Red Cursor Your Point for Security
Joined May 2018
- Tweets 36
- Following 77
- Followers 47
- Likes 10
Photos and videos
4 Jun 2020
Women in Cybersecurity don't forget you can still get tickets (free) to attend the talks @0xCC_sh here lnkd.in/eK4Maik
1
6
8
Not that we need a special day to celebrate all the awesome women in our lives but #IWD2020 is a great excuse to give praise! 🎉🎊
We'll start!
#InternationalWomensDay #InternationalWomensDay2020
1
3
14
We’re ecstatic to announce
@RedCursorSec
as our latest Gold sponsor!
They’re passionate about breaking down barriers to foster a more positive and empowering environment for women in cyber security and we’re so glad to have their support!
More info: redcursor.com.au
2
9
26 Feb 2020
Remote Code Execution on Exchange due to static encryption key. thezdi.com/blog/2020/2/24/cv…
1
20 Feb 2020
Michael has put together a working #PoC for CVE-2020-0668 that allows privilege escalation on all versions of Windows up until the Feb 2020 patch Tuesday. Check it out here: github.com/RedCursorSecurity… #netsec
1
Red Cursor retweeted
9 Oct 2018
This is a big deal. Just answering a call from an attacker could completely compromise WhatsApp.
9 Oct 2018
Memory corruption bug in WhatsApp's non-WebRTC video conferencing implementation bugs.chromium.org/p/project-…
9
326
477
4 Jul 2018
Another bypass x.com/yeyint_mth/status/9973…
18 May 2018
#rednote ProtocolHandler are also work with obf
rundll32 url.dll,OpenURL http://^2^8^9^9^9^0^9^3^8^0^/
rundll32 url.dll,OpenURL file://^C^:^/^W^i^n^d^o^w^s^/^s^y^s^t^e^m^3^2^/^c^a^l^c^.^e^x^e #redteam
4 Jul 2018
Interesting AppLocker bypass x.com/bohops/status/10113503…
Interesting way to call a COM CLSID:
rundll32.exe -sta {CLSID}
rundll32.exe /sta {CLSID}
Use this with @subTee's #squiblydoo COM Hijack method for a default AppLocker Bypass
Haven't found any sec-related resources with -sta (single threaded apartment)
Anyone seen this before?
4 Jul 2018
Today I learned x.com/yeyint_mth/status/1009…
21 Jun 2018
sometime we forgot native ftp.exe client in windows that can execute system cmd without direct access to cmd.exe #redteam #rednote
22 Jun 2018
Very useful proof of concept for demonstrating misconfigured CORS policies github.com/trustedsec/cors-p…
12 Jun 2018
This is a very good blog to follow if you are looking at learning lateral movement techniques. Latest article...Kerberoast pentestlab.blog/2018/06/12/k…
31 May 2018
Integer Overflow makes Ghandi bad in original civ game (via @KotakuAU) kotaku.com.au/2014/11/why-ga…