Aliz
@AlizTheHax0r
Followers
1,394
Following
982
Media
1,463
Statuses
33,025
Also Curiosity/divergence/general hackery. Quite trans. Pronouns are they/them. Nonbinary, happily married.
Singapore
Joined October 2011
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Enzo
• 465346 Tweets
California
• 338335 Tweets
#मुहर्रमपर_अल्लाहकबीर_कासंदेश
• 160782 Tweets
Baakhabar Sant Rampal Ji
• 144950 Tweets
Corinthians
• 103142 Tweets
#อิงฟ้าวิมานหนามMovie
• 101248 Tweets
#AllStarGame
• 77727 Tweets
Nikki Haley
• 64125 Tweets
梅雨明け
• 58452 Tweets
Gaetz
• 57688 Tweets
オールスター
• 54923 Tweets
3POINT4M BE WITH FOURTH
• 50905 Tweets
Olmedo
• 49081 Tweets
Angola
• 47800 Tweets
Romero
• 47639 Tweets
Ohtani
• 45838 Tweets
Hugo
• 44687 Tweets
Cacá
• 38414 Tweets
Lamentable
• 36597 Tweets
#TheAcolyte
• 34761 Tweets
佐野海舟
• 33357 Tweets
Criciúma
• 21965 Tweets
Kaylor
• 19166 Tweets
大谷さん
• 17461 Tweets
Big Sean
• 14212 Tweets
#플레이브_빌리언스_축하해
• 13339 Tweets
Jarren Duran
• 12277 Tweets
Aces
• 10153 Tweets
Pinned Tweet
So I set up mastodon - I'm . I doubt I'll use it much, I'm setting it up mainly in case twitter becomes non-functional, in which case I don't want to lose al my lovely lovely twitterbuddies <3
0
0
6
@SynBio1
True story - when I was a kid at school I saw a daisy like this! I immediately picked it to show the teacher who explained it was a genetic mutation. Ever since, I've wondered if I set back daisy evolution by generations by picking that flower! Please tell me it's common?!
5
11
398
@Kage062684
@_B___S
I love how his tail is wagging, I think he just saw a fun playfight and wanted to join in ^_^
0
1
377
holy moly, replicated
#CVE
-2024-24919 (the checkpoint bug) and it's WAY more than the advisory states. :/
9
36
233
@sailxrmn
Reminded of "inglorious basterds" here. Like instead of carving a swastika in his forehead you just refused to remove one he put there himself
1
1
186
whew finally got the CVE-2024-3400 blog post up! I'm actually still editing it but it should be good for those who are asking for info for threat hunting/etc!
6
33
132
@CyrusPeterpaul
Maybe the actual message is that throwing is unnecessary, as it will generate a fire all by itself
2
0
109
@gojimmypi
I like the list of output voltages. Like it just picks one based on the vibes of the room at the time
5
2
95
Here's the writeup of the Check Point
#CVE
-2024-24919, complete with carmageddon screenshot! Hope you like it!
4
21
74
@gf_256
I always change the tracking source campaign to "Ur momma" before I send to anyone, I've been doing it for years. Recently audited a tracking app and found they aren't whitelisted against valid campaigns so it makes it to the UI! Also: this app in particular supports emoji.
1
2
73
Here's the blog about CVE-2024-4577, the PHP bug!
1
29
64
@arturo182
"after careful consideration, the architecture is little-endian, except for expansion slot
#3
which is big-endian"
1
2
54
Swiftonsecurity dies for our sins a little everyday
I run Sysmon on my gaming PC to verify it won't screw up your PowerPoint performance at work I got you fam
2
10
179
1
2
48
@Crim_Mip
@cointeltoe
That's cool/crazy. I was under the impression that ostriches in particular were vicious, angry, geneally-bad-tempered things. Ty for sharing the anecdote!
1
0
41
@MothershipSG
Next time I have a bad day, I will just think, even badass vulture has an off-day too
0
0
39
I did some patchdiffing over the new
#Fortinet
bug, looks like it's the real deal, it's a nasty bug! Update your
#fortigate
before the bug goes public in a few days!
2
12
37
It's my gut feel that CVE-2024-3400 can be exploited without telem enabled. It can def 'brick' the machine and make it unbootable even without telemetry. I don't know how, though, so this is just supposition - a threat actor with better PA skillz might be able to.
5
2
34
@richinseattle
@z0x55g
You're totally right too, when I look at the flow of the convo. They dangled chrome at me and I didn't bite, that's when they asked..
