╪ͥ͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͏͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋͋ ◯ ⃝ ⃝ ⃝ ⌨ ⁰☠ ☂ ☺ ♬
Milky Wayبٍٍٍٍََُُُِّّّْرٍٍٍٍَ
Joined April 2008
- Tweets4.3K
- Following245
- Followers3.1K
- Likes3.7K
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
thanks to everyone who attended my #TheSAS2025 talk "Typographic hit job: when fonts pull the trigger". 🙏
I've written an accompanying blogpost that goes over all the details: haxx.in/posts/2025-09-23-can…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo:
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
If you want to learn how to construct epic payloads like this? You need JavaScript for Hackers.
Requires this hash:
#<img/src/onerror=alert(1)>
amazon.com/JavaScript-hacker…
ALT <svg/onload=innerHTML=URL,innerHTML=textContent> #<img/src/onerror=alert(1)>
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
pagedout.institute/ ← we've just released Paged Out! zine Issue #7
pagedout.institute/download/… ← direct link
lulu.com/search?page=1&pageS… ← prints for zine collectors
pagedout.institute/download/… ← issue wallpaper
Enjoy!
Please please please RT to spread the news - thank you!
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
ChatControl wants to scan all your private messages metalhearf.fr/posts/chatcont…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
So… I was hacked. Pwned. Big time. And I’m not kidding.
It turned out to be the very same malware used in massive DDoS campaigns against DeepSeek and Twitter (erm… X).
It was RapperBot... I was angry with me and with the malware. Honestly, more with me than with the malware.
This is my story of how I dove deep into its guts, from infrastructure mapping to binary analysis, and what I uncovered along the way.
Buckle up and grab some IOCs:
bitsight.com/blog/rapperbot-…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
I'm happy to release a script gadgets wiki inspired by the work of @slekies, @kkotowicz, and @sirdarckcat in their Black Hat USA 2017 talk! 🔥
The goal is to provide quick access to gadgets that help bypass HTML sanitizers and CSPs 👇
gmsgadget.com/
1/4
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
This moment will last forever. What a beautiful way to say goodbye. Thank you Ozzy.
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
I’ve just published slides on Shadow DOM & security!
遅ればせながら #shibuyaxss の資料を公開しました！Shadow DOMとセキュリティの話です～
speakerdeck.com/masatokinuga… (日本語)
speakerdeck.com/masatokinuga… (English)
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
The early crow catches the ticket!
Make sure you have your alarms set. Tickets go out FAST (less than 24h).
🚨 Alert! Early B^Crow tickets for #BSidesLisbon2025 drop Wed, July 23 @ 12:00 (GMT/UTC+1) here 👉 bsideslisbon.eventbrite.com
This year: 2 full days, meals with co-pay to reduce waste, and the Supporter Ticket (incl. hoodie) is back!
Check out the image for more info.
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
Writeup of my SharePoint RCE: CVE-2024-38018. ZDI decided not to publish the blog and I didn't find time to write a new one 😅
Enjoy @_l0gg analysis!
While waiting for the Pwn2Own chain, you might want to read this.
Disclaimer: This is a bug I discovered by accident, and already been resolved. I’m not sure which CVE or patch this maps to.
If you know any information, please feel free to leave a comment
blog.viettelcybersecurity.co…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
"Funky chunks: abusing ambiguous chunk line terminators for request smuggling" - quality research by @__w4ke! Also thankfully it doesn't overlap with my upcoming presentation 😅
w4ke.info/2025/06/18/funky-c…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
A quick-and-dirty late night blog post on discovering an nday variant in Zyxel NWA50AX Pro devices
frycos.github.io/vulns4free/…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
Excited to share that our research on DOM Clobbering has been accepted to DEF CON 33! I’ll be presenting this work in Las Vegas this August!
Now, the tool and dataset are open-sourced!
+ Tool: github.com/jackfromeast/TheH…
+ Dataset: github.com/jackfromeast/dom-…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
My new research
Escalation of Self-XSS to XSS using modern browser capabilities.
blog.slonser.info/posts/make…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
Here's my blog post about escaping `<>` in attributes and why it makes mXSS harder to exploit!
🚨 Heads up for web devs! 🚨
The HTML spec just got an important update to protect against mutation XSS (mXSS). Find out how escaping < and > in attributes is making the web a safer place.
bughunters.google.com/blog/5…
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
Hello everyone, our CfP is now open and we're looking forward to receiving your submissions.
Also...Lightning talks are back
This is the place to go 👉 cfp.bsideslisbon.org/bsidesl…
#BSidesLisbon2025
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
We released new Pwndbg: github.com/pwndbg/pwndbg/rel… !
It brings new kernel commands for dumping heap allocator info, display of not taken branches (X marker) in disasm, better disasm for ARM/MIPS/LoongArch64, initial s390x support & more!
Sponsor us at github.com/sponsors/pwndbg !
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้ retweeted
I'm super happy to announce an operationally weaponized version of @YuG0rd's BadSuccessor in .NET format! With a minimum of "CreateChild" privileges over any OU it allows for automatic escalation to Domain Admin (DA). Enjoy your inline .NET execution!
github.com/logangoins/SharpS…
