http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-10-10 02:31:29 - jduck1337 : RT @NTarakanov: Just checked, 0day in Flash which I prepared for #pwnium2 has been killed Thank You very much @j00ru @fjserna You are r http://www.secuobs.com/twitter/news/349413.shtmlhttp://www.secuobs.com/twitter/news/349413.shtml Secuobs.com : 2012-10-10 02:31:29 - jduck1337 - RT @hugofortier: Linux on a peetop http://tco/3mIEP1Pfhttp://www.secuobs.com/twitter/news/349412.shtmlhttp://www.secuobs.com/twitter/news/349412.shtml Secuobs.com : 2012-10-06 19:36:32 - jduck1337 - @kutyacica @jonoberheide kernel stylehttp://www.secuobs.com/twitter/news/348788.shtmlhttp://www.secuobs.com/twitter/news/348788.shtml Secuobs.com : 2012-10-05 05:08:06 - jduck1337 - RT @quine: Mapping and Evolution of Android Permissions from EUSecWest 2012 and SOURCE Seattle by me @paucis__verbis http://t http://www.secuobs.com/twitter/news/348377.shtmlhttp://www.secuobs.com/twitter/news/348377.shtml Secuobs.com : 2012-10-05 05:08:06 - jduck1337 - @DHowett erm no export to pdf for the masseshttp://www.secuobs.com/twitter/news/348376.shtmlhttp://www.secuobs.com/twitter/news/348376.shtml Secuobs.com : 2012-10-03 10:02:23 - jduck1337 - RT @__rev: SMAP support getting included in 37 Linux Kernel http://tco/ZsXY80GGhttp://www.secuobs.com/twitter/news/347826.shtmlhttp://www.secuobs.com/twitter/news/347826.shtml Secuobs.com : 2012-10-02 08:07:46 - jduck1337 - Metasploit is moving towards supporting ROP in a more global way Watch out https://tco/CQepsFXqhttp://www.secuobs.com/twitter/news/347548.shtmlhttp://www.secuobs.com/twitter/news/347548.shtml Secuobs.com : 2012-09-30 03:52:00 - jduck1337 - RT @_juan_vazquez_: Just added #Metasploit mod Samba SetInformationPolicy AuditEventsInfo Heap Overflow CVE-2012-1182 Screenshot: http http://www.secuobs.com/twitter/news/347108.shtmlhttp://www.secuobs.com/twitter/news/347108.shtml Secuobs.com : 2012-09-30 03:52:00 - jduck1337 - Bug #6392582 - “Upgrade from S10 FCS to snv_34 wrongly enables CDE RPC services” - Nice description for local privilege escalationhttp://www.secuobs.com/twitter/news/347107.shtmlhttp://www.secuobs.com/twitter/news/347107.shtml Secuobs.com : 2012-09-27 19:50:09 - jduck1337 - RT @ericlaw: I wrote a bit about #IE10 and ActiveX: http://tco/e6HMnNqHhttp://www.secuobs.com/twitter/news/346473.shtmlhttp://www.secuobs.com/twitter/news/346473.shtml Secuobs.com : 2012-09-27 19:50:09 - jduck1337 - RT @theKos: If you guys use CR-GPG for Chrome and GMail DON'T Remote command injection on current version XSS - to Meterp shell http://www.secuobs.com/twitter/news/346472.shtmlhttp://www.secuobs.com/twitter/news/346472.shtml Secuobs.com : 2012-09-20 23:05:28 - jduck1337 - RT @_sinn3r: Could anybody verify if the fix-it actually works for the IE 0day http://tco/RbivdEhT Exploit still works: http://tco/ http://www.secuobs.com/twitter/news/345549.shtmlhttp://www.secuobs.com/twitter/news/345549.shtml Secuobs.com : 2012-09-20 23:05:28 - jduck1337 - @_sinn3r are you sure you have the latest dll versionhttp://www.secuobs.com/twitter/news/345548.shtmlhttp://www.secuobs.com/twitter/news/345548.shtml Secuobs.com : 2012-09-20 23:05:28 - jduck1337 - @kutyacica mostly interested due to convenience of serial and/or jtagging :http://www.secuobs.com/twitter/news/345547.shtmlhttp://www.secuobs.com/twitter/news/345547.shtml Secuobs.com : 2012-09-20 00:20:24 - jduck1337 - RT @thezdi: Despite some Layer 1 issues messing with the payload, the Galaxy S3 ultimately fell to @mwrlabs Congrats guys #Pwn2Ownhttp://www.secuobs.com/twitter/news/345245.shtmlhttp://www.secuobs.com/twitter/news/345245.shtml Secuobs.com : 2012-09-19 00:45:24 - jduck1337 - RT @_sinn3r: Just added #Metasploit IE 0day IE7/8/9: http://tco/1bI4fmNP Thx @_juan_vazquez_, @binjo, @eromanghttp://www.secuobs.com/twitter/news/344957.shtmlhttp://www.secuobs.com/twitter/news/344957.shtml Secuobs.com : 2012-09-15 05:03:12 - jduck1337 - RT @pof: FUD alert: possible 0day to be presented at ekoparty allows remotely permanent bricking of android devices - spanish http:// http://www.secuobs.com/twitter/news/344094.shtmlhttp://www.secuobs.com/twitter/news/344094.shtml Secuobs.com : 2012-09-13 07:53:32 - jduck1337 - RT @0xabad1dea: If you missed it, Chrome has disabled SSL compression with a bug report that is 403 https://tco/VbJ6Yl6N We all know w http://www.secuobs.com/twitter/news/343440.shtmlhttp://www.secuobs.com/twitter/news/343440.shtml Secuobs.com : 2012-09-13 07:53:32 - jduck1337 - RT @egyp7: Blog post about current_user_psexec Metasploit module I demo'd at #defcon - https://tco/bBwYQ66whttp://www.secuobs.com/twitter/news/343439.shtmlhttp://www.secuobs.com/twitter/news/343439.shtml Secuobs.com : 2012-09-13 07:53:32 - jduck1337 - RT @dlitchfield: Wait, what Qualys BrowserCheck for Chrome on Windows has a base address of 0x10000000 #DERP #FAIL #ASLR http://tco/N http://www.secuobs.com/twitter/news/343438.shtmlhttp://www.secuobs.com/twitter/news/343438.shtml Secuobs.com : 2012-09-12 02:48:35 - jduck1337 - RT @TomRittervg: CRIME is probably Compression: http://tco/eeuI53uV Chrome disabled Aug 3rd: http://tco/ihMrTtdE I guessed right: h http://www.secuobs.com/twitter/news/343063.shtmlhttp://www.secuobs.com/twitter/news/343063.shtml Secuobs.com : 2012-09-11 05:43:01 - jduck1337 - RT @OpenSSLFact: OpenSSL vs best practices PKCS#1 signature verification edition http://tco/MYQVo1tfhttp://www.secuobs.com/twitter/news/342777.shtmlhttp://www.secuobs.com/twitter/news/342777.shtml Secuobs.com : 2012-09-11 05:43:01 - jduck1337 - RT @ochsff: Swipe NFC, suddenly GPS tracking over SSL native ARM RAT 5 kB : http://tco/O3xHgOGLhttp://www.secuobs.com/twitter/news/342776.shtmlhttp://www.secuobs.com/twitter/news/342776.shtml Secuobs.com : 2012-09-11 05:43:01 - jduck1337 - RT @spxza: Is it unethical to use fail2ban to trigger metasploithttp://www.secuobs.com/twitter/news/342775.shtmlhttp://www.secuobs.com/twitter/news/342775.shtml Secuobs.com : 2012-09-07 23:27:20 - jduck1337 - RT @todb: Two-fisted blogging: The Metasploit #Update at http://tco/nzyHN6J0 @_juan_vazquez_ dives into CVE-2012-2611 http://tco http://www.secuobs.com/twitter/news/342085.shtmlhttp://www.secuobs.com/twitter/news/342085.shtml Secuobs.com : 2012-09-07 23:27:20 - jduck1337 - @snowfl0w can you imagine how many rootkits they must have installed after looking through malware for copyright