Tanic retweeted
After two years of research that started at @alephsecurity and ended at @CyberarkLabs, I'm very excited to present my research on attacking ISPs via layer-2 PPPoE protocol live at @defcon!!!!
#defcon #defcon30 #pppoe #ppp @CyberArk
forum.defcon.org/node/242004
Tanic retweeted
I am releasing some of the stuff I have been working on, on side branches as the work is not complete and still pretty raw. This is in case anyone wants to use it as is or continue to work based on this.
Tanic retweeted
#Ruckus has confirmed six additional CVEs for my latest research. I will present new RCEs on Ruckus devices using these vulnerabilities at #defcon28 #DEFCONSafeMode
After a long wait, my 2nd blogpost on Homograph attacks. Specifically, bypassing chrome's IDN policy.
After some delay, here's the 2nd part of our Homograph research in which we show how we bypassed browsers IDN policy and take a deep dive into Unicode definitions.
alephsecurity.com/2020/07/23…
Tanic retweeted
#defcon teams are investing so much effort in #defcon28 safe mode and I feel so honored to be part of this year's talks. Get ready for some #ruckus :)
It’s #defconsafemode 🚨 alert 🚨 time again! The main track talk schedule for #defcon28 is now #live! Permission to get psyched is #granted. More announcements on the way!
This. Is. Happening.
defcon.org/html/defcon-safem……/defcon-s…/dc-safemode-schedule.html
Tanic retweeted
Small @GHIDRA_RE script that colors executed instructions to ease the debug procedure. Hope soon will add regs state to it :))
github.com/alephsecurity/gen…
Tanic retweeted
There is an open position for a senior researcher on my team (located in Herzliya). Please contact me if relevant. @alephsecurity
Tanic retweeted
@offensive_con has been amazing! Truly the best conf I have been to. A special thanks for having the opportunity to present the research #iOS on #QEMU that me and my team were working hard on. The slides and the code with the new features are now released. Enjoy!
Tanic retweeted
Continuing the iOS exploit development series:
Part 1: Heap Exploit Development: azeria-labs.com/heap-exploit…
Part 2: Heap Overflows and the iOS Kernel Heap azeria-labs.com/heap-overflo…
✨NEW: Part 3: Grooming the iOS Kernel Heap azeria-labs.com/grooming-the…
Tanic retweeted
#INFILTRATE20 Speaker Highlight: Jonathan Afek (@JonathanAfek) will be presenting 'Simplifying iOS Research: Booting the iOS Kernel to an
Interactive Bash Shell on QEMU' infiltratecon.com/conference…
Tanic retweeted
Windows / Linux Local Privilege Escalation Workshop (Materials included !) 🥳
github.com/sagishahar/lpewor…
Tanic retweeted
Did you know that the address '<[email protected]>[email protected]' when given to SES will send an email to [email protected]? this could lead to interesting exploit scenarios with some email parsing libraries/code nathandavison.com/blog/explo…
Tanic retweeted
Given a Pcap File, plot a network diagram displaying hosts in the network, network traffic, highlight important traffic
#infosec #pentest #redteam #blueteam
github.com/Srinivas11789/Pca…
Tanic retweeted
I wrote some automation around gophish, evilginx2, and postfix for faster phishing deployment. Looking for feedback and pull requests :D
lockboxx.blogspot.com/2020/0…
github.com/ahhh/phish_compos…
Tanic retweeted
Can't wait to present the progress we've made since #BHEU at @offensive_con! tfp0, full disk mounts with our own block device driver, most of the iOS services running, ssh and a textual framebuffer. #offensivecon
Can be really helpful indeed
Ghidra Script that sets the names for missing function names by looking for relevant patterns in the binary!
Hope that will help you too :)
github.com/alephsecurity/gen…
Part of my latest research, check it out:
Phishing is anyone's problem, but now it can get you in ways you didn't expect and for many users, no proper mitigation is currently available. Check it out: alephsecurity.com/2019/12/29…
Tanic retweeted
Thx for the great talk at #36c3 and your write up: research.checkpoint.com/2019…
