Secfault Security GmbH @secfaultsec
In-depth IT security consulting secfault-security.com 0.0.0.0/0 Joined September 2019-
Tweets27
-
Followers218
-
Following38
-
Likes12
The other day, our colleague Oliver decided to play around with Syzkaller to fuzz the FreeBSD Kernel. He added some support for the Bluetooth stack and indeed found an OOB read. If you're interested, check our blog post here: secfault-security.com/blog/fuzzing_f…
We recently did some internal research and took a look at the JavaScript runtime Deno. We found a couple of interesting bypasses for their permission system. If you'd like to learn more, please feel free to check out our blogpost at secfault-security.com/blog/deno.html.
We've taken (another) look at the OpenOlat learning management solution and found an XXE issue, which can be turned into an arbitrary file read and an SSRF problem. In case you're interested, make sure to read our blog post at secfault-security.com/blog/openolat-…!
We recently decided to take a look at LibreOffice, and found an (almost) arbitrary file write issue, which is now public (CVE-2023-1183). If you're interested, check out secfault-security.com/blog/libreoffi… for details :)
Last year we did a number of projects for AgileBits, focusing on the 1Password ecosystem. The reports have now been made public, so in case you're interested to get an impression feel free to check secfault-security.com/blog/onepasswo….
Recently, @OldM4nHunting took a look at the Visual Studio App Center SDK for iOS and macOS and found an insecure object deserialization issue. Here's a write-up on her journey of identifying and exploiting the issue: secfault-security.com/blog/ms-app-ce….
As one of our internal research projects, we've recently taken a look at some self-powered wireless 433MHz light switches, particularly on reverse-engineering the used radio protocol and building a custom receiver. If you're interested, make sure to check secfault-security.com/blog/kineticsw….
We have recently conducted a review of the 1Password developer tools. Our report is now public, so please feel free to check it out: secfault-security.com/blog/onepasswo…
Some time ago, we've had a look at the F*EX file exchange solution (fex.rus.uni-stuttgart.de), and found a pre-auth RCE. We now published a small write-up on this: secfault-security.com/blog/fex.html
I dived into iOS kernel exploitation recently and have written a kernel exploit for chain 3 of @i41nbeer blog post series from last August. Check out the post at the @secfaultsec blog :) secfault-security.com/blog/chain3.ht… Feedback highly appreciated!
Our colleague @gr4yf0x did a research project on re-creating a custom iOS exploit. You can read about his adventures here secfault-security.com/blog/chain3.ht… :)
All applications for the Pro-bono Pentests for COVID-19-related Apps & Software have been reviewed and the committee has chosen the winners. More info to follow soon 🙂
Today is the last day to apply for a FREE pentest on your application that helps fight COVID-19! Since the closure of schools requires good tools for educational learning, we would love to see last minute submissions from this field.
X41 offers pro-bono pentests against COVID-19 related apps in a collaboration with the excellent firms @SecureLayer7, @cure53berlin, and @secfaultsec. Despite being very busy we want to give something back to the community. x41-dsec.de/security/news/…
We're proud to announce that together with our partners from @SecureLayer7, @cure53berlin and @X41Sec, we are offering pro-bono pentests for COVID-19 related apps/software: secfault-security.com/blog/Probono.h…
#TalkAnnouncement Karsten König will be joining #CONFidence2020 with a talk about Exploiting Reference Counter Vulnerabilities Inside The FreeBSD Kernel ⚡️ 👇Check out the details of his talk and get your ticket here 👇 buff.ly/2IIVBOW
@teh_gerg @koehntopp Ah indeed, that’s another important point, especially in complex high risk projects. Particularly meaningful with all this microservice salad and abstraction layers.
@janmuenther @koehntopp Well, it also provides an end-to-end view of a product at a certain stage, which can help identifying issues emerging from the interplay of its components. But that's another focus than the classical pentest before release idea.
joernchen @joernchen
8K Followers 518 Following Your mom's favorite hacker. Also at @[email protected]
Markus Vervier @marver
3K Followers 609 Following Security Vulnerability Coach, responsible for @x41sec and @persistent_psi Tweets here are my own.
