Sam Thomas

@_s_n_t

Director of research at , previously an independent researcher (). Opinions are my own etc..

secarma.co.uk/labs/
Menyertai September 2008
18 Foto atau video 18 Foto dan video Foto dan video

Tweet

Anda telah menyekat @_s_n_t

Adakah anda pasti anda mahu melihat Tweet ini? Melihat Tweet tidak akan menyekat @_s_n_t

  1. Tweet Dipinkan
    19 Mei 2018

    [ Honored | Thrilled | Terrified ] to be presenting an interesting PHP exploitation technique at this year

    12 balasan12 balasan 30 tweet semula30 tweet semula 120 suka
    Buat asal
  2. Mengetweet Semula
    2 Jan

    Full writeup on exploiting 's Math.expm1 typing bug in V8, from analysis of the bug to RCE. Definitely one of the most difficult bugs I've ever worked on. Enjoy!

    6 balasan6 balasan 195 tweet semula195 tweet semula 438 suka
    Buat asal
  3. Mengetweet Semula
    3 Jan

    🙈 It feels somewhat funny to start your new year reading a detailed description of how to turn a seemingly trivial bug of yours truly into a serious security exploit in . h/t

    2 balasan2 balasan 15 tweet semula15 tweet semula 70 suka
    Buat asal
  4. Mengetweet Semula
    3 Dis 2018

    Learn all about Phar Deserializations, a new exploitation technique in PHP that leads to RCE in . Open now the third door of our Calendar 2018

    Day 3 - WooCommerce #2
    8 tweet semula8 tweet semula 24 suka
    Buat asal
  5. Mengetweet Semula
    21 Nov 2018

    This post reviews OGNL mitigation measures in Struts and how they were bypassed in the past, leading up to a CVE-2018-11776 exploit that actually works.

    62 tweet semula62 tweet semula 112 suka
    Buat asal
  6. Mengetweet Semula
    20 Nov 2018

    How a Phar Deserialization can affect your application - step-by-step analysis of a real-world example in the famous phpBB3 forum

    2 balasan2 balasan 26 tweet semula26 tweet semula 44 suka
    Buat asal
  7. Mengetweet Semula
    15 Nov 2018

    PHPGGC: I merged PharGGC (and some more) ! We now support TAR, ZIP and PHAR file formats, along with polyglot JPEG as described in his talk.

    20 tweet semula20 tweet semula 34 suka
    Buat asal
  8. 13 Nov 2018

    My talk on abusing the "phar://" stream wrapper from is up on youtube! - Slides at: Whitepaper at:

    1 balasan1 balasan 18 tweet semula18 tweet semula 49 suka
    Buat asal
  9. Mengetweet Semula
    12 Nov 2018

    Here are the slides for our 2018 talk on New PHP Exploitation Techniques

    2 balasan2 balasan 78 tweet semula78 tweet semula 144 suka
    Buat asal
  10. Mengetweet Semula
    2 Nov 2018

    Old School Pwning with New School Tricks :: Vanilla Forums domGetImages getimagesize Unserialize Remote Code Execution Vulnerability:

    5 balasan5 balasan 103 tweet semula103 tweet semula 152 suka
    Buat asal
  11. Mengetweet Semula
    17 Ogo 2018

    Cool new PHP deserialization vector: trigger unserialize() on attacker controlled data via phar:// stream wrapper a la LFI/XXE

    Great talk from Sam Thomas () . The recording will be available soon. If you want to read more you can find the whitepaper here:
    3 balasan3 balasan 13 tweet semula13 tweet semula 29 suka
    Buat asal
  12. Mengetweet Semula
    17 Ogo 2018

    Many thanks to for his superb work recording/editing the video, and for hosting a consistently awesome community conference.

    1 balasan1 balasan 4 tweet semula4 tweet semula 8 suka
    Tunjukkan thread ini
    Tunjukkan thread ini
    Buat asal
  13. Mengetweet Semula
    17 Ogo 2018

    [Video] from . yesterday where . showed how to do battle with Next Gen AV with liberal use of copy/paste from StackOverflow. It is shaping up nicely for Red Teaming engagements.

    1 balasan1 balasan 14 tweet semula14 tweet semula 39 suka
    Buat asal
  14. Mengetweet Semula
    16 Ogo 2018

    The recording of 's talk from is now available to watch here:

    1 balasan1 balasan 6 tweet semula6 tweet semula 13 suka
    Buat asal
  15. Mengetweet Semula
    16 Ogo 2018

    For today only.. only.. only. *taps mic* At 10am on Track 2 for .. The one, the only. James "hiding in your memory" Williams will be in charge of all that you can see and hear. Go along, he will hide in your memory too.

    4 tweet semula4 tweet semula 8 suka
    Buat asal
  16. Mengetweet Semula
    14 Ogo 2018

    We added a new PHP exploitation technique found by to our RIPS code analysis engine. Find out more about the technique in our blog post:

    2 balasan2 balasan 30 tweet semula30 tweet semula 45 suka
    Buat asal
  17. 10 Ogo 2018

    The pharggc branch of phpggc is here: thanks to for letting me branch the original

    4 tweet semula4 tweet semula 10 suka
    Buat asal
  18. 10 Ogo 2018

    Seems like the slides and whitepaper from my talk at Black Hat haven't appeared for some reasons - I've put copies here: - thanks for the opportunity it was a privilege

    27 tweet semula27 tweet semula 40 suka
    Buat asal
  19. Mengetweet Semula
    10 Ogo 2018

    Note to friends - It’s totally okay to feel overwhelmed and anxious at Defcon, it’s a lot to have to be on socially, navigate Vegas casinos, Defcon shenanigans, etc Remember to take time for yourself, a breather by the pool, in your room, etc. You do you 😎

    1 balasan1 balasan 4 tweet semula4 tweet semula 31 suka
    Buat asal
  20. 9 Ogo 2018

    So I guess this is actually happening

    3 balasan3 balasan 1 tweet semula1 tweet semula 14 suka
    Buat asal
  21. Mengetweet Semula
    2 Ogo 2018

    New blog post showing how to escape the sandbox used by Microsoft Office for MacOS. Hopefully useful for redteams targeting MacOS endpoints

    13 balasan13 balasan 247 tweet semula247 tweet semula 420 suka
    Buat asal

@_s_n_t belum lagi Tweet.

Pemuatan nampaknya mengambil sedikit masa.

Twitter mungkin melebihi kapasiti atau mengalami gangguan seketika. Cuba sekali lagi atau lawati Status Twitter untuk mendapatkan maklumat lanjut.

    Anda juga mungkin menyukai

    ·