H̷͙̰͕̼̫̥͔̮͓͈͉̩͇̯̍̄̍́͊̋̓͜_̸̭̤̻̫͚̗͒̀́̊͆͜D̷̛̈́̏̓̈̒̈͂̚͝
@hd_421Similar User
@fyoorer
@KHIZER_JAVED47
@antyurin
@Wh11teW0lf
@theRaz0r
@0xw2w
@theBeched
@sergeybelove
@0xKonqi
@asad0x01
🔺New on Apple Security Research blog: a deeply comprehensive Private Cloud Compute security guide, and an unprecedented Virtual Research Environment allowing you to run production PCC software right on your Mac with Apple silicon. And up to a $1M bounty! security.apple.com/blog/pcc-secur…
🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. security.apple.com/blog/private-c…
🔺Now live: the May 2024 update to the Apple Platform Security Guide! support.apple.com/guide/security…
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. security.apple.com/blog/imessage-…
🔺New on the Apple Security Research blog: a brief technical overview of iMessage Contact Key Verification! security.apple.com/blog/imessage-…
🔺New on the Apple Security Research blog: we pit our hardened kalloc_type XNU allocator against SockPuppet, a powerful vulnerability from the past: security.apple.com/blog/what-if-w…
I've added a bunch of security checks for SAML. The bottom part of the article will be useful for pentesters too invicti.com/blog/web-secur…
My video presentation of AppsecStudy from #blackhateurope youtu.be/n0gOjmMiuKM via @YouTube Subscribe, like, and share 😀 #BlackHat
I hoped to attend #BlackHatEurope @BlackHatEvents with two tools, but because my visa is not ready, I will miss it. It's very upsetting, but sometimes it happens. Let me write a few words about the tools and share the links in this thread. blackhat.com/eu-22/arsenal/… #BlackHat
Incredible work!
More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works:
I’m really excited for us to shed light on some really cool work we’ve been doing to harden the XNU allocator! This has been a huge effort by so many people, and I’m very proud of the direction: security.apple.com/blog/towards-t…
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field. Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-browser…
#DexcaliburPro on steroid💊 Just added device-oriented features to inspect / generate hooks to spoof data read from / write to device 😍 by any instrumented app on this device (1/n) @_bhamza @U039b @Farenain @trufae @EmericNasi @_reversense_ #hacking #android #frida #security
Smooth and simple 👍
Bypassing ContentProvider.openFile() internal security checks in Android [1/3] I've discovered an interesting trick that you may use to access private information using a content provider
DroidGuard: A Deep Dive into SafetyNet 🔥 #MobileSecurity #AndroidSecurity [SLIDES+PAPER+VIDEO] by @rh0main romainthomas.fr/publication/22…
Great and technically deep WP/talk on DroidGuard internals, totally recommended!
The slides and the whitepaper about SafetyNet/DroidGuard are available here: romainthomas.fr/publication/22…
This is a thread on the legality of reverse engineering (RE) software, inspired by @FrenchYeti's recent decision of not streaming a talk due to legal pressures. 1/
Stop war! 🙏
All I can think of are the Ukrainian and Russian CTF players I have met, whose writeups I have read, whose talks I have watched, who collaborated with me on videos. I always felt that hacking unites the world. It makes me cry, I'm scared and cope by distracting myself. 😢
Frida is really powerful and popular instrumentation frameworks, however there’s not many useful information sources on advanced usage gathered in single place, but here we have this gem, well done guys!
Releasing today: learnfrida.info It's a small, free web handbook to learn about binary instrumentation using @fridadotre If you found this resource interesting, please share for others to learn!
A blog post about HTTP/2-related checks that I have recently added to Acunetix. acunetix.com/blog/web-secur… Based on my research presented at ZeroNights.
![Account for the day[0] podcast + media.](https://pbs.twimg.com/profile_images/1221600753904537601/8sV0PIy_.png)
United States Trends
- 1. $CUTO 5.826 posts
- 2. #tuesdayvibe 5.295 posts
- 3. Nikki Giovanni 56,5 B posts
- 4. Good Tuesday 33,5 B posts
- 5. #HumanRightsDay 70 B posts
- 6. 28 Years Later 23,5 B posts
- 7. Taco Tuesday 7.015 posts
- 8. Malibu 8.360 posts
- 9. Neely 295 B posts
- 10. $GETTI 1.557 posts
- 11. #10Dic 3.393 posts
- 12. #FranklinFire 4.262 posts
- 13. Jackie Aina N/A
- 14. 28 Days Later 1.065 posts
- 15. Mason Graham 1.663 posts
- 16. Trino Mora 1.322 posts
- 17. Nobel 55,2 B posts
- 18. Jamila 1.028 posts
- 19. Jamie Foxx 2.643 posts
- 20. Among Us 15,7 B posts
Something went wrong.
Something went wrong.