Tweetovi

	ollypwn @ollypwn	29. sij
	Odgovor korisniku/ci @CitadelArcho @intigriti 😂
	Prikaz razgovora ·

	ollypwn @ollypwn	28. sij
	Odgovor korisniku/ci @BenjaminPill There are some errors because of threading in openssl, so the connection are under some circumstances not terminated by signals. I haven't looked for at solution to this. But yes, you might be right about that
	Prikaz razgovora ·

	ollypwn @ollypwn	26. sij
	Odgovor korisniku/ci @nullsecblog @layle_ctf @MalwareTechBlog Udp only
	Prikaz razgovora ·

	ollypwn @ollypwn	26. sij
	Odgovor korisniku/ci @layle_ctf My pleasure. Amazing job with getting RCE!
	Prikaz razgovora ·

	ollypwn proslijedio/la je tweet
	Luca Marcelli @layle_ctf	26. sij
	Ladies and gentlemen, I present you a working Remote Code Execution (RCE) exploit for the Remote Desktop Gateway (CVE-2020-0609 & CVE-2020-0610). Accidentally followed a few rabbit holes but got it to work! Time to write a blog post ;) Don't forget to patch! pic.twitter.com/FekupjS6qG
	Prikaz fotografije ·

	ollypwn @ollypwn	25. sij
	Odgovor korisniku/ci @hjy79425575 Loads as in what svchost loads for the service. It loads a lot, but the service loads 2
	Prikaz razgovora ·

	ollypwn @ollypwn	24. sij
	Odgovor korisniku/ci @layle_ctf So clean
	Prikaz razgovora ·

	ollypwn @ollypwn	24. sij
	Odgovor korisniku/ci @TekDefense RD Gateway uses DTLS, which is TLS for UDP, so all traffic is encrypted. So there is really no way to tell if a single packet is malicious. But I can record a PCAP for you. DM me
	Prikaz razgovora ·

	ollypwn @ollypwn	24. sij
	Just added Python3 PoC (with scanner) to the repo github.com/ollypwn/BlueGa… twitter.com/ollypwn/status…
	Prikaz sažetka ·

	ollypwn @ollypwn	23. sij
	PoC (Denial-of-Service) for CVE-2020-0609 & CVE-2020-0610 Please use for research and educational purpose only. github.com/ollypwn/BlueGa… pic.twitter.com/R43AHUwGV0
	Prikaz fotografije ·

	ollypwn @ollypwn	23. sij
	Odgovor korisniku/ci @layle_ctf You can also reference my previous post where the same error messages are applied in the "real code" with my pseudo-code comments
	Prikaz razgovora ·

	ollypwn @ollypwn	23. sij
	CVE-2020-0609 & CVE-2020-0610 Before / After patch Pseudo-code pic.twitter.com/ev79YH5SUH
	Prikaz fotografije ·

	ollypwn @ollypwn	22. sij
	CVE-2020-0609 & CVE-2020-0610 (RDP / RD Gateway RCE) Here are the immediate patches: Should be able to create a PoC vulnerability checker in the upcoming weeks with this info. pic.twitter.com/4rOvEAfQTL
	Prikaz fotografije ·

	ollypwn @ollypwn	22. sij
	Odgovor korisniku/ci @JoshInGeneral Inside Management Console, docs.microsoft.com/en-us/dotnet/f…
	Prikaz razgovora ·

	ollypwn @ollypwn	21. sij
	Odgovor korisniku/ci @w0rldkauts And the other place you check is not patched/updated?
	Prikaz razgovora ·

	ollypwn @ollypwn	20. sij
	Odgovor korisniku/ci @vm_call @CitadelArcho skrev i selv disassemblere og decompilere? jeg brugte bare den der lå i mappen sammen med gcc compileren...
	Prikaz razgovora ·

	ollypwn @ollypwn	18. sij
	Odgovor korisniku/ci @layle_ctf @gN3mes1s Feel free to shoot me a DM if there's any issue! :)
	Prikaz razgovora ·

	ollypwn @ollypwn	18. sij
	Odgovor korisniku/ci @layle_ctf @gN3mes1s Nice blog post. Sorry to hear it didn't work. Looks like the commands were the same
	Prikaz razgovora ·

	ollypwn @ollypwn	18. sij
	A great explanation on the recent critical vulnerabilities CVE 2020-0609 & CVE 2020-0610 (RD Gateway RCE) by @MalwareTechBlog on @kryptoslogic Might look into these vulnerabilities further in the coming weeks kryptoslogic.com/blog/2020/01/r…
	Prikaz sažetka ·

	ollypwn proslijedio/la je tweet
	Patch Friday @PatchFriday	17. sij
	Vulnerability severity levels pic.twitter.com/7MZUs7fWaS
	Prikaz fotografije ·