After running nmap -A against my printer... 😆😆😆

CHEGOU! O #PapoBinário dessa semana tá no ar! Uma conversa boa demais sobre engenharia reversa com o grande Julio Auto. Tem que ver: bit.ly/3b0OI8E

I just published a write-up about my DomPurify bypass vovohelo.medium.com/from-svg-and-b…. Special thanks to @[email protected], Gareth Heyes \u2028, Cure53, and LiveOverflow 🔴 for the incredible research material that made finding this bypass possible. #bugbountytip #xss

We have an open position on our team!

Verifying myself: I am danilonc on Keybase.io. U6BGEaHuBDODnOaxsX65DecfznHlN3GKlF32 / keybase.io/danilonc/sigs/…

Had time to do one challenge this weekend (baby is still super dependent!), had fun with TheGoonies CTF Team and #UnionCTF. Here's my writeup: thegoonies.github.io/2021/02/21/uni…

Physical book has finally arrived 😁

#Linux D-Bus evaluation and Nimbuspwn (because I have to come up with silly names): microsoft.com/security/blog/…

Yesterday was my last day working at Mayo Clinic! It has been 5 years with an Amazing team testing medical devices and healthcare systems. I am excited to join Microsoft security team.

The cloudflare blog blog.cloudflare.com/zenbleed-vulne… mentions that it might be possible to exploit the Zenbleed via browser. Does anyone have an idea what browser APIs / gadgets give control of AVX instructions?

Lazy Internet: is there a Linux package manager similar to Homebrew or Nix but that all packages are statically compiled? Use-Case: you don't have root access on a machine (so no /nix or /home/linuxbrew/) and don't want to recompile everything.

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)! I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis

You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/542484235…

MCP can utilize either stdio or HTTP SSE. In the case of HTTP, how many DNS rebinding vulnerabilities will arise? 🤔