Agarri : Sécurité informatique offensive

Vulnérabiliés récentes [+]

Adobe Reader : Multiples corruptions lors d'un traitement XSLT (APSB 17-11)
Firefox: Multiples UAF lors d'un traitement XSLT (MFSA 2017-10)
Revive Adserver : Désérialisation PHP arbitraire (REVIVE-SA-2017-001)
Adobe Reader : Multiples corruptions lors d'un traitement XSLT (APSB 17-01)
Firefox : UAF lors d'un traitement XSLT (MFSA 2017-01)

RT @tylerni7: The international politics aspect of this is beyond my expertise. But PT has great security researchers that release useful,…
1. Thu Apr 15 19:40:57 2021
I would bet numerous actors are highly interested in remotely reading /sdcard/ 👮‍♀️🕵️‍♂️
1. Thu Apr 15 19:33:34 2021
Cool bug, and it’s only the beginning of their chain. Read the whole thread 😉 https://t.co/RQP5P7gsCQ
1. Thu Apr 15 19:30:03 2021
Sometimes, reporting bugs to a vendor goes very well. Good job @duosec and @sensepost 👏🏻 https://t.co/xCj4I8OBtP
1. Thu Apr 15 17:49:21 2021
RT @i_bo0om: Server-side request forgery via ftp account https://t.co/hbRoCq4Q8S
1. Wed Apr 14 07:27:50 2021

Nearly generic fuzzing of XML-based formats
1. Nullcon (mars 2017 - Goa - IN - slides - video)
Server-side browsing considered harmful
1. Hackfest (novembre 2015 - CA - video (FR))
2. Hack in Paris (juin 2015 - FR)
3. HackPra Allstars - OWASP AppSec EU (Mai 2015 - NL - slides - video)
Hunting for top bounties
1. OWASP CZ (décembre 2014 - CZ)
2. ZeroNights (novembre 2014 - RU - slides)
3. Hacktivity (octobre 2014 - HU - video)