@HyperionGray

Software & Security Research, Penetration Testing, Ethical Hacker Education

 Concord, NC
hyperiongray.com
Joined January 2013
  • Tweets295
  • Following4.1K
  • Followers4.6K
15Media
arstechnica.com/gadgets/2020… Remind me why a platform promoting accessibility of information would limit that ability?!

YouTube celebrates Deaf Awareness Week by killing crowd-sourced captions

500,000 signatures aren't stopping YouTube from shutting down accessibility feature.

arstechnica.com
3
Zero Day Alert: Cisco Issues Warning Over IOS XR Zero-Day Flaw Being Targeted in the Wild thehackernews.com/2020/09/ci… via @TheHackersNews

Cisco Issues Warning Over IOS XR Zero-Day Flaw Being Targeted in the Wild

Cisco Issue Warning Over IOS XR Zero-Day Flaw Being Targeted in the Wild

thehackernews.com
1
Happy Monday to all researchers. We hope you have a very successful week of hunting and programming. Should you want to sell any technologies don't hesitate to contact us.
1
3
Expectation: I'll use GraphViz to plot this callgraph and it will make the structure perfectly clear Reality:
55
212
32
1,590
We are firm believers that researchers should get the money they deserve for the research they conduct. It takes time and effort. Zero Security prides itself on helping people from all over the world. We are currently accepting new clients to represent as we continue to expand
1
1
3
Chainlink is a Russian pump-and-dump fraud. Until when are such fraudulent activities going to happen under @SEC_Enforcement @SEC_News watch? Protect the American people from Russian fraudsters! @coinbase why are you tolerating this scam on your platform? @brian_armstrong $LINK
297
210
59
985
The Spectre Rootkit is now released alongside my @BlackHatEvents USA talk, Demystifying Modern Windows Rootkits. Go check it out! github.com/d4stiny/spectre

GitHub - D4stiny/spectre: A Windows kernel-mode rootkit that abuses legitimate communication...

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine. - D4stiny/spectre

github.com
4
242
4
511
Hyperion Gray retweeted
3xp0rt
@3xp0rtblog6 Aug 2020
Cerberus Bot v2 source can leak to the criminal forum xss[.]is, source code already available for the admin of the forum. The seller looked for a guy who can manage the project but doesn't found. Cerberus Bot selling has been closed because no way to manage a project.
4
15
1
37
Hyperion Gray retweeted
Danus@danusminimus24 Jul 2020
I've been taking a huge interest in APTs recently and Threat Intelligence in general and I found this paper called "A Threat Actor Encyclopedia" by @ThaiCERT and it's fire! 🔥 thaicert.or.th/downloads/fil…
1
11
34
Tor 0-Day: Stopping Tor Connections Very interesting read and research! hackerfactor.com/blog/index.…
Don't forget to sign up for our Green Belt course on 0-Day Hunting! hyperiongray.com/htp/ Date: 07/30/2020 Spaces are limited!!
1
Hyperion Gray retweeted
Axel Souchet@0vercl0k19 Jul 2020
If you need to debug a Linux kernel Hyper-V guest check out github.com/weltling/convey. Allows you to kernel debug the guest from WSL on the host which is neat.
2
80
4
265
OPSEC Fail! Iranian #APT35 hackers accidentally exposed 40 GB worth of sensitive data online, containing #hacking training videos that revealed they managed to hack a member of the U.S. Navy, and a Greek naval officer. Read Details — thehackernews.com/2020/07/ir… #cybersecurity

Iranian Hackers Accidentally Exposed Their Training Videos (40 GB) Online

An Iranian state-sponsored hacking group accidentally exposed roughly 40 GB of hacking training videos on the Internet.

thehackernews.com
3
22
2
37
Some Friday humor to help jump start the weekend!
Sy Brand@TartanLlama16 Jul 2020
Objection! A Language Lawyer Story 🔊 for my awful voice acting
2
2
Hyperion Gray retweeted
Forrest Orr
@_ForrestOrr16 Jul 2020
My new research and open source memory scanner tool Moneta dives deep into the topic of memory stealth and forensics when designing malware or fine tuning detection for it. Many should find this information valuable forrest-orr.net/post/masking…

Masking Malicious Memory Artifacts – Part II: Blending in with False Positives

IntroductionWith fileless malware becoming a ubiquitous feature of most modern Red Teams, knowledge in the domain of memory stealth and detection is becoming an increasingly valuable skill to add to...

forrest-orr.net
4
91
5
187
OK, we talked to another hacker. Were able to confirm how they got accounts: Twitter employee used internal tool to change email addresses associated with accounts. Twitter seems to have just confirmed this in tweets as well vice.com/en_us/article/jgxd3…
56
923
177
1,471
Hyperion Gray retweeted
j00ru//vx@j00ru16 Jul 2020
At last, the series begins: MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface. googleprojectzero.blogspot.c… I'm excited to start sharing more about this work, starting with a deep dive into the internals and history of the codec.

MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface

Posted by Mateusz Jurczyk, Project ZeroThis post is the first of a multi-part series capturing my...

projectzero.google
3
218
6
437
Hyperion Gray retweeted
iFenix@dlymension16 Jul 2020
tfp0 on iOS 13.6 - by @_simo36
16
53
2
333
From @FireEye : Financially Motivated Actors Are Expanding Access Into OT ~Attackers are getting more and more comfortable in our industrial spaces. fireeye.com/blog/threat-rese…
1
9
2
23
Load more