Tao Yan

@ga1ois

Find order in chaos.

github.com/ga1ois
Vrijeme pridruživanja: kolovoz 2012.
4 fotografije ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @ga1ois

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @ga1ois

  1. 2. pro 2019.

    The slides of our talk "Pool Fengshui in Windows Vulnerability Exploitation" at are available. Three ways for Pool Feng Shui with RDP PDU, two new methods to exploit CVE-2019-0708 .

    187 proslijeđenih tweetova 329 korisnika označava da im se sviđa
    Poništi
  2. proslijedio/la je Tweet
    29. kol 2019.

    Nice detailed write up on some different ways to perform kernel heap spray to exploit BlueKeep. Missed a much easier way though :p

    79 proslijeđenih tweetova 175 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  3. 29. kol 2019.

    A blog post about how to write data into the kernel with RDP PDU. It can be and not only can be used for BlueKeep exploit.

    27 proslijeđenih tweetova 46 korisnika označava da im se sviđa
    Poništi
  4. 5. srp 2019.

    I guess there are more those interesting PDUs existing, what kind of PDUs did you use? 😀

    12 korisnika označava da im se sviđa
    Poništi
  5. 5. srp 2019.

    bitmap cache, refresh rect and client name request are interesting PDUs, some of them can allocate a huge pool, some of them can be sent for multiple times legitimately, some of them can allocate controllable size pool with controllable data.

    1 reply 2 proslijeđena tweeta 12 korisnika označava da im se sviđa
    Poništi
  6. 29. svi 2019.

    CVE-2019-0708 seemed like a IcaDereferenceChannel double free at the first glance and then a IcaBindChannel out of boundary write at the second glance, but in fact it is a dangling pointer UAF(MCSPortData) at the third glance. (copy from Sixty Million Dollar Man😋)

    7 proslijeđenih tweetova 13 korisnika označava da im se sviđa
    Poništi
  7. 6. srp 2018.

    The source code of exploit showed in Recon Montreal 2018 was released, have fun!

    Our slides PWN Flash with Reflections and HashTables are available at
    33 proslijeđena tweeta 60 korisnika označava da im se sviđa
    Poništi
  8. 22. lip 2018.

    Our slides PWN Flash with Reflections and HashTables are available at

    1 reply 47 proslijeđenih tweetova 74 korisnika označavaju da im se sviđa
    Poništi
  9. 31. svi 2017.

    Turn off your smart card redirection for the Terminal Service (RDP) on Windows XP and 2k3.

    Tweet je nedostupan.
    Poništi
  10. 18. ožu 2014.

    My slides at CanSetWest2014: "The Art of Leaks: The Return of Heap Feng Shui".

    1 reply 63 proslijeđena tweeta 70 korisnika označava da im se sviđa
    Poništi

@ga1ois još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·