0
6
31
New blogpost, in which I find a bunch of bugs in a Sonicwall device using curl and regex:
1
14
32
I did a blog about the
#exim
bugs, went into detail on CVE-2023-42115 . Neat, huh? TL;DR: stop panicking, it's fine [probably]
1
10
30
Yaaaaayyyyy, my awesome girlfriend bought me a squid colouring book! Yaaaaayyyyy!
2
2
31
So I kinda got my FreeCAD stuff in CI. Each commit will cause Jenkins to generate gcode, an image of the cut, and a diff with the previous build! Here we see I added eight holes (red). The green is just what'll be cut.
2
3
30
Oh no - it looks like the underlying library that the PA uses for session management, gorilla, is the bearer of this bug, so other devices may be affected! This could be bigger than we thought! 💀 in the meantime, grep your logs for dodgy sessionid and do share what you find .. !
@AlizTheHax0r
Raising one now. I'll link to your blog post and give you the ID etc. You did the legwork here so I'm not gonna claim much in the way of credit.
2
0
4
2
7
30
@numetal_moment
Wait what the fuck, I always thought it was "never made it as a wise man"
HAVE I BEEN LIVING A LIE ALL THIS TIME
1
0
28
pretty certain I've finally found CVE-2024-3400! But I rebooted the host VM before checking and now it's ded. Good job I made a backup. but am I really patient enough to wait for it to restore while I'm sat on hot nday >>.<<
2
2
28
*takes notes from a subculture which knows how to deal with Nazis*
0
6
27
@thingskatedid
Imho it's a sign we are doing something right as an industry. We are enabling people to use computers to make their life easier without needing a huge amount of training.
(Also a sign of cool brother, not disparaging his skillz!)
0
0
28
BUGS
3
10
26
I had an English teacher in school when I was in my teens. He totally blew my mind because his stance was "grammar doesn't matter, the ideas in your story do", in a world of standardized tests and formality. I try hard to generalize this to other topics.
You ever laugh at mspaint comics on deviantart? Well the joke's on you because the people who made those were able to make the creatures in their head real, and they could make them talk and interact.
1
0
11
1
6
25
w00t! My buddy was like “oh I thought you’d like these stickers I got in Vegas!” YAY THEY ARE THE
@jilles_com
STICKERS YAAAAYYY
1
0
26
@emilyxfrances
@jorah
@brazenhussyrant
@VodkaAuntTBH
Oh wow, I did not know that term existed. Now I will never listen to Meatloaf's "Dead ringer for love" the same way...
2
2
24
TIL, legendary hacker Chompie1337 was trained by a bootcamp - there's a good argument for bootcamps working if I ever saw one
1
1
25
@s7ephen
@daniel_bilar
Same - I heartily recommend "the great suspender", which will 'suspend' tabs after an idle period to save memory :D
1
5
24
@CaseySoftware
@vlucas
Agreed. I love using my own kit for work, but when I joined my current job my new boss threw a fit over the idea - "I can't remotely wipe your personal device it it goes missing, can I?!". Fair point. Glad my boss sees it that way.
1
0
23
@TransSalamander
"will I still be a girl if I have a vagina" is top-tier
#justTransThings
. :)
0
2
20
@SwiftOnSecurity
I almost ignored a girls message on a dating site because my cyber sense told me it was a spam bot. I engaged just to troll the bot. It wasn't a bit and we are now married. So.. happy ending despite cyber?
1
0
22
@richinseattle
@z0x55g
Oh wow, they messaged me too! Had a short convo but I stopped responding when they started asking for my cve numbers. I figured they were some lazy elitist looking to mooch..
1
0
21
For those on Mastodon, there's a thread where people smarter than I are working out if the PA CVE was a real 'Palo Alto' bug or a problem in upstream. Current thinking is that PA were misusing the Gorilla library in a way that was unsafe.
1
8
22
Oh shit
@RAF_Luton
retweeted me being dumb about Spitfires, I am never going to live this down am I xD
4
1
20
fuck yeah, big win at work! Can't talk about it yet though, I'm sworn to secrecy by The Boss. 🤐 Just.. yay, big win! 🎉
1
0
21
"it's not worth licensing the IDA decompiler for this MIPS project. Let's see how Ghidra is, I remember it sucks but it can't be *that* bad"
Ghidra:
3
1
18
Current status: wondering if I'd have opened
@z0x55g
's lure on my main dev box or a throwaway VM, if I had been sent it. I'm pretty sure I wouldn't have used the company machine, which is the important thing I guess.
1
1
16
wait, this dude ASKED A POLICEMAN to TAKE HIS PHOTO while COMMITTING A CRIME?!
paging
@thegrugq
! It's time for you to post that quote from 'The Wire' again!