Anderson Nascimento @andersonc0d3
5K Followers 7K Following Director & Security Researcher @alleleintel
Allele Security Intel... @alleleintel
1K Followers 2K Following Allele Security Intelligence is an independent company specializing in Information Security research.
ryo @se0r12__
290 Followers 1K Following
AccessDenied403 @ADCDIII
280 Followers 5K Following Security engineer specializing in tokenization, RWAs, and smart contract development at @taurus_hq, CMTAT contributor (@cmta_ch)
tejas krishna @tejaskrshna
12 Followers 2K Following
Shinobyx @crypticrebel337
21 Followers 1K Following Bug bounty hunter who is a bit inactive on social media, so don't expect too much from me here...
Lol Arami @arami_lol
65 Followers 435 Following Ancien Chef Sécurité du Pipeline CNPC NP Niger/ DG ARAMI SÉCURITÉ Secrétaire Exécutif ONG IPCIE
ret2src @ret2src
410 Followers 1K Following Breaker of Stuff | Injector of 0x41 | Discoverer of Dumb Things | Creator of Glitches. Dropping shells since 0x7DC.
netzpalaver @netzpalaver
18K Followers 8K Following Fundierte News und Artikel zu den Themen #AI, #Cloud, #Cybersecurity, #Datacenter, #Infrastruktur und #Telekommunikation sowie #disruptive Technologien.
434B @0xricksanchez
4K Followers 545 Following Vulnerability researcher | Fuzzing | Anything low-level excites me | Admin @ https://t.co/DjVsvNNdjS | My tweets are my own | Bsky: https://t.co/0uGccMaOJW
Ирина @ik200888
4 Followers 89 Following
c1bero @c1bero
49 Followers 311 Following Vulnerability Researcher at Exodus Intelligence. Former Mathematician.
unverifred @differenziagite
177 Followers 4K Following
chethega @chethega
0 Followers 101 Following
ivs @ivansprundel
336 Followers 589 Following
David Baker Effendi @SDBakerEffendi
105 Followers 308 Following Software engineer writing code intelligence for agents @SlopCopAI. Tweeting about open-source, static analysis, and program verification.
QueDevSec @quedevsecurity
9 Followers 4 Following IT security consulting company with a focus on automating vulnerability discovery using static and dynamic techniques.
yphn @yph0x6E
2 Followers 42 Following
Datsuraku @MDatsuraku
208 Followers 2K Following 21ph gnnlknntapiiaiahwanhbaiaponittgylsmaannayphnhamkayogygtnaiauknalgaggakahpaignaaankbaaaypwo nmitnpiaatniganapauolalmangaypaaioyngsatagrngnkgphpakmaankii
Chackal (Esdras DAGO) @Chackal__
1K Followers 998 Following "Vulnerability researcher" doing Bug Bounty on free time (https://t.co/j46EMrTT5T) Also doing some Reverse on many targets but find no vuln 😒
B. Howard @BHoward68597943
0 Followers 41 Following
./AbOdE @AbOdE_HaK
119 Followers 3K Following
Daniel Shapiro @wimpypolo
488 Followers 2K Following
magnetic rose @IntelRoose
234 Followers 3K Following
Saurabh Jain @radiumhacker
282 Followers 2K Following
test @Hacker0x00
45 Followers 2K Following
Chewby72 @Chwnrrea
262 Followers 5K Following
おおさき @ira_yuki
106 Followers 2K Following
H.S. @hustlelead
225 Followers 2K Following aspiring writer striving to love the process | security analyst #OSCP OSED CISSP | Owns crypt0 | Physics tutor
Aobo Wang @M4x_1997
438 Followers 828 Following
J'onn J'onzz @leinn32
398 Followers 1K Following Security engineer, Historian, Researcher at huskysec, I like mobile applications
vlcnge @vlcnge
164 Followers 2K Following
Rodrigo Branco @bsdaemon
13K Followers 4K Following MTS at does it matter? Advisor of Grsecurity. BYOS Commitee Member of OffensiveCon, Langsec, DistrictCon, Secdev
RedditDeck @redditdeck
118 Followers 5K Following RedditDeck offers a more convenient Reddit experience by letting you view multiple timelines in one easy interface.
