@_0xDeku Profile picture

Alon Leviev

@_0xDeku

Security Researcher at @microsoft (MORSE) | Hacker, Speaker, BJJ Black Belt, Former BJJ World and Euro Champion

Similar User
David photo

@DaviidGR7

Des photo

@Des00464472

DonPasci photo

@DonPasci

crudd (@crudd@hackers.town) photo

@crudd_re

Siddharth photo

@siddharthuchil

Shmuel Cohen photo

@_BinWalker_

brettsg photo

@pushecx

Just do your job photo

@_do_your_job

Adrianna Wrona photo

@adrianna_wrona

hashford photo

@hashford_

Today is my first day on Microsoft’s Offensive Research & Security Engineering (MORSE) team! Excited for this new journey!


My DEF CON 32 talk “Windows Downdate: Downgrade Attacks Using Windows Updates” is live on YouTube! youtu.be/HHmxuxQ7bE8?si…


Great blog post about mitigating Windows downgrade attacks!

andrea-allievi.com/blog/downgrade… Here you go... Italian trip gift :-) @_0xDeku, @yarden_shafir and the others...



Alon Leviev Reposted

My new blog on the improved security and privacy architecture for Windows Recall - Secure Enclaves, Encryption, Secure Biometrics - let's get nerdy. blogs.windows.com/windowsexperie…


VBS’s “Mandatory” flag is now documented thanks to @aall86 🙏🏻 This flag can be used to mitigate the bypass of VBS’s UEFI locks which I described here - github.com/SafeBreach-Lab…

learn.microsoft.com/en-us/windows/… @_0xDeku Mandatory mode documented... a blog post on the anti-rollback is coming soon (still writing it)...



Alon Leviev Reposted

Big changes to one of the most targeted attack surface in Windows - techcommunity.microsoft.com/t5/security-co…


Alon Leviev Reposted

We've updated our blog on abusing file deletes to escalate privileges. We've also released PoC to demonstrate this. The exploit offers a high degree of reliability and eliminates all race conditions. It has been tested on the latest Windows 11 Enterprise. zerodayinitiative.com/blog/2022/3/16…


Alon Leviev Reposted

If you're into researching Google's Quick Share, don't forget to check out QuickShell! It implements the RCE chain we found and tools allowing to sniff, receive and send the protocol's packets, fuzz the protocol, exploit vulnerabilities we found and more! github.com/SafeBreach-Lab…


Alon Leviev Reposted

For those of you interested in getting started with UEFI vuln research and exploitation, check out the Damn Vulnerable UEFI project on GitHub github.com/hacking-suppor… By @mpcintheheart and myself. Contributions are welcome!


Alon Leviev Reposted

v-v.space/2024/08/19/CVE… Check my blog about Windows secure channel RCE analysis, though MSRC thought it's a DOS. By the way, I'm not the finder. Share for studying


Had the best time presenting Windows Downdate at @BlackHatEvents USA and @defcon 32, thank you all for joining. Windows Downdate is now live! Blog - safebreach.com/blog/downgrade… GitHub repo - github.com/SafeBreach-Lab… #BHUSA #DEFCON32

Tweet Image 1
Tweet Image 2

Alon Leviev Reposted

Just had our @defcon talk and we are thrilled to publish QuickShell - tools for researching Google's Quick Share including a sniffer, a fuzzer, tools that exploit the 10 vulnerabilities @_BinWalker_ and I found, and the RCE attack we chained them into github.com/SafeBreach-Lab…


Proud to have been nominated for the most epic achievement @PwnieAwards, congrats to the winner @AndresFreundTec for finding the XZ backdoor, truly an epic achievement! If you want to hear more about my research, join my talk tomorrow at @defcon 10 am LVCC-L1-HW1-11-03 (Track 3)

Tweet Image 1

Reminder: tomorrow at @BlackHatEvents 10:20 AM in Oceanside A - I will be sharing my journey of researching downgrade attacks on Windows and their severe implications on Windows’s platform security. Join my talk “Windows Downdate: Downgrade Attacks Using Windows Updates” #BHUSA


Alon Leviev Reposted

I’m thrilled to share my latest blog post! This one focuses on the bug hunting process: inspiration, approach, and execution. I also provide a retrospective on how the bug was introduced and analyze the insufficient “patch”. Check it out: securityintelligence.com/x-force/little…


Alon Leviev Reposted

🚨New! "PKFail: Untrusted Platform Keys Undermine Secure Boot on UEFI Ecosystem." #PKfail is a supply-chain issue affecting x86/ARM devices around the globe. Blog: binarly.io/blog/pkfail-un… Full report: …222483.fs1.hubspotusercontent-na1.net/hubfs/22222483… A free scanning tool: pk.fail


Super excited that my research on Windows downgrade attacks has been nominated for the most epic achievement pwnie award!

🚨We are very pleased to announce the nominees for the 2024 Pwnie Awards! Be sure to tag your friends and catch us at Def Con! 🚨 🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇🥳🏇 docs.google.com/document/d/13J…



Loading...

Something went wrong.


Something went wrong.