Security researcher. Tennis player. Bourbon taster. Animal lover. Lawn care nut. Opinions are my own.

Joined January 2011
5 Photos and videos
Chris Lyne retweeted
Do you enjoy capture the flag contests and solving hard problems? Check out Praetorian's cyber tech challenges! Solve problems. Get hired! ow.ly/AJtq50IKb7e
1
1
Chris Lyne retweeted
Because inadvertent secrets disclosure is a common attack path into an org, we developed Nosey Parker—a ML powered scanner for locating secrets. With a precision of 98.5%, Nosey Parker is an order of magnitude better than existing secrets solutions praetorian.com/blog/nosey-pa…
4
7
Chris Lyne retweeted
4 Feb 2022
Found some issues in Gryphon routers that let you root other people's devices across the internet through a shared Gryphon VPN service: medium.com/tenable-techblog/…
1
4
5
Chris Lyne retweeted
I'm really excited for this video! I got a chance to collab with @LiveOverflow and share the process for discovering the localhost bypass for CVE-2021-45046 with code review and differential fuzzing. :)
After the log4shell vulnerability was patched with version 2.15, another CVE was assigned. Let's have a closer look at the localhost JNDI connections bypass and learn about fuzzing Java applications. youtube.com/watch?v=kvREvOvS…
1
2
18
Chris Lyne retweeted
10 Sep 2021
I'd like to share this to demonstrate this is what I sacrificed to stay sharp in infosec. Blue is the ideal line, yellow is the actual. My arms started to feel numb. My doc said I was about a few years away to need a surgery. If you do a lot late night hacking, think about this.
51
159
655
1 Sep 2021
Anyone have training recommendations for thick client pen testing / bug hunting?
1
Chris Lyne retweeted
17 Aug 2021
First in a set of wicked twin blogs by @lynerc & @CE2Wells : Stored XSS to RCE Chain as SYSTEM in ManageEngine ServiceDesk Plus by @lynerc link.medium.com/pSyRF7gsNib
5
11
Chris Lyne retweeted
3 Aug 2021
Found a couple bugs in some Buffalo routers, one of which happened to affect a bunch more devices. link.medium.com/EvlKxCJaqib
1
7
14
Chris Lyne retweeted
3 Aug 2021
A little video demo from the Buffalo writeup ( link.medium.com/EvlKxCJaqib ) :
1
20
30
Chris Lyne retweeted
Super excited to present my research @IoTvillage #defcon29!
Catch @kojenov's #iotvillage talk first thing Sat morning (Aug 7) at 10am PT @defcon! All talks will be streamed on our Twitch: twitch.tv/iotvillage To view our entire #defcon29 talk schedule, visit: iotvillage.org/defcon.html
4
9
Chris Lyne retweeted
“Examining Crypto and Bypassing Authentication in Schneider Electric PLCs (M340/M580)” by Nicholas Miles link.medium.com/aeJf0VbrRhb

2
5
9
Chris Lyne retweeted
New blog from @tenablesecurity researcher @clairetills on the proof-of-concept exploit for CVE-2020-3850, a cross-site scripting vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense software web services. ow.ly/kd17102Nt1g
2
2
Chris Lyne retweeted
14 Jun 2021
Did a writeup on leveraging a small bug in a Power Apps page to steal auth tokens, emails, and more from Microsoft Teams users via malicious tabs. link.medium.com/tSPHTUUb5gb

11
13
Chris Lyne retweeted
19 May 2021
We have issued a security advisory for a low-severity vulnerability in the journalist web application (fixed in SecureDrop 1.8.2). We would like to thank the @TenableSecurity team for their responsible disclosure. You can find more information at: securedrop.org/news/security…
1
3
6