Alon Leviev
@_0xDekuSecurity Researcher at @microsoft (MORSE) | Hacker, Speaker, BJJ Black Belt, Former BJJ World and Euro Champion
Similar User
@DaviidGR7
@Des00464472
@DonPasci
@crudd_re
@siddharthuchil
@_BinWalker_
@pushecx
@_do_your_job
@adrianna_wrona
@hashford_
Today is my first day on Microsoft’s Offensive Research & Security Engineering (MORSE) team! Excited for this new journey!
My DEF CON 32 talk “Windows Downdate: Downgrade Attacks Using Windows Updates” is live on YouTube! youtu.be/HHmxuxQ7bE8?si…
Great blog post about mitigating Windows downgrade attacks!
andrea-allievi.com/blog/downgrade… Here you go... Italian trip gift :-) @_0xDeku, @yarden_shafir and the others...
My new blog on the improved security and privacy architecture for Windows Recall - Secure Enclaves, Encryption, Secure Biometrics - let's get nerdy. blogs.windows.com/windowsexperie…
VBS’s “Mandatory” flag is now documented thanks to @aall86 🙏🏻 This flag can be used to mitigate the bypass of VBS’s UEFI locks which I described here - github.com/SafeBreach-Lab…
learn.microsoft.com/en-us/windows/… @_0xDeku Mandatory mode documented... a blog post on the anti-rollback is coming soon (still writing it)...
Big changes to one of the most targeted attack surface in Windows - techcommunity.microsoft.com/t5/security-co…
We've updated our blog on abusing file deletes to escalate privileges. We've also released PoC to demonstrate this. The exploit offers a high degree of reliability and eliminates all race conditions. It has been tested on the latest Windows 11 Enterprise. zerodayinitiative.com/blog/2022/3/16…
If you're into researching Google's Quick Share, don't forget to check out QuickShell! It implements the RCE chain we found and tools allowing to sniff, receive and send the protocol's packets, fuzz the protocol, exploit vulnerabilities we found and more! github.com/SafeBreach-Lab…
For those of you interested in getting started with UEFI vuln research and exploitation, check out the Damn Vulnerable UEFI project on GitHub github.com/hacking-suppor… By @mpcintheheart and myself. Contributions are welcome!
v-v.space/2024/08/19/CVE… Check my blog about Windows secure channel RCE analysis, though MSRC thought it's a DOS. By the way, I'm not the finder. Share for studying
Had the best time presenting Windows Downdate at @BlackHatEvents USA and @defcon 32, thank you all for joining. Windows Downdate is now live! Blog - safebreach.com/blog/downgrade… GitHub repo - github.com/SafeBreach-Lab… #BHUSA #DEFCON32
Just had our @defcon talk and we are thrilled to publish QuickShell - tools for researching Google's Quick Share including a sniffer, a fuzzer, tools that exploit the 10 vulnerabilities @_BinWalker_ and I found, and the RCE attack we chained them into github.com/SafeBreach-Lab…
Proud to have been nominated for the most epic achievement @PwnieAwards, congrats to the winner @AndresFreundTec for finding the XZ backdoor, truly an epic achievement! If you want to hear more about my research, join my talk tomorrow at @defcon 10 am LVCC-L1-HW1-11-03 (Track 3)
Reminder: tomorrow at @BlackHatEvents 10:20 AM in Oceanside A - I will be sharing my journey of researching downgrade attacks on Windows and their severe implications on Windows’s platform security. Join my talk “Windows Downdate: Downgrade Attacks Using Windows Updates” #BHUSA
I’m thrilled to share my latest blog post! This one focuses on the bug hunting process: inspiration, approach, and execution. I also provide a retrospective on how the bug was introduced and analyze the insufficient “patch”. Check it out: securityintelligence.com/x-force/little…
🚨New! "PKFail: Untrusted Platform Keys Undermine Secure Boot on UEFI Ecosystem." #PKfail is a supply-chain issue affecting x86/ARM devices around the globe. Blog: binarly.io/blog/pkfail-un… Full report: …222483.fs1.hubspotusercontent-na1.net/hubfs/22222483… A free scanning tool: pk.fail
Super excited that my research on Windows downgrade attacks has been nominated for the most epic achievement pwnie award!
🚨We are very pleased to announce the nominees for the 2024 Pwnie Awards! Be sure to tag your friends and catch us at Def Con! 🚨 🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇 docs.google.com/document/d/13J…
United States Trends
- 1. Serrano 134 B posts
- 2. #TysonPaul 74 B posts
- 3. #NetflixFight 38,7 B posts
- 4. #netflixcrash 4.102 posts
- 5. Ramos 63,4 B posts
- 6. #buffering 6.428 posts
- 7. ROBBED 59,9 B posts
- 8. Rosie Perez 8.002 posts
- 9. My Netflix 47,5 B posts
- 10. Jerry Jones 6.765 posts
- 11. Cedric 13,3 B posts
- 12. #boxing 35,2 B posts
- 13. Christmas Day N/A
- 14. WTF Netflix 11,2 B posts
- 15. Love is Blind 4.275 posts
- 16. The Netflix 221 B posts
- 17. $NFLX 4.440 posts
- 18. Streameast 2.384 posts
- 19. Robbery 17,7 B posts
- 20. Peter 152 B posts
Something went wrong.
Something went wrong.