udunadan@infosec.pub

udunadan

udunadan@infosec.pub

An open-eyed man falling into the well of weird warring state machines. I mostly speak on (offensive) cybersecurity issues.

https://twitter.com/udunadan

https://infosec.exchange/@udunadan

49 Posts
0 Comments

Joined 1 year ago

Cake day: June 14th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

udunadan@infosec.pub

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

No More Speculation: Exploiting CPU Side-Channels for Real

bughunters.google.com

No More Speculation: Exploiting CPU Side-Channels for Real

bughunters.google.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Diving into Windows Remote Access Service for Pre-Auth Bugs

www.blackhat.com

Diving into Windows Remote Access Service for Pre-Auth Bugs

www.blackhat.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

iOS 17: New Version, New Acronyms

www.df-f.com

iOS 17: New Version, New Acronyms

www.df-f.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine

cfp.recon.cx

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine

cfp.recon.cx

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox

medium.com

Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox

medium.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability

github.com

In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability

github.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

[Chrome] CVE-2023-2033

github.com

[Chrome] CVE-2023-2033

github.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers

www.zerodayinitiative.com

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers

www.zerodayinitiative.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

An Introduction to Exploit Reliability

blog.isosceles.com

An Introduction to Exploit Reliability

blog.isosceles.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis

securityintelligence.com

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis

securityintelligence.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Summary: MTE As Implemented

googleprojectzero.blogspot.com

Summary: MTE As Implemented

googleprojectzero.blogspot.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

All known API based kernel address leaks on Windows no longer work

twitter.com

All known API based kernel address leaks on Windows no longer work

twitter.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel

qyn.app

CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel

qyn.app

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Escaping the Google kCTF Container with a Data-Only Exploit

h0mbre.github.io

Escaping the Google kCTF Container with a Data-Only Exploit

h0mbre.github.io

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

The Legacy of Stagefright

blog.isosceles.com

The Legacy of Stagefright

blog.isosceles.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray

starlabs.sg

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray

starlabs.sg

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS]

github.com

CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS]

github.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

A new method for container escape using file-based DirtyCred

starlabs.sg

A new method for container escape using file-based DirtyCred

starlabs.sg

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

[Chrome] UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000)

crbug.com

[Chrome] UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000)

crbug.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

udunadan@infosec.pub

Zenbleed

lock.cmpxchg8b.com

Zenbleed

lock.cmpxchg8b.com

udunadan@infosec.pubM to Exploit Development@infosec.pubEnglish · 1 year ago

Moderates

Exploit Development@infosec.pub

Warning: Some posts on this platform may contain adult material intended for mature audiences only. Viewer discretion is advised. By clicking ‘Continue’, you confirm that you are 18 years or older and consent to viewing explicit content.

udunadan

Moderates