violationshttp://www.secuobs.com/twitter/news/342084.shtmlhttp://www.secuobs.com/twitter/news/342084.shtml Secuobs.com : 2012-09-07 23:27:20 - jduck1337 - @mdowd @jvanegue hold down alt, and hit 5, 9, then let go usb keyboard is easier :-http://www.secuobs.com/twitter/news/342083.shtmlhttp://www.secuobs.com/twitter/news/342083.shtml Secuobs.com : 2012-09-07 00:25:14 - jduck1337 - @dcbz32 @i0n1c LOL, ruby is actually most popular in osx circles perhaps not true for osx exploit devs thohttp://www.secuobs.com/twitter/news/341723.shtmlhttp://www.secuobs.com/twitter/news/341723.shtml Secuobs.com : 2012-08-14 20:04:06 - jduck1337 - @asintsov found the oauth slides, any further info on the ASLR/NX stuffhttp://www.secuobs.com/twitter/news/340054.shtmlhttp://www.secuobs.com/twitter/news/340054.shtml Secuobs.com : 2012-08-14 20:04:06 - jduck1337 - @d0tslash agreed, a bit long, but had a few good points imho 0days will exist until devs stop getting away with writing buggy codehttp://www.secuobs.com/twitter/news/340053.shtmlhttp://www.secuobs.com/twitter/news/340053.shtml Secuobs.com : 2012-08-12 17:26:24 - jduck1337 - RT @s7ephen: BlackHat 2012: A Blogpost, A PhotoJournal, and slides from our talk and training http://tco/TikB9T0Xhttp://www.secuobs.com/twitter/news/339743.shtmlhttp://www.secuobs.com/twitter/news/339743.shtml Secuobs.com : 2012-08-11 15:09:04 - jduck1337 - @pod2g usrp + ida pro be careful not to accidently own your neighbors :http://www.secuobs.com/twitter/news/339616.shtmlhttp://www.secuobs.com/twitter/news/339616.shtml Secuobs.com : 2012-08-11 15:09:04 - jduck1337 - RT @d0c_s4vage: @net__ninja same with stack overflows - I really hate it when people use that one when they mean a stack-based buffer ov http://www.secuobs.com/twitter/news/339615.shtmlhttp://www.secuobs.com/twitter/news/339615.shtml Secuobs.com : 2012-08-11 15:09:04 - jduck1337 - RT @net__ninja: @d0c_s4vage yeah how annoying is it stack exhaustions = stack based buffer overflow :-http://www.secuobs.com/twitter/news/339614.shtmlhttp://www.secuobs.com/twitter/news/339614.shtml Secuobs.com : 2012-08-11 15:09:04 - jduck1337 - RT @julianor: @d0c_s4vage @net__ninja and MiTM = sniffinghttp://www.secuobs.com/twitter/news/339613.shtmlhttp://www.secuobs.com/twitter/news/339613.shtml Secuobs.com : 2012-08-06 18:05:51 - jduck1337 - RT @corelanc0d3r: @ax330d haha yeah, that comment usually makes more sense next to the available space for shellcode in an exploit :http://www.secuobs.com/twitter/news/338474.shtmlhttp://www.secuobs.com/twitter/news/338474.shtml Secuobs.com : 2012-08-06 18:05:51 - jduck1337 - RT @roeehay: Android DNS poisoning: Randomness gone bad CVE-2012-2808 http://tco/39LUCEZa #security #dnspoisoning #android #netsechttp://www.secuobs.com/twitter/news/338473.shtmlhttp://www.secuobs.com/twitter/news/338473.shtml Secuobs.com : 2012-08-03 16:21:28 - jduck1337 - RT @taviso: Random fun fact, Intel's PCI vendor ID is 0x8086 http://tco/3IRpaV5Qhttp://www.secuobs.com/twitter/news/337948.shtmlhttp://www.secuobs.com/twitter/news/337948.shtml Secuobs.com : 2012-08-02 14:53:56 - jduck1337 - @julianor @Mario_Vilas @jweyrich @ohunt @omniwired its a stack shifting vuln See phrack article on it You can write anywhere in memhttp://www.secuobs.com/twitter/news/337657.shtmlhttp://www.secuobs.com/twitter/news/337657.shtml Secuobs.com : 2012-08-01 10:49:10 - jduck1337 - RT @nudehaberdasher: Who wants Windows 8 Heap Internals paper/slides Easy 90 pages to relax and read ; https://tco/vgWBPZRthttp://www.secuobs.com/twitter/news/337363.shtmlhttp://www.secuobs.com/twitter/news/337363.shtml Secuobs.com : 2012-07-30 07:36:06 - jduck1337 - @BrandonPrry no defcon for me this yeaar,r blackhat only Left fri mornhttp://www.secuobs.com/twitter/news/336888.shtmlhttp://www.secuobs.com/twitter/news/336888.shtml Secuobs.com : 2012-07-24 23:20:37 - jduck1337 - Also, I tried triple booting osx/win/linux with refit Never saw refit boot screen once After installing linux windows nor linux will boothttp://www.secuobs.com/twitter/news/335590.shtmlhttp://www.secuobs.com/twitter/news/335590.shtml Secuobs.com : 2012-07-20 18:11:50 - jduck1337 - RT @theKos: Holy shit, buffer overflow in fsck I didn't think I screwed this FS up that badhttp://www.secuobs.com/twitter/news/335004.shtmlhttp://www.secuobs.com/twitter/news/335004.shtml Secuobs.com : 2012-07-18 12:23:03 - jduck1337 - @darelgrif @_luism maybe, but will have to search old boxes I was at the defcon, but they might have ran out of cds before I reg'dhttp://www.secuobs.com/twitter/news/334345.shtmlhttp://www.secuobs.com/twitter/news/334345.shtml Secuobs.com : 2012-07-18 12:23:03 - jduck1337 - RT @Hfuhs: CLOUD - Can't Locate Our Users Datahttp://www.secuobs.com/twitter/news/334344.shtmlhttp://www.secuobs.com/twitter/news/334344.shtml Secuobs.com : 2012-07-17 17:00:55 - jduck1337 - @jvanegue perl and cygwin both suck alone, combining them is assured failurehttp://www.secuobs.com/twitter/news/333997.shtmlhttp://www.secuobs.com/twitter/news/333997.shtml Secuobs.com : 2012-07-16 23:02:38 - jduck1337 - @a_greenberg Does Forbes have something against Chromehttp://www.secuobs.com/twitter/news/333795.shtmlhttp://www.secuobs.com/twitter/news/333795.shtml Secuobs.com : 2012-07-16 23:02:38 - jduck1337 - @a_greenberg Looks related to ScriptNo Even with it disabled in its settings not in chrome settingshttp://www.secuobs.com/twitter/news/333794.shtmlhttp://www.secuobs.com/twitter/news/333794.shtml Secuobs.com : 2012-07-16 23:02:38 - jduck1337 - RT @michaelossmann: If you want to write about Bluetooth hacking without looking like an idiot, read the Core Specification firsthttp://www.secuobs.com/twitter/news/333793.shtmlhttp://www.secuobs.com/twitter/news/333793.shtml Secuobs.com : 2012-07-16 06:02:13 - jduck1337 - RT @stdlib: I just BSoD'd Win2k8 Server by nmap'ing it I'm done for the day; gg computershttp://www.secuobs.com/twitter/news/333469.shtmlhttp://www.secuobs.com/twitter/news/333469.shtml Secuobs.com : 2012-07-16 06:02:13 - jduck1337 - Check out @garethheyes blog post on JavaScript Level Randomization JSLR, http://tco/8grEkh7N #html #defense #xsshttp://www.secuobs.com/twitter/news/333468.shtmlhttp://www.secuobs.com/twitter/news/333468.shtml Secuobs.com : 2012-07-11 12:37:00 - jduck1337 - RT @johnregehr: just got an IOC bug report of course, an integer overflow of course, in code that I wrotehttp://www.secuobs.com/twitter/news/332775.shtmlhttp://www.secuobs.com/twitter/news/332775.shtml