Connects to: 5.39.27.226, port 80 (seems to be down right now?)
The shellcode used is almost exactly the shellcode of the 2013 one https://tsyrklevich.net/tbb_payload.txt ...except it builds sockaddr_in on the stack. https://twitter.com/csoghoian/status/803728414012215297 …
This Tweet is unavailable.
-
-
-
Here's hastily made disasm of the shellcode, to compare with the old payload.https://gist.github.com/Wack0/0fedb57beb90aae7f526ac6235ba85ef …
-
When I first noticed the old shellcode was so similar, I had to double check the dates to make sure I wasn't looking at a 3-year-old post.
End of conversation
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
does the vulnerability also reveal the real IP address of people using Tails, a proxy or a VPN?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@csoghoian And in January, Donald Trump will have control over it.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.