Alex

@xaitax • 3,208 subscribers

Turning hacker instincts into boardroom insights.

Shorts

Standard user to SYSTEM on the Microsoft Surface family (I believe all are affected - tested on Surface 11 Pro (Build 28120.2315)). It's the SurfaceBroker service that trusts a token name any user can fake. Report to MSRC and be disappointed again, or just drop? 🤔 Btw: researched and built purely with Claude Code this afternoon.

Standard user to SYSTEM on the Microsoft Surface family (I believe all are affected - tested on Surface 11 Pro (Build 28120.2315)). It's the SurfaceBroker service that trusts a token name any user can fake. Report to MSRC and be disappointed again, or just drop? 🤔 Btw: researched and built purely with Claude Code this afternoon.

12,161 görüntüleme

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

175,939 görüntüleme • 2 yıl önce

PatchaPalooza now shows exploit & detection coverage for every CVE. - Exploit coverage (VulnCheck, GitHub PoC, Nuclei, Metasploit) - Detection coverage (Sigma, YARA from 40+ repos) 12,500+ Microsoft CVEs enriched. All free, all open. Example:

PatchaPalooza now shows exploit & detection coverage for every CVE. - Exploit coverage (VulnCheck, GitHub PoC, Nuclei, Metasploit) - Detection coverage (Sigma, YARA from 40+ repos) 12,500+ Microsoft CVEs enriched. All free, all open. Example:

18,377 görüntüleme • 4 ay önce

🔍 NTSleuth is now live! A new comprehensive Windows Syscall Extraction & Analysis Framework. Still early stages with many ideas brewing, but hope it helps some of you! ✨ Features: • Extracts thousands of syscalls from ntdll.dll & win32u.dll as well as and WOW64 variants • ARM64, x64, x86 support • Extracts and analyzes syscall stub bytes • Auto parameter resolution (1100+ signatures) Identifies Nt/Zw function relationships • Syscall lookup mode • Outputs JSON & C headers 🔗

🔍 NTSleuth is now live! A new comprehensive Windows Syscall Extraction & Analysis Framework. Still early stages with many ideas brewing, but hope it helps some of you! ✨ Features: • Extracts thousands of syscalls from ntdll.dll & win32u.dll as well as and WOW64 variants • ARM64, x64, x86 support • Extracts and analyzes syscall stub bytes • Auto parameter resolution (1100+ signatures) Identifies Nt/Zw function relationships • Syscall lookup mode • Outputs JSON & C headers 🔗

13,936 görüntüleme • 10 ay önce

Daha fazla içerik yok.