I hacked the SAP AI platform by changing my UID to 1337. …Yeah, really. This led to admin permissions on several SAP systems, but also access to customers’ secrets and private AI files 👀 This is the story of #SAPwned 🧵⬇️

I’m begging for infosec people, please before announcing something is “vulnerable” at least read the documentation, just in case it explicitly details the supposed vulnerability such as here. Developers like me don’t just write them as a joke.

What...is a black job ?

Americans will do ANYTHING not to use the metric system

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confus… Highlights include: ⚡ Escaping from DocumentRoot to System Root ⚡ Bypassing built-in ACL/Auth with just a '?' ⚡ Turning XSS into RCE with legacy code

Cool article about the research I presented at DEFCON this year! wired.com/story/apple-pr…

I love the togetherness of the Olympics. Whatever our differences, we can all bind together to watch THIS CONTENT NOT AVAILABLE IN YOUR REGION. Who could forget the race for gold in THIS VIDEO HAS BEEN REMOVED IN RESPONSE TO A REPORT FROM THE COPYRIGHT HOLDER

Are you living near Paris, female*, and want to learn reverse engineering for free? 📱👩‍💻 There'll be a 4-day Blackhoodie training at Hexacon! I'll be giving the training on two days, teaching iOS and Android reversing basics. Register now: reversing.training/hc24

At the following link you can find all the infos related to a C++ implant i created for sliver C2: infosec.exchange/@ale98/1130757… Thanks goes of course to Bishop Fox, Moloch, rkvl and the contributors for the awesome tool!

The Emptiness Machine. #FromZero

ITS FLAT FUCK FRIDAY ROLL THE CLIP

Who hacks the hackers? We do! Our new research on vulns in multiple common C2 frameworks used by netpen and red teams. If you use any of these take a look and patch up. blog.includesecurity.com

Come work with me! bishopfox.com/jobs?gh_jid=62…

gaining access to anyones browser without them even visiting a website (CVE-2024-45489) kibty.town/blog/arc/

I don't usually ask for help on X, but the situation I'm dealing with is seriously f*cked up... Details below ⤵️

Ghost of Yotei: The acclaimed Ghost of Tsushima is getting a sequel arstechnica.com/?p=2052227

The American Mind Can't Comprehend

CTF players be like

Just published a new write-up - Hacking 700 Million Electronic Arts Accounts battleda.sh/blog/ea-accoun…

its very cool that youtube is the largest collection of video footage ever assembled and it's borderline impossible to search. rocking up to the library of alexandria and the guy keeps showing you the same three scrolls and standing in your way if you try to look at anything else