Yorick Koster

@yorickkoster

Alas, poor Yorick! software security guy, breaks web & app, loves the smell of debuggers in the morning, eats code for lunch, co-founder

Netherlands
securify.nl
Menyertai 2013 Jun
58 Foto atau video 58 Foto dan video Foto dan video

Tweet

Anda telah menyekat @yorickkoster

Adakah anda pasti anda mahu melihat Tweet ini? Melihat Tweet tidak akan menyekat @yorickkoster

  1. 5 Apr

    Results so far: two Mac apps with LPE vulnerabilities

    Finally time for security research 🤣
    2 tweet semula2 tweet semula 4 suka
  2. Mengetweet Semula
    3 Apr

    Enhanced GFlags tool:

    14 tweet semula14 tweet semula 21 suka
  3. Mengetweet Semula
    3 Apr

    [Blog] Defeating Device Guard: A look into CVE-2017-0007

    7 balasan7 balasan 205 tweet semula205 tweet semula 208 suka
  4. Mengetweet Semula
    3 Apr

    The new macOS/iOS kernel bug slaughter list by P0's Ian Beer:

    2 balasan2 balasan 80 tweet semula80 tweet semula 82 suka
  5. 31 Mac

    Finally time for security research 🤣

    4 suka
  6. 31 Mac

    I'm in a rock

  7. Mengetweet Semula
    31 Mac

    It was way too hard, but I figured out how to have different passwords for FDE (FileVault 2) and sudo/login in macOS

    14 balasan14 balasan 86 tweet semula86 tweet semula 152 suka
  8. Mengetweet Semula
    23 Mac

    For now, enjoy Liniaal on your Red Team engagements:

    1 balasan1 balasan 25 tweet semula25 tweet semula 30 suka
  9. Mengetweet Semula
    22 Mac

    2 tweet semula2 tweet semula
  10. Mengetweet Semula
    22 Mac

    A preview of what I've been working on. Red team tool for rapid generation of cross-platform modular VBA malware code with lots of new TTPs

    10 balasan10 balasan 43 tweet semula43 tweet semula 124 suka
  11. Mengetweet Semula
    22 Mac

    Shocking news. Another "next gen" cyber company takes my research (Recon 2015: Hooking Nirvana) and creates FUD

    14 balasan14 balasan 177 tweet semula177 tweet semula 240 suka
  12. Mengetweet Semula
    22 Mac

    Android O: 'no longer supports SSLv3' and 'HttpsURLConnection does not perform insecure TLS/SSL protocol version fallback'

    26 tweet semula26 tweet semula 25 suka
  13. Mengetweet Semula
    21 Mac

    How I used 's Privledge Escalation to get DA (CVE-2017-100) :) Blog Post here:

    1 balasan1 balasan 136 tweet semula136 tweet semula 168 suka
  14. Mengetweet Semula
    20 Mac

    Stealing hashes over internet via regsvr32. Accidentally found this :)

    5 balasan5 balasan 113 tweet semula113 tweet semula 184 suka
  15. Mengetweet Semula
    20 Mac

    [Blog] New RCE vector affecting Struts2 applications. If you did not upgrade last week, do it now!

    50 tweet semula50 tweet semula 42 suka
  16. Mengetweet Semula
    20 Mac

    This is cool, good evasion technique so far.

    Ever used these strange Office URI's for phishing? Very interesting to me. Give it a try.
    4 tweet semula4 tweet semula 7 suka
  17. Mengetweet Semula
    20 Mac

    My bugs fixed by MS in the last Patch Tuesday (Windows Registry, GDI, GDI+, Uniscribe, ICM) are now unrestricted:

    1 balasan1 balasan 91 tweet semula91 tweet semula 106 suka
  18. Mengetweet Semula
    20 Mac

    UXSS/SOP bypass on IE: more adventures in a domainless world, thanks to incomplete and non-backported patches. 🤔😬

    4 balasan4 balasan 85 tweet semula85 tweet semula 101 suka
  19. Mengetweet Semula
    17 Mac

    Confirmed! Tencent Security - Team Sniper used a Windows kernel UAF, a VMware infoleak & an uninitialized VMware buffer to go guest-to-host.

    7 balasan7 balasan 367 tweet semula367 tweet semula 389 suka

@yorickkoster belum lagi Tweet.

Pemuatan nampaknya mengambil sedikit masa.

Twitter mungkin melebihi kapasiti atau mengalami gangguan seketika. Cuba sekali lagi atau lawati Status Twitter untuk mendapatkan maklumat lanjut.

    Anda juga mungkin menyukai

    ·