 69

View Details

vx-underground @vxunderground

2 years ago

The most sophisticated exploit we've ever seen. Thank you to @wdormann for bringing this to our attention. This is basically Stuxnet. 2.0

53 186 2K 338K 651

View Details

blasty @bl4sty

2 years ago

the xz sshd backdoor rabbithole goes quite a bit deeper. I was just able to trigger some harder to reach functionality of the backdoor. there's still more to explore.. 1/n

30 954 5K 872K 2K

View Details

James Forshaw @tiraniddo

2 years ago

This new book has finally arrived. Thank's to @nostarch as well as @billpollock for making it happen as well as @Lee_Holmes as my tech reviewer.

47 182 1K 111K 338

View Details

Flipper Devices @flipper_net

2 years ago

Btw, you don't need a Flipper Zero to "hack" dumb radio protocols. The piece of wire is enough. Check out how to receive and decode 433MHz radio signal just with a PC sound card.