Secuobs.com : 2012-07-09 00:19:29 - jduck1337 - RT @todb: This week's #Metasploit update is out: new Meterpreter sniffing code, some type safety on our libraries, and more: http://tco http://www.secuobs.com/twitter/news/332461.shtmlhttp://www.secuobs.com/twitter/news/332461.shtml Secuobs.com : 2012-07-09 00:19:29 - jduck1337 - RT @kokanin: Wanted security push from @oracle java- change that default always trust checkbox pleasehttp://www.secuobs.com/twitter/news/332460.shtmlhttp://www.secuobs.com/twitter/news/332460.shtml Secuobs.com : 2012-07-09 00:19:29 - jduck1337 - RT @haaspors: ARM Publishes 64-bit AArch64 Linux Kernel Support: http://tco/32i5tV4ahttp://www.secuobs.com/twitter/news/332459.shtmlhttp://www.secuobs.com/twitter/news/332459.shtml Secuobs.com : 2012-07-04 09:15:23 - jduck1337 - RT @hdmoore: Thanks to help from @stephenfewer, Metasploit now supports the Meterpreter sniffer extension on 64-bit platforms: https://t http://www.secuobs.com/twitter/news/331771.shtmlhttp://www.secuobs.com/twitter/news/331771.shtml Secuobs.com : 2012-07-04 09:15:23 - jduck1337 - @corelanc0d3r @todb including 0day might also represent a tendency towards opsec fail just a thoughthttp://www.secuobs.com/twitter/news/331770.shtmlhttp://www.secuobs.com/twitter/news/331770.shtml Secuobs.com : 2012-07-01 06:28:01 - jduck1337 - RT @todb: #Metasploit Update is out: http://tco/kXV2SRjA Meterpreter for VC2010, a pile of post modules, a nifty Flash exploit, and morehttp://www.secuobs.com/twitter/news/331377.shtmlhttp://www.secuobs.com/twitter/news/331377.shtml Secuobs.com : 2012-07-01 06:28:01 - jduck1337 - RT @bradthx: There is something ironic about a storm that takes down a cloudhttp://www.secuobs.com/twitter/news/331376.shtmlhttp://www.secuobs.com/twitter/news/331376.shtml Secuobs.com : 2012-06-28 13:08:19 - jduck1337 - RT @tmanning: Always use stack buffers so your overflows are protected by stack canaries cc @jduck1337 @0xcharliehttp://www.secuobs.com/twitter/news/330819.shtmlhttp://www.secuobs.com/twitter/news/330819.shtml Secuobs.com : 2012-06-26 22:04:37 - jduck1337 - RT @SecureTips: Be sure to check out the BlackHat panel in Vegas next month by @csoghoian and me titled Armchair Internet Superheroshttp://www.secuobs.com/twitter/news/330429.shtmlhttp://www.secuobs.com/twitter/news/330429.shtml Secuobs.com : 2012-06-22 10:05:35 - jduck1337 - RT @_juan_vazquez_: IE8 version of State-sponsored IE 0-day CVE-2012-1889 has made it to #metasploit Pastie: http://tco/e6pwf9EOhttp://www.secuobs.com/twitter/news/329298.shtmlhttp://www.secuobs.com/twitter/news/329298.shtml Secuobs.com : 2012-06-22 10:05:35 - jduck1337 - RT @BlackHatEvents: The #BlackHat USA 2012 briefings feature 36 Tools, 17 zero-days, and 49 live onstage demos Register now http://tc http://www.secuobs.com/twitter/news/329297.shtmlhttp://www.secuobs.com/twitter/news/329297.shtml Secuobs.com : 2012-06-22 10:05:35 - jduck1337 - RT @esizkur: Compared to the innovation that PaX was more than 10 years ago, all of these BlueHat entries look really lamehttp://www.secuobs.com/twitter/news/329296.shtmlhttp://www.secuobs.com/twitter/news/329296.shtml Secuobs.com : 2012-06-15 09:25:34 - jduck1337 - RT @todb: Awlright, new #Metasploit weekly blog post is out, featuring Java Meterpreter encryption, MS98-004 and more http://tco/ http://www.secuobs.com/twitter/news/327647.shtmlhttp://www.secuobs.com/twitter/news/327647.shtml Secuobs.com : 2012-06-14 01:37:07 - jduck1337 - RT @hdmoore: Introducing Metasploitable 2: https://tco/U0shLG5a a network security punching bag with documentation http://www.secuobs.com/twitter/news/327365.shtmlhttp://www.secuobs.com/twitter/news/327365.shtml Secuobs.com : 2012-06-14 01:37:07 - jduck1337 - RT @_argp: The sysret kernel bug and the Linux fix from 2006 clearly demonstrate that Linux's policy of silently patching security bugs http://www.secuobs.com/twitter/news/327364.shtmlhttp://www.secuobs.com/twitter/news/327364.shtml Secuobs.com : 2012-06-14 01:37:07 - jduck1337 - RT @DidierStevens: I did not expect to find around 500 executables on my main Windows 7 machine signed using MD5 Authenticodehttp://www.secuobs.com/twitter/news/327363.shtmlhttp://www.secuobs.com/twitter/news/327363.shtml Secuobs.com : 2012-06-13 08:29:47 - jduck1337 - RT @dfullerto: Rafal Wojtczuk just released a vulnerability affecting XEN hypervisor / Intel CPU allowing guest to host escalation http: http://www.secuobs.com/twitter/news/327124.shtmlhttp://www.secuobs.com/twitter/news/327124.shtml Secuobs.com : 2012-06-13 08:29:47 - jduck1337 - @collinrm yes, its disgusting ruby that generates asm and a gdb script Logs in memory similar to @ochsff blog Painful to extendhttp://www.secuobs.com/twitter/news/327123.shtmlhttp://www.secuobs.com/twitter/news/327123.shtml Secuobs.com : 2012-06-13 08:29:47 - jduck1337 - @ihackbanme I think mitm is a method for forcing people to visit sites, yes Hehhttp://www.secuobs.com/twitter/news/327122.shtmlhttp://www.secuobs.com/twitter/news/327122.shtml Secuobs.com : 2012-06-13 08:29:47 - jduck1337 - RT @scarybeasts: Yikes Active targeted 0-day attacks against MSXML, including Win7 Install hotfix right away: http://tco/oX9YdGBWhttp://www.secuobs.com/twitter/news/327121.shtmlhttp://www.secuobs.com/twitter/news/327121.shtml Secuobs.com : 2012-06-13 08:29:47 - jduck1337 - RT @Agarri_FR: There's probably a huge # of vectors for CVE-2012-1889 : IE, SQL Server, Office, SharePoint, #MSXML http://tco/NrsAAp4bhttp://www.secuobs.com/twitter/news/327120.shtmlhttp://www.secuobs.com/twitter/news/327120.shtml Secuobs.com : 2012-06-12 14:58:13 - jduck1337 - @marshray it suffices as is, ubuntu 1004 and 1204 so far, but I think only x64http://www.secuobs.com/twitter/news/326925.shtmlhttp://www.secuobs.com/twitter/news/326925.shtml Secuobs.com : 2012-06-12 14:58:13 - jduck1337 - RT @jcran: Setting up a dev enviroment for metasploit in Netbeans IDE: http://tco/pMrHUOms #handy /via @manils @kernelsmithhttp://www.secuobs.com/twitter/news/326924.shtmlhttp://www.secuobs.com/twitter/news/326924.shtml Secuobs.com : 2012-06-12 14:58:13 - jduck1337 - RT @trailofbits: We have published our initial analysis of Flame's MD5 collision capabilities http://tco/rsvSp6udhttp://www.secuobs.com/twitter/news/326923.shtmlhttp://www.secuobs.com/twitter/news/326923.shtml Secuobs.com : 2012-06-09 03:24:39 - jduck1337 - RT @todb: Weekly Metasploit Update is out -- read