Agarri: Offensive information security

Recently published vulnerabilities [+]

Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-11)
Firefox: Multiple UAF during XSLT processing (MFSA 2017-10)
Revive Adserver: Arbitrary PHP deserialization (REVIVE-SA-2017-001)
Adobe Reader: Multiple memory corruptions during XSLT processing (APSB 17-01)
Firefox: UAF during XSLT processing (MFSA 2017-01)

@Serianox_ @herrjemand A perfect target format for AFL! And I can easily imagine some security-sensitive contexts using it ;-)
1. Sun Jun 16 17:54:35 2019
@Serianox_ Which target?
1. Sun Jun 16 15:23:15 2019
RT @jilles_com: ORAL B Lockpicker https://t.co/IKz9oJKtOu
1. Sun Jun 16 13:24:55 2019
RT @NinjaStyle82: Burp protip: if you want your extensions that do active scanning to be authenticated, don't forget to turn on your sessio…
1. Sun Jun 16 12:32:46 2019
RT @T_Bouhafs: Bon, À tout les abrutis haineux qui sont plus scandalisés par le fait que je puisse être journaliste que par le fait que j’…
1. Sun Jun 16 12:27:49 2019

Nearly generic fuzzing of XML-based formats
1. Nullcon (March 2017 - Goa - IN - slides - video)
Server-side browsing considered harmful
1. Hackfest (November 2015 - CA - video (FR))
2. Hack in Paris (June 2015 - FR)
3. HackPra Allstars - OWASP AppSec EU (May 2015 - NL - slides - video)
Hunting for top bounties
1. OWASP CZ (December 2014 - CZ)
2. ZeroNights (November 2014 - RU - slides)
3. Hacktivity (October 2014 - HU - video)