Shortly after storming the Capitol, prosecutors say, Jeremy Vorous of Venango, Penn took a photo in front of a Lincoln statue. "Yeah we in dis mofo," he wrote on his post.
Weeks later, when the FBI talked to him, Vorous said a cop inside the bldg took his pic in front of a statue
4
32
64
0
5
18
@kumimono
Nope, it's fixed! Honestly I think they just slap the same label on a bunch of different units.
2
0
19
@HeliosSparkman
@SantanaelChan
I'm amused that the monkeys wood probably evolve into Shakespeare himself before they managed to accidentally write his works
0
1
18
Trying to explain to Jo (who has never heard NIN and is not aware of 'uwu') why this is funny is very difficult
thewe is a pwace t-that stiww wemains
(⑅˘꒳˘) i-it eats the feaw it eats the p-pain
rawr x3 the sweetest pwice he'ww h-have to pay
>w< the day the whowe wowwd w-went away
(⑅˘꒳˘)
0
2
16
2
1
18
@cctv_idiots
I've got a pet tortoise that does this! When he sleeps he kinda flops all his limbs and head out of his shell, instead of retracting them like normal. First time he did it I thought he'd expired in the night!
0
0
18
Connected the oscilloscope (Rigol DS1054z) to ethernet to try to stream data from it, for use when I'm youtube-video-making. Surprisingly it just worked - literally all I needed to do was tell sigrok the IP address and it was all happy
1
2
18
Playing with FreeCAD's "StepUp" workbench today, which allows interoperability with KiCAD, the EDA tool. So far I've designed a PCB in KiCAD, added a .step for the parts I designed in FreeCAD, then imported the completed board into FreeCAD so I can place it on my widget.
1
2
18
Really proud of me and
@SinSinology
's work on the MOVEit blog post! It was such a nightmare to reverse it all. My meme game wasn't up to its usual standards, though.
2
0
18
Me, six months ago: Nah let's buy IDA but not bother with the decompiler, I should be okay
Me, now: wahh
2
1
17
@MorbidRxDiamond
@_Desmoden
@CharlesFinch
@kfalconspb
I would pay good money for a tshirt with that logo (and maybe some flaming skulls and guitars in the background)
1
0
16
Low-key made my day that the designer headpatted the device for me <3
2
3
17
HD Moore opened a golang bug for the Gorilla directory traversal.
0
0
16
For all the New Followers I just acquired from my
#kawaiicon
talk - hi! <3 Here's the blogpost link.
0
4
16
@thingskatedid
@theemilyaccount
This is such a fascinating thread to only be able to see half of xD
0
1
15
@furan
Will you be open sourcing this? I've wanted for a while to make a card for my esxi setup, multiple video outputs on multiple logical pcie devices on one physical card, so I can forward the logical cards to different VMs and get nice lag-free output.Maybe a USB controller for HID.
1
0
15
@InfinityObserve
Oh shit I didn't even mean that in a lewd way I was just thinking about the message boxes that notepad shows and all I thought it was that one argh
0
0
15
Today's Aliz Tip:
You might know that the windows command "where" does the same as bash's "which" - ie, it'll tell you where an application on the path is. But did you know this works for dll's too? Like this:
Neat, huh?
1
7
15
Handed in my one-month notice at Exodus. I'm going to go work at
@watchtowrcyber
doing defensive research again! Really looking forward to working with Ben and Sam again, and doing work I can talk about publicly :)
3
2
15
I guess this is a good example of the whole 'male privilege' thing. If I [male-presenting] was in a similar situation, I wouldn't even think of these things.
1
1
13
holy MOLY this ivanti code! I really want to post a screenshot and "how do you even fuck up this badly" but I gotta keep it secret in case someone does a naughty with it. It's going to be an ace blogpost though, just full of literal 'how does one fuck up this badly'
2
3
14
That deeply satisfying feeling when the PCB arrives from the fab house and you got all the footprints correct and they actually look Linda awesome
2
3
14
Okay so - me and Jo are going to get married officially next week (27th). It's going to be super duper low-key, just "signing on the dotted line" - we will have our ceremonies at a later date (still unplanned).
10
0
14
Fuck yeah, unauth bug! After finding like ten authenticated bugs I’ve fiiinallyyy found something unauth. I’ll spill all the details once our 90day VDP expires! Suffice to say: the QNAP NAS OS is a fun target. Lots of C and lots of overflows!
0
3
14
So for those that don’t realise how big a deal Kawaiicon was to me - those tops I wore on stage, I bought them months ago but this was the first time I’ve found a space where I was confident and “me” enough to wear them.
2
0
13