up on fuzzing Citrix StreamProcessexe and PHP/Java hash tables here: http://tco/nODg7Lyghttp://www.secuobs.com/twitter/news/326245.shtmlhttp://www.secuobs.com/twitter/news/326245.shtml Secuobs.com : 2012-06-09 03:24:39 - jduck1337 - RT @aushack: Added 2 new @metasploit modules this week Old, but rfp's msadcpl '99 exploit Inc @hdmoore s sqlrdspl and ms02-065 #pen http://www.secuobs.com/twitter/news/326244.shtmlhttp://www.secuobs.com/twitter/news/326244.shtml Secuobs.com : 2012-06-09 03:24:39 - jduck1337 - RT @marshray: It's nice that CAs are phasing out signing with MD5, but it's far important that all client apps stop *accepting* MD5 sign http://www.secuobs.com/twitter/news/326243.shtmlhttp://www.secuobs.com/twitter/news/326243.shtml Secuobs.com : 2012-06-09 03:24:39 - jduck1337 - @tmanning @noahphex well, except for all the rootkits fighting each other, hehhttp://www.secuobs.com/twitter/news/326242.shtmlhttp://www.secuobs.com/twitter/news/326242.shtml Secuobs.com : 2012-06-05 15:57:48 - jduck1337 - RT @craiu: Confirmed that Flame appears to do MitM attacks against Windows Update through Gadget module Malicious upd: WuSetupVexehttp://www.secuobs.com/twitter/news/325454.shtmlhttp://www.secuobs.com/twitter/news/325454.shtml Secuobs.com : 2012-06-05 15:57:48 - jduck1337 - RT @humperdink13: Accuvant LABS party * 7/25 wed blackhat 9pm-1am * pure@caesars if you thought last year was good, just wait paul http://www.secuobs.com/twitter/news/325453.shtmlhttp://www.secuobs.com/twitter/news/325453.shtml Secuobs.com : 2012-06-03 12:14:01 - jduck1337 - Is this Samsung bug bounty real or is someone scamming Hosted on amazon in ireland Weirdhttp://www.secuobs.com/twitter/news/325162.shtmlhttp://www.secuobs.com/twitter/news/325162.shtml Secuobs.com : 2012-06-02 19:16:33 - jduck1337 - RT @ONsec_lab: PostgreSQL all 0day vector presented by @d0znpp at this morning Error-based XXE in XMLPARSEDOCUMENT 'xml ' # http://www.secuobs.com/twitter/news/325052.shtmlhttp://www.secuobs.com/twitter/news/325052.shtml Secuobs.com : 2012-05-27 11:23:03 - jduck1337 - @miaubiz osx kernel is too ez to crash Just run a few quicktimes at once, boom Ati driver explosionhttp://www.secuobs.com/twitter/news/323719.shtmlhttp://www.secuobs.com/twitter/news/323719.shtml Secuobs.com : 2012-05-25 06:50:15 - jduck1337 - RT @egyp7: need a gem in your Metasploit install that we don't ship /opt/metasploit*/diagnostic_shell, then gem install http://www.secuobs.com/twitter/news/323160.shtmlhttp://www.secuobs.com/twitter/news/323160.shtml Secuobs.com : 2012-05-25 06:50:15 - jduck1337 - @quine @0xcharlie free 0day that wayhttp://www.secuobs.com/twitter/news/323159.shtmlhttp://www.secuobs.com/twitter/news/323159.shtml Secuobs.com : 2012-05-24 16:53:12 - jduck1337 - RT @d_olex: Windows XP keyboard layouts pool corruption LPE 0day PoC, post-MS12-034 Code: http://tco/jC7bj4rM writeup RUS: http://t http://www.secuobs.com/twitter/news/322905.shtmlhttp://www.secuobs.com/twitter/news/322905.shtml Secuobs.com : 2012-05-22 09:14:21 - jduck1337 - RT @_juan_vazquez_: Just added #Metasploit mod FlexNet License Server Manager lmgrd Buffer Overflow ZDI-12-052 Pastie: http://tco/Td6 http://www.secuobs.com/twitter/news/322195.shtmlhttp://www.secuobs.com/twitter/news/322195.shtml Secuobs.com : 2012-05-21 18:54:27 - jduck1337 - RT @mihi42: @mihi42 Or smaller #metasploit payload Win32 EXE+DLLs undetected by #AntiVirus with #srlua: http://tco/iQVUJPsz https://tc http://www.secuobs.com/twitter/news/322015.shtmlhttp://www.secuobs.com/twitter/news/322015.shtml Secuobs.com : 2012-05-21 18:54:27 - jduck1337 - RT @duosec: Nick from the Android Security Team writes in with an update about ICS ASLR: PIE and the linker randomization http://tco/F http://www.secuobs.com/twitter/news/322014.shtmlhttp://www.secuobs.com/twitter/news/322014.shtml Secuobs.com : 2012-05-20 15:43:34 - jduck1337 - RT @Bitweasil: GPUs in heaven: AMD GPU arch, nVidia mem controllers, nVidia driver team In hell: Intel GPU arch, AMD driver teamhttp://www.secuobs.com/twitter/news/321873.shtmlhttp://www.secuobs.com/twitter/news/321873.shtml Secuobs.com : 2012-05-18 10:12:42 - jduck1337 - RT @_juan_vazquez_: Just added #metasploit module Squiggle 17 SVG Browser Java Code X, thx to @Agarri_FR, demo:http://tco/3CUo5OmLhttp://www.secuobs.com/twitter/news/321440.shtmlhttp://www.secuobs.com/twitter/news/321440.shtml Secuobs.com : 2012-05-18 10:12:42 - jduck1337 - RT @bonsaiviking: @egyp7 @carnal0wnage Even if you write good code, interpreter vulns Ruby: 36, Python: 30, Perl: 22, PHP: 328 http://t http://www.secuobs.com/twitter/news/321439.shtmlhttp://www.secuobs.com/twitter/news/321439.shtml Secuobs.com : 2012-05-18 10:12:42 - jduck1337 - RT @_juan_vazquez_: Added #metasploit module weblogic apache plugin POST bof, demo http://tco/cELsKjYd, fingerprint via transfer-encodi http://www.secuobs.com/twitter/news/321438.shtmlhttp://www.secuobs.com/twitter/news/321438.shtml Secuobs.com : 2012-05-16 04:08:18 - jduck1337 - Welp, Skype released an update including new libpng At least SOMEONE besides Chrome/Firefox give a shit http://tco/AKe620NFhttp://www.secuobs.com/twitter/news/320738.shtmlhttp://www.secuobs.com/twitter/news/320738.shtml Secuobs.com : 2012-05-14 19:43:55 - jduck1337 - @infosecjerk @dwordj but cisco doesn't have code execution vulns Just denial of servicehttp://www.secuobs.com/twitter/news/320383.shtmlhttp://www.secuobs.com/twitter/news/320383.shtml Secuobs.com : 2012-05-14 19:43:55 - jduck1337 - RT @mtrancer: Firefox 8/9 AttributeChildRemoved Use-After-Free exploit for Metasploit CVE-2011-3659 - http://tco/WhdPgLuxhttp://www.secuobs.com/twitter/news/320382.shtmlhttp://www.secuobs.com/twitter/news/320382.shtml Secuobs.com : 2012-05-11 02:59:12 - jduck1337 - RT @calciu: From UXSS to code execution in Google Chrome, awesome work from Sergey Glazunov http://tco/QDLbORvehttp://www.secuobs.com/twitter/news/319636.shtmlhttp://www.secuobs.com/twitter/news/319636.shtml Secuobs.com : 2012-05-07 17:17:55 - jduck1337 - RT @quequero: Analysis of a Microsoft Windows Kernel Win32ksys Local Denial of Service Vulnerability: http://tco/vcXmxnVGhttp://www.secuobs.com/twitter/news/318635.shtmlhttp://www.secuobs.com/twitter/news/318635.shtml Secuobs.com : 2012-05-05 00:41:39 - jduck1337 - RT @i0n1c: BTW: The Metasploit exploit for the PHP CGI RCE is incomplete It does not disable suhosin, safe_mode, open_basedir, disable_ http://www.secuobs.com/twitter/news/318150.shtmlhttp://www.secuobs.com/twitter/news/318150.shtml Secuobs.com : 2012-05-04 08:31:05 - jduck1337 - BTW all, Oracle's half-baked fix thing is nothing new If anyone reversed the CPU patches, they'd get all kinds of 0dayshttp://www.secuobs.com/twitter/news/317947.shtmlhttp://www.secuobs.com/twitter/news/317947.shtml Secuobs.com : 2012-05-04 08:31:05 - jduck1337 - RT @roeehay: Android SQLite Journal Information Disclosure CVE-2011-3901 http://tco/jMn7Fh98http://www.secuobs.com/twitter/news/317946.shtmlhttp://www.secuobs.com/twitter/news/317946.shtml Secuobs.com : 2012-05-04 08:31:05 - jduck1337 - Anyone tried to trigger the fastcgi php-cgi apache_request_headers/getallheaders remote stack buffer overflow yethttp://www.secuobs.com/twitter/news/317945.shtmlhttp://www.secuobs.com/twitter/news/317945.shtml Secuobs.com : 2012-05-03 01:16:08 - jduck1337 - RT @deadbeefuk: @MDSecLabs have just released a whitepaper on iOS app assessment - check it out http://tco/k5tESXYK #iphone #ipad #ios http://www.secuobs.com/twitter/news/317477.shtmlhttp://www.secuobs.com/twitter/news/317477.shtml Secuobs.com : 2012-05-02 10:31:34 - jduck1337 - @iseezeroday hrm Phrack already is a peer reviewed journal, righthttp://www.secuobs.com/twitter/news/317262.shtmlhttp://www.secuobs.com/twitter/news/317262.shtml Secuobs.com : 2012-04-28 12:38:33 - jduck1337 - Google put up a great blog on their SDLC fuzzing initiative - Chromium Blog: Fuzzing for Security http://tco/mAX3TTInhttp://www.secuobs.com/twitter/news/316352.shtmlhttp://www.secuobs.com/twitter/news/316352.shtml Secuobs.com : 2012-04-28 12:38:33 - jduck1337 - @4Dgifts @briankrebs next java security update is in junehttp://www.secuobs.com/twitter/news/316351.shtmlhttp://www.secuobs.com/twitter/news/316351.shtml Secuobs.com : 2012-04-27 02:27:39 - jduck1337 - RT @Agarri_FR: Generic Metasploit modules for XSLT features in PHP and Java apps http://tco/OOjE2vtV Live demos at #HITB2012AMS http://www.secuobs.com/twitter/news/315902.shtmlhttp://www.secuobs.com/twitter/news/315902.shtml Secuobs.com : 2012-04-27 02:27:39 - jduck1337 - @sergeybratus @JohnLaTwC agreed in particular, exploiting heap overflows has always been a game of weird machine design - more or lesshttp://www.secuobs.com/twitter/news/315901.shtmlhttp://www.secuobs.com/twitter/news/315901.shtml Secuobs.com : 2012-04-27 02:27:39 - jduck1337 - RT @jeremiahg: Interesting stat via @daveaitel: Avg time required to create an 0-day as of Jun, 2010: 451 hours Typical consulting eng http://www.secuobs.com/twitter/news/315900.shtmlhttp://www.secuobs.com/twitter/news/315900.shtml Secuobs.com : 2012-04-25 05:42:10 - jduck1337 - RT @Android: US only Buy #GalaxyNexus unlocked on Google Play Use on any GSM network, incl T-Mobile ATT Learn more: http://tco/ http://www.secuobs.com/twitter/news/315275.shtmlhttp://www.secuobs.com/twitter/news/315275.shtml Secuobs.com : 2012-04-24 12:11:19 - jduck1337 - @iseezeroday is wondering about stack cookeis on OSX/iOS, anyone care to commenthttp://www.secuobs.com/twitter/news/315018.shtmlhttp://www.secuobs.com/twitter/news/315018.shtml Secuobs.com : 2012-04-24 12:11:19 - jduck1337 - RT @frama_c: It turns out that that other bug in a SSL implementation is already public: http://tco/9XdHGNgchttp://www.secuobs.com/twitter/news/315017.shtmlhttp://www.secuobs.com/twitter/news/315017.shtml Secuobs.com : 2012-04-24 12:11:19 - jduck1337 - @lcamtuf interesting news $20k for finding/exploiting blind attacks against Google's SaaS stackhttp://www.secuobs.com/twitter/news/315016.shtmlhttp://www.secuobs.com/twitter/news/315016.shtml Secuobs.com : 2012-04-24 12:11:19 - jduck1337 - RT @meder: you know how 10 years ago you could tell about the quality of C code by grepping for strcpy in Ruby you grep for 'send' to d http://www.secuobs.com/twitter/news/315015.shtmlhttp://www.secuobs.com/twitter/news/315015.shtml Secuobs.com : 2012-04-23 13:13:22 - jduck1337 - RT @dragosr: Oracle suing Google over a piece of code a Google employee contributed to Java http://tco/ill7yJiChttp://www.secuobs.com/twitter/news/314759.shtmlhttp://www.secuobs.com/twitter/news/314759.shtml Secuobs.com : 2012-04-23 13:13:22 - jduck1337 - RT @axtaxt: New blog post: 'Debugging Java VM's JITed code' http://tco/AzsLaGzJ #hotspot #jvm #bug #jithttp://www.secuobs.com/twitter/news/314758.shtmlhttp://www.secuobs.com/twitter/news/314758.shtml Secuobs.com : 2012-04-21 21:28:00 - jduck1337 - @i0n1c and all the 0days you put in the book sit undiscovered for yearshttp://www.secuobs.com/twitter/news/314502.shtmlhttp://www.secuobs.com/twitter/news/314502.shtml Secuobs.com : 2012-04-21 00:41:44 - jduck1337 - RT @taviso: Malformed DER parsed via the BIO interface can cause memory corruption in OpenSSL http://tco/Jlmc4txbhttp://www.secuobs.com/twitter/news/314308.shtmlhttp://www.secuobs.com/twitter/news/314308.shtml Secuobs.com : 2012-04-21 00:41:44 - jduck1337 - @caseyjohnellis haven't seen any evidence here Subject is pretty dark Dev cycle for remote kernel bugs is long and painfulhttp://www.secuobs.com/twitter/news/314307.shtmlhttp://www.secuobs.com/twitter/news/314307.shtml Secuobs.com : 2012-04-20 08:33:11 - jduck1337 - RT @pedramamini: OpenSSL 0day by @taviso http://tco/5BhuqlWM, found by @mdowd in 2006 https://tco/tP04JKy1 and SSH is spared again via http://www.secuobs.com/twitter/news/314092.shtmlhttp://www.secuobs.com/twitter/news/314092.shtml Secuobs.com : 2012-04-20 08:33:11 - jduck1337 - RT @frama_c: By the way, we found a bug in an SSL implementation A different bug Just waiting for the fix to go through So there's an http://www.secuobs.com/twitter/news/314091.shtmlhttp://www.secuobs.com/twitter/news/314091.shtml Secuobs.com : 2012-04-19 11:22:32 - jduck1337 - RT @dlitchfield: CVE-2012-0552 is a classic stack based buffer overflow that can be exploited when rebuilding a spatial index #oraclehttp://www.secuobs.com/twitter/news/313749.shtmlhttp://www.secuobs.com/twitter/news/313749.shtml Secuobs.com : 2012-04-18 15:57:51 - jduck1337 - RT @Android: Chrome for Android Beta update now available in Google Play for #Android 40 #ICS devices: http://tco/tZKGhoEyhttp://www.secuobs.com/twitter/news/313514.shtmlhttp://www.secuobs.com/twitter/news/313514.shtml Secuobs.com : 2012-04-18 15:57:51 - jduck1337 - RT @iiamit: The #SexyDefense whitepaper is available here: http://tco/pQX0j4Pj the WiKi is here: http://tco/e4aFZKpZ #SourceBOS @SOURC http://www.secuobs.com/twitter/news/313513.shtmlhttp://www.secuobs.com/twitter/news/313513.shtml Secuobs.com : 2012-04-17 20:31:32 - jduck1337 - @agl__ Hey, does openssl or anything else have tests to verify immunity to the bleichenbacher 2006 padding attackhttp://www.secuobs.com/twitter/news/313282.shtmlhttp://www.secuobs.com/twitter/news/313282.shtml Secuobs.com : 2012-04-17 20:31:32 - jduck1337 - @attritionorg You didn't go back far enough for buffer overflows found in widely deployed RSA reference implementationhttp://www.secuobs.com/twitter/news/313281.shtmlhttp://www.secuobs.com/twitter/news/313281.shtml Secuobs.com : 2012-04-17 20:31:32 - jduck1337 - RT @mattmight: In PHP and JavaScript, == is pronounced probably equalshttp://www.secuobs.com/twitter/news/313280.shtmlhttp://www.secuobs.com/twitter/news/313280.shtml Secuobs.com : 2012-04-17 20:31:32 - jduck1337 - RT @ma1: Current NoScript-clones for Chrome are broken Care about security Stick with Firefox http://tco/IFvTaV4G #ScriptNo #NotS http://www.secuobs.com/twitter/news/313279.shtmlhttp://www.secuobs.com/twitter/news/313279.shtml Secuobs.com : 2012-04-17 03:33:14 - jduck1337 - RT @mkolsek: @jduck1337 Blackhat covers this in speaking agreement: if you show a tool, it has to be freely availablehttp://www.secuobs.com/twitter/news/313063.shtmlhttp://www.secuobs.com/twitter/news/313063.shtml Secuobs.com : 2012-04-16 02:54:15 - jduck1337 - RT @0vercl0k: Statically detect bugs in C Python extensions thanks to python GCC hacking ; the guy just did an awesome work: http://tco http://www.secuobs.com/twitter/news/312784.shtmlhttp://www.secuobs.com/twitter/news/312784.shtml Secuobs.com : 2012-04-16 02:54:15 - jduck1337 - RT @roman_soft: I wrote some comments about CTFs in general and Defcon's in particular: http://tco/VocQKogv /cc @ddtek @thedarktangenthttp://www.secuobs.com/twitter/news/312783.shtmlhttp://www.secuobs.com/twitter/news/312783.shtml Secuobs.com : 2012-04-13 05:56:28 - jduck1337 - @4Dgifts sorry, to clarify: vs bundling one with known published bugs includes bugs fixed already in chrome/flash player standalonehttp://www.secuobs.com/twitter/news/312102.shtmlhttp://www.secuobs.com/twitter/news/312102.shtml Secuobs.com : 2012-04-13 05:56:28 - jduck1337 - @thegrugq I guess Adam Gowdiak is single-handedly bringing the Java bug values up - http://tco/eWNJjlxO http://tco/m3yFoKSVhttp://www.secuobs.com/twitter/news/312101.shtmlhttp://www.secuobs.com/twitter/news/312101.shtml Secuobs.com : 2012-04-12 18:53:34 - jduck1337 - RT @net__ninja: you have 15 days to evaluate the product really means you have 15 days to find an 0day and get remote code exechttp://www.secuobs.com/twitter/news/311807.shtmlhttp://www.secuobs.com/twitter/news/311807.shtml Secuobs.com : 2012-04-12 18:53:34 - jduck1337 - RT @bipartite: libo 01 released - a library for fast integer overflow detection http://tco/7KQvJ86ihttp://www.secuobs.com/twitter/news/311806.shtmlhttp://www.secuobs.com/twitter/news/311806.shtml Secuobs.com : 2012-04-12 05:26:25 - jduck1337 - I'm thoroughly entertained that hundreds of thousands of Apple fans got compromised because of Apple's failure to patch Javahttp://www.secuobs.com/twitter/news/311614.shtmlhttp://www.secuobs.com/twitter/news/311614.shtml Secuobs.com : 2012-04-12 05:26:25 - jduck1337 - RT @jruderman: Ideas for preventing MITM theft of saved passwords: https://tco/GqwUlEVphttp://www.secuobs.com/twitter/news/311613.shtmlhttp://www.secuobs.com/twitter/news/311613.shtml Secuobs.com : 2012-04-11 18:37:47 - jduck1337 - RT @RecxLtd: Blog: Recx SDL Binary Assurance, Microsoft BinScope and LookingGlass explaining the differences, what and how: http://tc http://www.secuobs.com/twitter/news/311386.shtmlhttp://www.secuobs.com/twitter/news/311386.shtml Secuobs.com : 2012-04-10 20:46:52 - jduck1337 - RT @RecxLtd: Recx Blog: Recx SDL Binary Assurance for Windows goes 10 we detail what it does http://tco/qwKQiA8f #MSFTsdl #SDL #AppS http://www.secuobs.com/twitter/news/311045.shtmlhttp://www.secuobs.com/twitter/news/311045.shtml Secuobs.com : 2012-04-10 20:46:52 - jduck1337 - RT @mylifeasageek: Freetype2 BDF integer overflow advisory http://tco/FBqhduT2 PoC at http://tco/zGGn01Emhttp://www.secuobs.com/twitter/news/311044.shtmlhttp://www.secuobs.com/twitter/news/311044.shtml Secuobs.com : 2012-04-10 20:46:52 - jduck1337 - @notsosecure I haven't given up I just don't have time to devote to it Remote kernel bugs are frustrating tho, maybe I should give uphttp://www.secuobs.com/twitter/news/311043.shtmlhttp://www.secuobs.com/twitter/news/311043.shtml Secuobs.com : 2012-04-10 20:46:52 - jduck1337 - RT @nelhage: Finally put up a demo I've been working on for a few months grep-as-you-type the entire Linux kernel source tree: http://t http://www.secuobs.com/twitter/news/311042.shtmlhttp://www.secuobs.com/twitter/news/311042.shtml Secuobs.com : 2012-04-10 20:46:52 - jduck1337 - RT @nahsra: know too much about the JVM familiar with WeakReferences can you profile written OQL to query heap dumps email me for a http://www.secuobs.com/twitter/news/311041.shtmlhttp://www.secuobs.com/twitter/news/311041.shtml Secuobs.com : 2012-04-08 21:39:44 - jduck1337 - RT @4Dgifts: whoah a code-injecting denial of service vulnI thought only Cisco knew about themhttp://tco/HHM667I4http://www.secuobs.com/twitter/news/310526.shtmlhttp://www.secuobs.com/twitter/news/310526.shtml Secuobs.com : 2012-04-04 20:20:48 - jduck1337 - RT @wkandek: Apple releases fix for critical Java flaw, Patch now as attacks are in the wild - http://tco/DwmmhWAOhttp://www.secuobs.com/twitter/news/309343.shtmlhttp://www.secuobs.com/twitter/news/309343.shtml Secuobs.com : 2012-04-04 20:20:48 - jduck1337 - RT @damienmiller: OpenSSH 60 will have sandbox support for @redpig's new seccomp syscall filter system on Linux: http://tco/Syv4dJfq yayhttp://www.secuobs.com/twitter/news/309342.shtmlhttp://www.secuobs.com/twitter/news/309342.shtml Secuobs.com : 2012-04-03 23:07:33 - jduck1337 - @janmuenther huh Java itself or customer codehttp://www.secuobs.com/twitter/news/309061.shtmlhttp://www.secuobs.com/twitter/news/309061.shtml Secuobs.com : 2012-03-30 03:14:52 - jduck1337 - RT @todb: The ripping tale of @_sinn3r and @_juan_vazquez_ 's new #Metasploit module for Java CVE-2012-0507 detailed here: http://tco/t http://www.secuobs.com/twitter/news/307856.shtmlhttp://www.secuobs.com/twitter/news/307856.shtml Secuobs.com : 