b33f

@FuzzySec

意志 / TeamRed / Windows Pwn & Undocumented & Breakout & Priv Esc / Wandering edge case / PowerShell / Caffeine Junkie / Tempora mutantur, nos et mutamur in illis

patreon.com/FuzzySec
fuzzysecurity.com
Joined April 2012
188 Photos and videos Photos and videos

Tweets

You blocked @FuzzySec

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @FuzzySec

  1. Pinned Tweet
    Dec 12

    I will be delivering a two day training at HIP18 => Windows Post-Exploitation: Subverting The Core 🔫💣🔪

    [BREAKING NEWS ] Trainings and Early Bird tickets are available on our website!
    1 reply 5 retweets 33 likes
  2. Retweeted
    Dec 20

    SQL Injection Cheat Sheet

    59 retweets 104 likes
  3. Retweeted
    Dec 19

    Just published my paper on largely undocumented / campaigns targeting cryptocurrency individuals/orgs (both big and small). The research covers new implants/tactics not currently covered in the media regarding 'fake jobs' campaigns.

    18 replies 350 retweets 447 likes
    Show this thread
    Show this thread
  4. Retweeted
    Dec 19

    Just found this resource on game hacking by , great work!

    3 replies 10 retweets 18 likes
  5. Retweeted
    Dec 19

    [blog/tool] InsecurePowerShell - PowerShell Without .Automation.dll I promise that one day I will blog about something other than PowerShell... but today is not that day 🙂

    2 replies 139 retweets 181 likes
  6. Retweeted
    Dec 11

    A long overdue publication of 's deep look at a credit card skimmer was given from Old Street, Shoreditch, London

    22 retweets 23 likes
  7. Retweeted
    Dec 18

    Oh Wow, this was a blast to write. In Memory SSL Intercept ;-). Thanks again mavinject! All your Encrypted PowerShell WebRequests Are Belong To Us ;-) Have Fun!

    3 replies 315 retweets 533 likes
    Show this thread
    Show this thread
  8. Retweeted
    Dec 18

    Email attached ZIP contains .BAT that uses UTF-16 BOM to "obfuscate" batch script commands. Installs .VBS Startup Dir and delivers PShellExecRuns that runs encrypted code to inject DLLs.

    3 replies 27 retweets 48 likes
  9. Retweeted
    Dec 18

    aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript

    1 reply 41 retweets 59 likes
  10. Retweeted
    Dec 17

    Embed payloads in the pixels of images and generate oneliners to execute with Invoke-PSImage: Is it a kiwi or is it ?

    5 replies 90 retweets 152 likes
  11. Retweeted
    Dec 16

    Excited to play with 's Detection Lab this weekend. I'll probably write up a short blog on setting it up and using it.

    2 replies 16 retweets 42 likes
  12. Dec 17

    I uploaded a highlight of my Patreon () session where I previewed NeonTwilight scheduled for release in January -

    9 retweets 25 likes
  13. Retweeted
    Dec 15

    Making something out of Zeros: Alternative primitive for Windows Kernel Exploitation

    8 retweets 19 likes
  14. Retweeted
    Dec 15

    I created a new Windows 10 VM with a pristine image from MSDN, and noticed a third party password manager is now installed by default. It didn't take long to find a critical vulnerability.

    41 replies 1,102 retweets 1,634 likes
    Show this thread
    Show this thread
  15. Retweeted
    Dec 14

    Using MavInject32.exe (Microsoft Corp Signed) to load any dll in a running process. > "C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe" <PID> /INJECTRUNNING <PATH DLL> cc:

    21 replies 838 retweets 1,181 likes
    Show this thread
    Show this thread
  16. Retweeted
    Dec 13

    Thoughts about "Process Doppelganging" and proof-of-concepts,

    6 replies 104 retweets 132 likes
  17. Retweeted
    Dec 11

    iOS 11.1.2, now with more kernel debugging:

    204 replies 956 retweets 2,141 likes
    Show this thread
    Show this thread
  18. Retweeted
    Dec 11

    Learn how our red team developed an exploit (memory corruption in MS Word) for CVE-2017-11826 //cc

    1 reply 205 retweets 271 likes
  19. Retweeted
    Dec 10

    Code Execution via Insecure Lenovo Objects

    1 reply 38 retweets 52 likes
  20. Dec 10

    The 7th () live session will be on the 15th of Dec, I will be previewing NeonTwilight an end-to-end C2 framework ⚔️ Countdown =>

    14 retweets 36 likes

@FuzzySec hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·