Julien Deudon @initbrain

Information Security, Open-Source Intelligence, Python and SDR addict. initbrain.fr France Joined May 2011

Tweets

6K
Followers

531
Following

843
Likes

1K

Thomas Roccia 🤘 @fr0gger_

4 years ago

After a few months of work, we are pleased to announce the new version of Unprotect: your catalog of malware evasion techniques!🤩🧵👇 #unprotectproject #infosec #malware #cybersecurity @DarkCoderSc unprotect.it

8 109 217 0 58

View Details

Renaud Lifchitz ⠵ @nono2357

3 years ago

#Google veut vous défendre du Dark Web et ouvre son #VPN à tous ! 01net.com/actualites/goo…

3 1 1 1K 0

View Details

payloadartist @payloadartist

3 years ago

S3 Bucket Subdomain Takeover On assets.npmjs.com That Could Lead To A Supply Chain Attack shockwave.cloud/blog/subdomain… By @naglinagli #bugbountytips #bugbounty #infosec #cybersecurity

1 20 64 9K 21

View Details

Alex Matrosov @matrosov

3 years ago

⛓️This is a very important industry-wide disclosure since many vendors are affected by the bug in the TPM reference code and specification. "The attacker can also overwrite protected data in the TPM firmware. This may lead to a crash or arbitrary code execution ..." --@fdfalcon

CISA Cyber @CISACyber

3 years ago

VU#782720: TCG TPM2.0 implementations vulnerable to memory corruption bit.ly/3meZXUX

0 25 46 58K 8

2 61 109 41K 14

View Details

Lior Alexander @LiorOnAI

3 years ago

Amazon recently released a model that outperforms GPT-3.5 by 16% while being 784x smaller. This was achieved by generating intermediate reasoning steps for prompting demonstrations called chain-of-thought prompting. Paper: arxiv.org/abs/2302.00923 Code: github.com/amazon-science…

49 502 3K 379K 914

View Details

Orange Cyberdefense France @OrangeCyberFR

3 years ago

Adoptée par le @Europarl_FR, la Directive #NIS2 (Network and Information Systems Directive) vient d’être publiée au Journal Officiel. Les États membres disposent de 21 mois pour transposer la directive au sein de leur droit national. Explications. orangecyberdefense.com/fr/insights/bl…

0 2 4 724 0

View Details

an0n @an0n_r0

3 years ago

detecting EDR services remotely without admin privs. indicators: - installed services: [MS-LSAT] LsarLookupNames() - running processes: named pipes (there are some characteristic to EDRs) needs some more testing and cleanup before release, but looks like promising.

21 220 798 192K 226

View Details

Schneier Blog @schneierblog

4 years ago

Hacked Cellebrite and MSAB Software Released dlvr.it/Sgy7YB

1 16 26 12K 3

View Details

Sam Curry @samwcyo

4 years ago

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012. To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

75 1K 5K 0 890

View Details

cts🌸 @gf_256

4 years ago

OMG WTF

144 1K 9K 0 1K

View Details

Charlie Miller @0xcharlie

4 years ago

This is interesting research. There is an internet hosted app service that mobile apps talk to that allow the mobile app to do the things the mobile app is allowed to do, like remote start the car. This research points out authentication/authorization issues with this service

Sam Curry @samwcyo

4 years ago

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:

197 4K 13K 0 3K

1 21 41 0 7

View Details

dmnk.bsky.social @domenuk

4 years ago

We'll present how to emulate basebands next week at @CanSecWest Together with @Digital_Cold @nSinusR (if the international travel gods allow it) secwest.net/csw22presentat…

0 6 27 0 1

View Details

nSinus-R (@[email protected]) @nSinusR

4 years ago

Happy to announce the release of swSIM and swICC by Tomasz Lisowski, two open source repositories to enable SIM card emulation: github.com/tomasz-lisowsk…, github.com/tomasz-lisowsk…. Among others, we attached the emulator to a real phone via SIMTrace2 and interact with test networks!

24 344 1K 0 352

View Details

Swissky @pentest_swissky

4 years ago

Reverse engineering Glasgow’s subway tickets by Ryan Murphy link.medium.com/oh9TIQ9K5ub

1 3 7 0 1

View Details

0xor0ne @0xor0ne

4 years ago

Bypass read-out protection (RDP) of STMicroelectronics STM32F1 series. Nice write up if you're interested in hacking microcontrollers. (credits Marc Schink and Johannes Obermaier) blog.zapb.de/stm32f1-except… #stm #hacking #microcontroller #infosec #cybersecurity #iot #embedded

0 29 96 0 25

View Details

0xor0ne @0xor0ne

4 years ago

Memory Readout protection bypass on Nordic nRF52840 by @LimitedResults (2020) Cool writeup series if you are interested in microcontrollers security Part 1: limitedresults.com/2020/06/nrf52-… Part 2: limitedresults.com/2020/06/nrf52-… #embedded #iot #infosec #cybersecurity #nordic

0 41 103 0 26

View Details

CERT Orange Cyberdefense @CERTCyberdef

4 years ago

htmLawed #CVE-2022-35914 (used by #GLPI) RCE vulnerability found by @OrangeCyberFR pentester @M4yFly is now massively exploited in the wild. We advise you upgrade ASAP to 9.5.9 or 10.0.3 glpi-project.org/security-updat…

0 4 8 0 0

View Details

Andy Nguyen @theflow0

4 years ago

The exFAT vulnerability used in the latest PS4 jailbreak was discovered by me, of course. hackerone.com/reports/1340942

52 150 1K 0 60

View Details

P1 Security @p1security

6 years ago

P1 Security is happy to open-source a new project that aggregates several public sources into consolidated datasets of MCC-MNC, MSISDN prefixes, ISPC and geographic information: github.com/P1sec/MCC_MNC