2012-03-29 08:10:08 - jduck1337 - @net__ninja Very nice Planning metasploit module or Was the infoleak mentioned in that video I think @nudehaberdasher tweeted it beforehttp://www.secuobs.com/twitter/news/307619.shtmlhttp://www.secuobs.com/twitter/news/307619.shtml Secuobs.com : 2012-03-29 08:10:08 - jduck1337 - RT @nicowaisman: Have you guys have been following the Heap Overflow for Humans they are amazing https://tco/5hOFZdJghttp://www.secuobs.com/twitter/news/307618.shtmlhttp://www.secuobs.com/twitter/news/307618.shtml Secuobs.com : 2012-03-29 08:10:08 - jduck1337 - RT @todb: Are you ready kids #Metasploit is updated, now with a fancy new DNS-based payload smuggler from @corelanc0d3r http://tco/eeO http://www.secuobs.com/twitter/news/307617.shtmlhttp://www.secuobs.com/twitter/news/307617.shtml Secuobs.com : 2012-03-29 08:10:08 - jduck1337 - RT @johnregehr: more details about integer overflow in C/C++ than you probably want to know final copy of our ICSE paper: http://tco http://www.secuobs.com/twitter/news/307616.shtmlhttp://www.secuobs.com/twitter/news/307616.shtml Secuobs.com : 2012-03-29 08:10:08 - jduck1337 - MOAR denial of service only cisco vulns Is this truehttp://www.secuobs.com/twitter/news/307615.shtmlhttp://www.secuobs.com/twitter/news/307615.shtml Secuobs.com : 2012-03-28 13:51:23 - jduck1337 - Erm, is the AATL Adobe Approved Trust List the list of people that can run arbitrary code when you open their PDF http://tco/Vp3WbMjBhttp://www.secuobs.com/twitter/news/307303.shtmlhttp://www.secuobs.com/twitter/news/307303.shtml Secuobs.com : 2012-03-28 13:51:23 - jduck1337 - @aris_ada @dwordj AFAIK this list is who can delegate the ability to sign documents to others IIRC signed pdf == can execute commandshttp://www.secuobs.com/twitter/news/307302.shtmlhttp://www.secuobs.com/twitter/news/307302.shtml Secuobs.com : 2012-03-27 03:57:28 - jduck1337 - RT @joernchen: Wrote a simple Ruby on Rails scanner for accessible/protected attributes: https://tco/nSyFjJFj might help to find mass a http://www.secuobs.com/twitter/news/306820.shtmlhttp://www.secuobs.com/twitter/news/306820.shtml Secuobs.com : 2012-03-25 10:57:24 - jduck1337 - RT @net__ninja: Heap Overflows for Humans 104 - https://tco/1LJ3tRl4http://www.secuobs.com/twitter/news/306470.shtmlhttp://www.secuobs.com/twitter/news/306470.shtml Secuobs.com : 2012-03-24 21:20:03 - jduck1337 - @ochsff I managed to get eip control by using a simple test harness that prep'd the heap on linux Didn't test extensivelyhttp://www.secuobs.com/twitter/news/306354.shtmlhttp://www.secuobs.com/twitter/news/306354.shtml Secuobs.com : 2012-03-24 03:38:19 - jduck1337 - RT @miaubiz: My slogan is written on a USB cable: data powerhttp://www.secuobs.com/twitter/news/306215.shtmlhttp://www.secuobs.com/twitter/news/306215.shtml Secuobs.com : 2012-03-24 03:38:19 - jduck1337 - RT @xanda: CVE-2010-0248 MS10-002 Internet Explorer Object Handling Use After Free exploit added to Metasploit http://tco/XFBidzRnhttp://www.secuobs.com/twitter/news/306214.shtmlhttp://www.secuobs.com/twitter/news/306214.shtml Secuobs.com : 2012-03-22 21:54:08 - jduck1337 - RT @0xc0ffee: SAP wants you to almost disable ActiveX security probably not the best idea http://tco/X5sKgG2Chttp://www.secuobs.com/twitter/news/305805.shtmlhttp://www.secuobs.com/twitter/news/305805.shtml Secuobs.com : 2012-03-22 05:34:29 - jduck1337 - RT @todb: #Metasploit update is out, with the DoS PoC for RDP, @corelanc0d3r 's new http payload, and loads more: http://tco/0z6r6E8ehttp://www.secuobs.com/twitter/news/305546.shtmlhttp://www.secuobs.com/twitter/news/305546.shtml Secuobs.com : 2012-03-20 03:46:36 - jduck1337 - RT @hdmoore: @CoreSecurity we may disagree on the terms commercial-grade and exploit, in metasploit-land a remote BSoD is neitherhttp://www.secuobs.com/twitter/news/304916.shtmlhttp://www.secuobs.com/twitter/news/304916.shtml Secuobs.com : 2012-03-20 03:46:36 - jduck1337 - RT @scarybeasts: Some random weekend observations on Linux ASLR: http://tco/XFQOHy3khttp://www.secuobs.com/twitter/news/304915.shtmlhttp://www.secuobs.com/twitter/news/304915.shtml Secuobs.com : 2012-03-18 09:59:26 - jduck1337 - RT @searchio: tip: windows kernel debugging on OSX, stick to VMware Fusion 3 and _don't_ upgrade to VMware Fusion 4, serial is broken in http://www.secuobs.com/twitter/news/304471.shtmlhttp://www.secuobs.com/twitter/news/304471.shtml Secuobs.com : 2012-03-18 00:39:54 - jduck1337 - RT @hdmoore: Need some new threads Get your geek on at the new Metasploit Store: http://tco/TrcvLUxq #metasploitswag RT to win a free http://www.secuobs.com/twitter/news/304396.shtmlhttp://www.secuobs.com/twitter/news/304396.shtml Secuobs.com : 2012-03-18 00:39:54 - jduck1337 - RT @i0n1c: For those that want information about the exploits I am using All you get is: I am using 3 kernel bugs and 3 user land bugshttp://www.secuobs.com/twitter/news/304395.shtmlhttp://www.secuobs.com/twitter/news/304395.shtml Secuobs.com : 2012-03-18 00:39:54 - jduck1337 - @scarybeasts @i0n1c oh hell, I think its time to learn xss and sqlihttp://www.secuobs.com/twitter/news/304394.shtmlhttp://www.secuobs.com/twitter/news/304394.shtml Secuobs.com : 2012-03-17 15:32:21 - jduck1337 - RT @pod2g: @i0n1c Hey, that was fast Congrats for the 0day untether Awesomenesshttp://www.secuobs.com/twitter/news/304314.shtmlhttp://www.secuobs.com/twitter/news/304314.shtml Secuobs.com : 2012-03-17 06:20:38 - jduck1337 - RT @aionescu: http://tco/fZwtmpzX DoS PoC for MS12-020 in C, based on the Ruby/Python code from jduck others, based on the origin http://www.secuobs.com/twitter/news/304208.shtmlhttp://www.secuobs.com/twitter/news/304208.shtml Secuobs.com : 2012-03-17 06:20:38 - jduck1337 - @scarybeasts yeah, nevermind that the fixes were in chrome's open source repo the whole time Righthttp://www.secuobs.com/twitter/news/304207.shtmlhttp://www.secuobs.com/twitter/news/304207.shtml Secuobs.com : 2012-03-16 14:07:49 - jduck1337 - RT @dlitchfield: Exploit writing like it's 2002 Oracle classic stack-based buffer overflow 0-day No cookie; no DEP; no ASLR Fish B http://www.secuobs.com/twitter/news/304013.shtmlhttp://www.secuobs.com/twitter/news/304013.shtml Secuobs.com : 2012-03-16 14:07:49 - jduck1337 - RT @thezdi: 5 Samba remote pre-auth 0days reported yesterday, and today we receive an e-mail from the Samba team stating they have patch http://www.secuobs.com/twitter/news/304012.shtmlhttp://www.secuobs.com/twitter/news/304012.shtml