David Wells

@CE2Wells

Zero Day Research at

California, USA
Vrijeme pridruživanja: listopad 2018.
10 fotografija ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @CE2Wells

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @CE2Wells

  1. Prikvačeni tweet
    4. ruj 2019.

    I found a Kernel write-what-where/LPE in Qualcomm driver for Windows. Apparently Qualcomm had a fix but it wasn't distributed through latest driver update means.

    5 replies 103 proslijeđena tweeta 207 korisnika označava da im se sviđa
    Poništi
  2. proslijedio/la je Tweet
    16. sij

    After a lot of work and some crypto-related delays, I couldn't be more proud to publish 's and mine latest research - The complete overview of CET internals on Windows (so far!):

    7 replies 178 proslijeđenih tweetova 339 korisnika označava da im se sviđa
    Poništi
  3. proslijedio/la je Tweet
    17. sij

    How every correlation study sounds

    2.862 proslijeđena tweeta 8.188 korisnika označava da im se sviđa
    Poništi
  4. proslijedio/la je Tweet
    16. sij

    Managed to pair up a rogue keypad to a SimpliSafe SS3 alarm system and disarm it. There are some limitations to the attack, but it was still fun. PoC video is in the research advisory.

    2 proslijeđena tweeta 2 korisnika označavaju da im se sviđa
    Poništi
  5. 13. sij

    Fantastic reverse engineer here that you should follow-> Discord research was NOT my project, we worked together everystep of the way.

    Odgovor korisnicima @angelovescio @TenableSecurity
    Thank you very much, couldn't have done it without my research partner
    2 proslijeđena tweeta 2 korisnika označavaju da im se sviđa
    Poništi
  6. proslijedio/la je Tweet
    4. sij

    I've recently been fuzzing the PHP interpreter, and took a UaF bug all the way from crashing-sample to weaponized code execution. Here is the first of several blog posts I plan to write about the process.

    8 replies 200 proslijeđenih tweetova 538 korisnika označava da im se sviđa
    Poništi
  7. proslijedio/la je Tweet
    17. pro 2019.

    This is one of the most cursed things I've ever seen: $ python2 >>> import string >>> string.letters 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ' >>> help(string) >>> string.letters 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz'

    539 proslijeđenih tweetova 2.197 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  8. proslijedio/la je Tweet
    12. pro 2019.

    Did some scanning of port 8291. Of the 500,000+ RouterOS devices found, only ~15% had patched since my October disclosure. Details and dataset within:

    16 proslijeđenih tweetova 28 korisnika označava da im se sviđa
    Poništi
  9. proslijedio/la je Tweet
    10. pro 2019.

    Recently took a look at 's 's security cams. Some of the findings:

    1 reply 13 proslijeđenih tweetova 11 korisnika označava da im se sviđa
    Poništi
  10. proslijedio/la je Tweet
    14. stu 2019.

    discovered multiple buffer overflow vulnerabilities that can be triggered via a crafted HTTP request. An authenticated attacker may exploit these to execute code remotely.

    17 proslijeđenih tweetova 30 korisnika označava da im se sviđa
    Poništi
  11. proslijedio/la je Tweet
    13. stu 2019.

    Another win32k pointer leak, this time it's more fun :) Enjoy:

    84 proslijeđena tweeta 178 korisnika označava da im se sviđa
    Poništi
  12. proslijedio/la je Tweet
    6. stu 2019.

    Just observed CVE-2019-3978 in the wild. Upgrade your RouterOS or disable Winbox.

    6 proslijeđenih tweetova 11 korisnika označava da im se sviđa
    Poništi
  13. proslijedio/la je Tweet
    31. lis 2019.

    Windows 95 security was lit

    1 reply 11 proslijeđenih tweetova 33 korisnika označavaju da im se sviđa
    Poništi
  14. proslijedio/la je Tweet
    28. lis 2019.

    From unauthenticated Winbox access to root console. Patch your RouterOS installs:

    33 proslijeđena tweeta 47 korisnika označava da im se sviđa
    Poništi
  15. proslijedio/la je Tweet
    25. lis 2019.

    It doesn't look like it on the schedule but I promise I'm presenting on Sunday 😆 Tenable ICS Vulnerabilities - Sunday @ 9 am in Track 3

    1 proslijeđeni tweet 5 korisnika označava da im se sviđa
    Poništi
  16. proslijedio/la je Tweet
    12. lis 2019.

    Everyone should check this out!😄

    Hey all , if anyone interested in Windows internals, exploitation, or vuln hunting. Come check out my talk this Saturday at 3:30pm - COModo : Sandbox to SYSTEM
    1 proslijeđeni tweet 1 korisnik označava da mu se sviđa
    Poništi
  17. 11. lis 2019.

    Hey all , if anyone interested in Windows internals, exploitation, or vuln hunting. Come check out my talk this Saturday at 3:30pm - COModo : Sandbox to SYSTEM

    2 proslijeđena tweeta 11 korisnika označava da im se sviđa
    Poništi
  18. proslijedio/la je Tweet
    8. lis 2019.

    Starting with the telemetry data gathered by ESET’s scanner, machine learning specialists and malware researchers devised a method to spot rare UEFI/based .

    75 proslijeđenih tweetova 102 korisnika označavaju da im se sviđa
    Poništi
  19. proslijedio/la je Tweet
    2. lis 2019.

    How a double-free bug in turns to by awakened1712

    104 proslijeđena tweeta 197 korisnika označava da im se sviđa
    Poništi
  20. proslijedio/la je Tweet
    1. lis 2019.

    Tenable research found HPE iMC to have an inadequate patch that opens up RCE. Let's take a look.

    28 proslijeđenih tweetova 57 korisnika označava da im se sviđa
    Poništi
  21. proslijedio/la je Tweet
    25. ruj 2019.

    Written a new blog in my Windows Exploitation Tricks series, how to spoof the named pipe client PID.

    280 proslijeđenih tweetova 564 korisnika označavaju da im se sviđa
    Poništi

@CE2Wells još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·