Ricardo (@sanineties) profile picture

Ricardo

@sanineties

Infosec curious/learner.

Joined December 2013
  • Tweets42
  • Following1.1K
  • Followers73
PHP2Shell: understand the vulnerabilities, assess your exposure, and take action. Our technical analysis covers exploitation conditions, mitigation measures, and patching considerations. labs.integrity.pt/articles/p… #PHP2Shell @morisson @sanineties
4
5
227
Evading EDR, by Matt Hand, gives an inside look look at how Endpoint Detection & Response agents pinpoint adversary activity. Learn the ways each sensor component collects data, how to design an EDR, & how to evade one. Pre-order at 30% off w/ code GOTCHA: nostarch.com/evading-edr
Image from No Starch Press (@nostarch)
8
345
23
1,502
250,574
OH: Success is like alcohol. It magnifies the person you already are. So if you’re nice, you’ll be nicer. And if you’re an ass, you’ll become more of one.
6
8
51
ICYMI: tickets are available and the CFP is still open (talks and workshops). Https://bsideslisbon.org We’re less than 3 months away from the con!
7
9
Video up! Securing^WAttacking Kubernetes - Vincent Ruijter @_evict youtube.com/watch?v=t3TIyXXp…
12
1
24
So I finally decided to write about a cool (old) story with JBoss medium.com/@r0t1v/pwning-jbo… /cc @henshinpt @morisson
Pwning JBoss Seam 2 like a boss

Pwning JBoss Seam 2 like a boss

I haven’t been writing for a long time, so I finally decided to write about a cool (old) story with JBoss.

r0t1v.medium.com
2
69
2
174
@stevelord “there’s better ways to get laid than reversing micro controllers” #BSidesLisbon 😂👏🏻
2
1
10
Several SSDs with hardware encryption appear to be busted. But the really terrible thing is that Bitlocker apparently relies totally on the SSD encryption if you have it. ru.nl/publish/pages/909275/d… via @ProfWoodward
Image from Matthew Green (@matthew_d_green)
Image from Matthew Green (@matthew_d_green)
43
1,407
278
1,864
Tickets are now available! Enjoy! :) bsideslisbon.eventbrite.pt/
3
34
2
43
So, I did this: github.com/wbenny/ia32-doc If you ever wanted to write your own hypervisor, experiment with SGX, perf. counters, fiddle with CPUID or MSRs, just include this file and you're good to go. github.com/wbenny/ia32-doc/b… No more tiring copy-paste-editing from Intel Manual.
GitHub - ia32-doc/ia32-doc: IA32-doc is a project which aims to put as many definitions from the...

GitHub - ia32-doc/ia32-doc: IA32-doc is a project which aims to put as many definitions from the...

IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible - ia32-doc/ia32-doc

github.com
3
196
4
461
Ricardo retweeted
Ben Gras (@bjg) profile picture
Ben Gras@bjg10 Jul 2018
Overview and full details on #TLBleed including paper is online at vusec.net/projects/tlbleed/ cc @kavehrazavi @vu5ec @c_giuffrida @herbertbos

TLBleed - vusec

Overview TLBleed is a new side channel attack that has been proven to work on Intel CPU’s with Hyperthreading (generally Simultaneous Multi-threading, or  SMT, or HT on Intel) enabled. It relies on...

vusec.net
89
5
110
Replying to @MalwareJake
@MalwareJake
Image from Alexander Kot (@Alex_S_Kot)
2
8
1
28
For those who say hardware 2FA tokens have no use today.
Image from Scott Bollinger (@kfalconspb)
40
526
29
1,798
Our latest research blogpost is out! Beyond XSS: Edge Side Include Injection Abusing Caching Servers into SSRF and Client-Side Attacks gosecure.net/2018/04/03/beyo… #injection #ssrf #xss #appsec #allthatgoodstuff
161
5
213
Just finishing my fuzzer for MacOS Sierra authentication bypass
18
948
51
2,421
Ricardo retweeted
STT (@STTSec) profile picture
STT@STTSec17 Nov 2017
STT entre as 5 melhores equipas europeias na final do CSAW CTF 2017 #GoSTT tecnico.ulisboa.pt/pt/notici… via @istecnico
STT entre as 5 melhores equipas europeias na final do CSAW CTF 2017

STT entre as 5 melhores equipas europeias na final do CSAW CTF 2017

A equipa do Técnico alcançou ótimas pontuações tanto a nível europeu como global, por entre um total de 55 equipas.

tecnico.ulisboa.pt
1
6
How to takeover Joomla! in 20 seconds via blind LDAP injection - 8 years overlooked vulnerability detected by RIPS blog.ripstech.com/2017/jooml…
8
484
30
690
The Periodic Table of #CyberSecurity {Infographic} #infosec #CyberAttack #autonomous #IoT #Insurtech #fraud #IIoT #networksecurity #mobile
Image from WiseCrowd (@WiseCrowdGlobal)
2
2
What's in an address: understanding DDR memory mapping depletionmode.com/2015/12/08…
3
11
Europe‍'s general #data protection regulation‍ policy‍.. ow.ly/iuer30ex9Dx
3
Load more