Secuobs.com : 2012-03-16 14:07:49 - jduck1337 - RT @aaronportnoy: Peter @WTFuzz on our team wrote a nice blog post on how he exploited a public IE CVE from #Pwn2Own w/out heapspray: http://www.secuobs.com/twitter/news/304011.shtmlhttp://www.secuobs.com/twitter/news/304011.shtml Secuobs.com : 2012-03-15 20:40:59 - jduck1337 - RT @dlitchfield: As it happens will also be talking about giving 20/20 vision to blind SQL vulns in the Oracle PL/SQL gateway #BlackHatEUhttp://www.secuobs.com/twitter/news/303847.shtmlhttp://www.secuobs.com/twitter/news/303847.shtml Secuobs.com : 2012-03-15 10:41:11 - jduck1337 - If anyone is bored, come to #ms12-020 on freenode Live collaborative reverse engineering and exploit development http://www.secuobs.com/twitter/news/303702.shtmlhttp://www.secuobs.com/twitter/news/303702.shtml Secuobs.com : 2012-03-15 02:08:40 - jduck1337 - RT @manicode: If you are on a trusted network that can push policy to your bowser then they can MITM all SSL with no browser warning http://www.secuobs.com/twitter/news/303570.shtmlhttp://www.secuobs.com/twitter/news/303570.shtml Secuobs.com : 2012-03-15 02:08:40 - jduck1337 - RT @treyford: RT @manicode:If UR on a trusted network that pushes policy to UR browser, they can MITM all SSL w/ no warning - @jjarmoc http://www.secuobs.com/twitter/news/303569.shtmlhttp://www.secuobs.com/twitter/news/303569.shtml Secuobs.com : 2012-03-15 02:08:40 - jduck1337 - RT @hdmoore: The bounty for a reliable CVE-2012-0002 Metasploit module was just upped by $1337 $1387 so far: http://tco/0cC7VFZn cc http://www.secuobs.com/twitter/news/303568.shtmlhttp://www.secuobs.com/twitter/news/303568.shtml Secuobs.com : 2012-03-14 01:13:07 - jduck1337 - Need some new threads Get your geek on at the new Metasploit Store: http://tco/Svym2Rg2 #metasploitswaghttp://www.secuobs.com/twitter/news/303096.shtmlhttp://www.secuobs.com/twitter/news/303096.shtml Secuobs.com : 2012-03-13 02:30:12 - jduck1337 - RT @dveditz: Still haven't seen any details on the Firefox Pwn2Own bug :-http://www.secuobs.com/twitter/news/302772.shtmlhttp://www.secuobs.com/twitter/news/302772.shtml Secuobs.com : 2012-03-13 02:30:12 - jduck1337 - RT @cryptopathe: 14-year old Bleichenbacher attack still present in OpenSSL PKCS #7 code http://tco/f2Dh6RuHhttp://www.secuobs.com/twitter/news/302771.shtmlhttp://www.secuobs.com/twitter/news/302771.shtml Secuobs.com : 2012-03-12 18:52:49 - jduck1337 - @0x6D6172696F @bilcorry Not to be confused with an application sandbox eg Chrome, Office, Adobe Reader Xhttp://www.secuobs.com/twitter/news/302631.shtmlhttp://www.secuobs.com/twitter/news/302631.shtml Secuobs.com : 2012-03-11 13:52:43 - jduck1337 - RT @mramsmeets: blog Integrating DMA attacks into Metasploit: http://tco/Uo7uSLJq /c @hdmoore #metasploithttp://www.secuobs.com/twitter/news/302334.shtmlhttp://www.secuobs.com/twitter/news/302334.shtml Secuobs.com : 2012-03-10 08:08:53 - jduck1337 - RT @jeremiahg: Error Handling in Java webxml http://tco/TNousUZi simple, yet important no need to help the bad guyshttp://www.secuobs.com/twitter/news/302047.shtmlhttp://www.secuobs.com/twitter/news/302047.shtml Secuobs.com : 2012-03-10 08:08:53 - jduck1337 - RT @ryanaraine: big takeawayfrom pwn2own: dep/aslr are irrelevant sandboxes are no panacea either #findnewmitigationshttp://www.secuobs.com/twitter/news/302046.shtmlhttp://www.secuobs.com/twitter/news/302046.shtml Secuobs.com : 2012-03-10 00:25:46 - jduck1337 - RT @joernchen: Damn : Looks like the phrack proposed FORTIFY_SOURCE bypass for fmtstrings will die soon:http://tco/apsKfT5khttp://www.secuobs.com/twitter/news/301865.shtmlhttp://www.secuobs.com/twitter/news/301865.shtml Secuobs.com : 2012-03-09 13:34:09 - jduck1337 - RT @KismetWireless: http://tco/esE2mwjB Framer is doing some cool stuff w/ excessive amounts of wifi cards plugged into Kismethttp://www.secuobs.com/twitter/news/301674.shtmlhttp://www.secuobs.com/twitter/news/301674.shtml Secuobs.com : 2012-03-09 03:45:25 - jduck1337 - @i0n1c not so weird maybe, its basically a full stack-based vmhttp://www.secuobs.com/twitter/news/301528.shtmlhttp://www.secuobs.com/twitter/news/301528.shtml Secuobs.com : 2012-03-08 19:23:48 - jduck1337 - RT @mtrancer: Adobe Flash Player mp4 'cprt' Overflow exploit CVE-2012-0754 for Metasploit - https://tco/ZmzjIBc4http://www.secuobs.com/twitter/news/301358.shtmlhttp://www.secuobs.com/twitter/news/301358.shtml Secuobs.com : 2012-03-08 19:23:48 - jduck1337 - RT @dave_rel1k: Blog Spam: Building AV-safe Reverse HTTP Shell with AES Encryption + Proxy support - http://tco/9TZZwuQAhttp://www.secuobs.com/twitter/news/301357.shtmlhttp://www.secuobs.com/twitter/news/301357.shtml Secuobs.com : 2012-03-08 04:32:29 - jduck1337 - RT @julianor: adding github SSH keys wasn't always possible with wiki XSShttp://www.secuobs.com/twitter/news/301109.shtmlhttp://www.secuobs.com/twitter/news/301109.shtml Secuobs.com : 2012-03-08 04:32:29 - jduck1337 - RT @justinschuh: We have a full Chrome own at #Pwnium Looks like we will be awarding at the $60k levelhttp://www.secuobs.com/twitter/news/301108.shtmlhttp://www.secuobs.com/twitter/news/301108.shtml Secuobs.com : 2012-03-08 04:32:29 - jduck1337 - RT @scarybeasts: @jeremiahg @ryanaraine I browse using Chrome without Flash, Java, etc As do you I suspect : Remains to be seen if tha http://www.secuobs.com/twitter/news/301107.shtmlhttp://www.secuobs.com/twitter/news/301107.shtml Secuobs.com : 2012-03-06 20:48:40 - jduck1337 - @taviso hopefullyno one was, every month is month of java bugs, courtesy of oraclehttp://www.secuobs.com/twitter/news/300529.shtmlhttp://www.secuobs.com/twitter/news/300529.shtml Secuobs.com : 2012-03-06 20:48:40 - jduck1337 - RT @HaifeiLi: Seems Chrome's making mistakes on its version http://tco/cBCVFuO2, and the Flash Player hasn't been updated yet http:/ http://www.secuobs.com/twitter/news/300528.shtmlhttp://www.secuobs.com/twitter/news/300528.shtml Secuobs.com : 2012-03-06 05:40:12 - jduck1337 - RT @daeken: Simple JS version of Metasploit's pattern_*rb tools: http://tco/CqwXpIQ9http://www.secuobs.com/twitter/news/300326.shtmlhttp://www.secuobs.com/twitter/news/300326.shtml Secuobs.com : 2012-03-06 05:40:12 - jduck1337 - @taviso Interesting that Java creates such dirs Did you track down why or when this was introducedhttp://www.secuobs.com/twitter/news/300325.shtmlhttp://www.secuobs.com/twitter/news/300325.shtml