Fabio Carretto (@bytevsbyt3) profile picture

Fabio Carretto

@bytevsbyt3

Offensive Security | CTF player @beerpwn | OSWE | OSCP | Boxing, Enduro *** stack smashing detected ***

 Italy
bytevsbyt3.it
Joined March 2018
  • Tweets283
  • Following436
  • Followers199
15Media
Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)Photo by Fabio Carretto (@bytevsbyt3)
Fabio Carretto retweeted
Daniele Scanu (@sk4pwn) profile picture
Daniele Scanu@sk4pwn21 Nov 2023
This morning a #security advisory was published by Zyxel, with CVE-2023-5593, of a memory corruption vulnerability found during a research conducted by me and @bytevsbyt3 on their VPN client for Windows. zyxel.com/global/en/support/…
1
3
5
349
Avoiding the top 10 #Nginx config mistakes - really useful resource nginx.com/blog/avoiding-top-…
F5 NGINX: Built for cloud-native apps. Ready for AI traffic.

F5 NGINX: Built for cloud-native apps. Ready for AI traffic.

Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.

f5.com
1
105
so far so good, thank you @nohatcon for the amazing event ! #nohat #nohat2023
Image from Fabio Carretto (@bytevsbyt3)
2
10
307
Fabio Carretto retweeted
an0n (@an0n_r0) profile picture
an0n@an0n_r015 Oct 2023
Have read about caller ID spoofing several times, but I always doubted it would work in 2023 until I set it up on my own. It is not a piece of cake, but it can be done with a suitable VoIP provider (with SIP trunk), a customized PBX (e.g. Asterisk) and a softphone (e.g. ZoiPer).
Image from an0n (@an0n_r0)
73
260
15
2,013
268,353
Tonight is the Night, thank you @blink182 #blink182
Image from Fabio Carretto (@bytevsbyt3)
3
147
Tornato a casa dal viaggio a new york e miami. Tutto bello però come il ragù di mamma non ce n'è
1
3
73
Fabio Carretto retweeted
CryptoCat (@_CryptoCat) profile picture
CryptoCat@_CryptoCat25 Jun 2023
Mad respect for CTFs that drop all their challenge source and solutions 🔥 Google's 2023 files have been added to the repo 👇 github.com/google/google-ctf
GitHub - google/google-ctf: Google CTF

GitHub - google/google-ctf: Google CTF

Google CTF. Contribute to google/google-ctf development by creating an account on GitHub.

github.com
2
112
1
433
34,055
today I have revived my hackthebox profile and it's always fun. Agile machine pwned, nice and balanced medium box by @0xdf_ with not obvious steps.
3
369
🔥 Brace yourself #LocalPotato is out 🥔 Our new NTLM reflection attack in local authentication allows for arbitrary file read/write & elevation of privilege. Patched by Microsoft, but other protocols may still be vulnerable. cc @decoder_it Enjoy! 👇 localpotato.com/localpotato_…
LocalPotato - When Swapping The Context Leads You To SYSTEM

LocalPotato - When Swapping The Context Leads You To SYSTEM

Here we are again with our new *potato flavor, the LocalPotato! This was a cool finding so we decided to create this dedicated website ;)

localpotato.com
4
169
3
399
41,687
ah yes, I have a twitter account
3
419
Finally I have met @hackthebox_eu at #RomHack2022 with my friends of @SoterITSecurity
Image from Fabio Carretto (@bytevsbyt3)
3
33
Fabio Carretto retweeted
Daniele Scanu (@sk4pwn) profile picture
Daniele Scanu@sk4pwn24 Sep 2022
Ready for the #romhack conference @SoterITSecurity
Image from Daniele Scanu (@sk4pwn)
1
2
10
We are here at #romhack
Image from Soter IT Security (@SoterITSecurity)
Image from Soter IT Security (@SoterITSecurity)
2
8
Great! I passed the #OSWE exam. There were nice challenges in the lab. Thanks @offsectraining #infosec #offensivesecurity
Image from Fabio Carretto (@bytevsbyt3)
9
11
180
Fabio Carretto retweeted
Ryan Basden (@_rybaz) profile picture
Ryan Basden
@_rybaz12 Jun 2022
Hacking resources that are free but are worth thousands:
200
1,473
33
5,797
Excellent insights for research and self-improvement by @LiveOverflow
LiveOverflow 🔴 hextree.io (@LiveOverflow) profile pictureLiveOverflow 🔴 hextree.io
@LiveOverflow3 Jun 2022
Covering the top 6 bugs in Google Cloud from 2021 youtube.com/watch?v=GvO2Xtx8…
2
During a research, our team member @p4w16 has found a vulnerability in a @zyxel product, now identified with CVE-2022-0734! Check it out the official advisory #cybersecurity zyxel.com/support/multiple-v…
4
1
7
Fabio Carretto retweeted
frycos (@frycos) profile picture
frycos@frycos24 May 2022
frycos.github.io/vulns4free/… I wrote it...hopefully not too confusing but full of security code audit methods. Enjoy.

Security Code Audit - For Fun and Fails

Recently, I asked the Twitter community if anyone would be interested in a blog post about “failed” security code audit attempts. A lot of you seemed to like this idea, so here it is. I was somehow...

frycos.github.io
frycos (@frycos) profile picturefrycos@frycos16 May 2022
Is anyone also interested in me blogging about "failed" code audit attempts, e.g. only getting high-privileged auth'd RCE in a product? I could instead explain the methodological paths up to hitting the dead ends in more detail.
18
72
6
188
Nice focus on mental health and burnout! Thank you for your work @cybersec
Cyber (In)Security (@cybersec) profile pictureCyber (In)Security
@cybersec3 May 2022
Tea w/a Hacker - Cyber Burnout, Recovery, and AMA nitter.gq/i/broadcasts/1LyxBoQYd…
4
I want to keep track of the latest cybersecurity news. I also don't want to spend all my time on Twitter. Here are 5 great cybersecurity news outlets that I rely on! 🧵👇
52
454
14
1,897
Load more