JP Mullin (🤖, 🕉... @jp_mullin888
157K Followers 12K Following President @ NVNM Digital 🤖| CEO & Founder @MANTRA_Chain 🕉️ - acquired by @InveniamIO | $NVNM | $MANTRA | Likes/RTs != endorsement 🫡
9MF @n1neMF
87 Followers 5K Following
joernchen @joernchen
8K Followers 518 Following Your mom's favorite hacker. Also at @[email protected]
Markus Vervier @marver
3K Followers 609 Following Security Vulnerability Coach, responsible for @x41sec and @persistent_psi Tweets here are my own.
c1bero @c1bero
49 Followers 311 Following Vulnerability Researcher at Exodus Intelligence. Former Mathematician.
434B @0xricksanchez
4K Followers 545 Following Vulnerability researcher | Fuzzing | Anything low-level excites me | Admin @ https://t.co/DjVsvNNdjS | My tweets are my own | Bsky: https://t.co/0uGccMaOJW
ivs @ivansprundel
336 Followers 589 Following
David Baker Effendi @SDBakerEffendi
105 Followers 308 Following Software engineer writing code intelligence for agents @SlopCopAI. Tweeting about open-source, static analysis, and program verification.
Rodrigo Branco @bsdaemon
13K Followers 4K Following MTS at does it matter? Advisor of Grsecurity. BYOS Commitee Member of OffensiveCon, Langsec, DistrictCon, Secdev
Sebastian Muniz @_topo
2K Followers 774 Following Security researcher, hardware crasher and some other useless characteristics in real life.
Bernd Kohler @Bernd_Kohler
23 Followers 436 Following
lit / @ll1t@mastodon.... @ll1t
306 Followers 419 Following Looks good in a suit (--@joernchen), likes networks, ml, cryptographic protocols, and the oxford comma. Once had a complete sentence quoted in Playboy.
@[email protected]... @buherator
4K Followers 907 Following this account is for archival purposes follow me on fedi for updates!
Dennis Elser @sdkboi
1K Followers 382 Following
dhn @dhn_
736 Followers 335 Following By the power of truth, I, while living, have conquered the universe - /OS(C(P|E)|EE)/ - Tweets are my own! - Red teamer @codewhitesec | @[email protected]
@[email protected] @__4nx__
169 Followers 449 Following 302 Moved Temporarily - https://t.co/tFzHIwEBlc | May result in 301 Moved Permanently
Johannes @c4tch4ll
321 Followers 761 Following IT security team lead at Condignum GmbH. I am into hacking and security of all kinds.
Digital.Wolff GmbH @digital_wolff
33 Followers 17 Following Zwischen Hacking und Philosophie: Forschung und Entwicklung, IT-Security & Cyber, Digitale Kommunikation und Strategie.
Marian Schneider @Gr3yLin3
50 Followers 327 Following
Daniel Hauenstein @dhauenstein
2K Followers 606 Following AppSec Engineer. I also build IT sec teams. I am the Klaus Kinski of IT security. Hacking magician. #kaeferjaeger
flo @zeroskillor
718 Followers 463 Following {I cook without recipe, so I think so too} posting about stuff from science, my life, N-universes 'Do not hide your cowardice under the cloak of wisdom'
Jan Muenther @janmuenther
1K Followers 1K Following I do security for @amsOSRAM, but my twitter shenanigans are entirely my own. YPS-Spezialagent. Mastodon: @[email protected]
Marc Schmitt @masc2511
21 Followers 348 Following
hdz @hdznrrd
589 Followers 299 Following Purveyor of fine trust @P3KI by day; jack of all trades @infuanfu by night; GERAFFEL! Also @[email protected]
0x4D5A @0x4D5A
1K Followers 549 Following Cat content || Joern || GTFO @quedevsecurity @joernio core @qwietai @allesctf @[email protected] @ox4d5a.bsky.social
Martin Schobert - @ni... @nitram2342
397 Followers 552 Following Kezboard Cowboy, Programming Robot & Functional Unit. Co-Founder of @pentagridsec. All we are saying is give peace a chance. Mastodon: @[email protected]
Anvil Secure @anvil_secure
203 Followers 501 Following Anvil delivers high-quality infosec consulting services. To work with the industry's finest or to simply get more information contact us [email protected].
Chris Elbring @ChrisElbring
214 Followers 629 Following Managing Partner, @Anvil_Secure Former SVP Services/Research @IOActive
Fabian Yamaguchi @fabsx00
3K Followers 460 Following Vulnerabilities and Exploits. CTO/Founder @whirlylabs, Core developer @joernio, Professor @StellenboschUni
Karsten @gr4yf0x
998 Followers 1K Following @gr4yf0x.bsky.social @[email protected] aka K³; Physicist now mostly interested in security stuff
greg @teh_gerg
1K Followers 264 Following CEO of Secfault Security, looks like a cliché hacker according to @halvarflake @[email protected]You might like
