💥 leonjza

💥 leonjza

@leonjza.bsky.social

[ 'cto @sensepost.com', '@orangecyberdef', 'caffeine fueled', '(╯°□°)╯︵ ┻━┻', 'security guy', 'metalhead', 'i saw your password', 'KOOBo+KXleKAv+KXlSnjgaM=' ]

461 followers147 following97 posts

💥 leonjza reposted

Charm
@charm.land

Alrighty, Superlogical’s Program Status Protocol is now live in Crush. Supporting terminals and multiplexers now get updates on what Crush is up to and when it needs your attention. Here it is in Rex Beta! ✌️

💥 leonjza
@leonjza.bsky.social

I used to like to see peoples browser tabs they have open to get a sense of what they are working on, but ChatGPT conversation titles are so much better at that.

💥 leonjza reposted

Katie Mack
@astrokatie.com

The #Artemis II astronauts said they needed more superlatives to describe their view of the eclipse, when the Sun was behind the Moon and its near surface was faintly illuminated by Earthshine

💥 leonjza
@leonjza.bsky.social

Had a case this week of a fairly secure deployment of BeyondTrust, but vulnerable to CVE-2026-1731. With basically zero egress, I implemented a timing oracle POC instead. Takes about 20 minutes to get the ls command output in this demo, but hey, it works! :D

💥 leonjza
@leonjza.bsky.social

Noone asked for this, but I'm trying to get more comfortable with qemu as a whole which has resulted in this overly fancy Qemu Machine Protocol (QMP) socket client, complete with dynamic schema parsing, event subscriptions and tab completion, because why not :P

💥 leonjza
@leonjza.bsky.social

Really excited to present this Frida training @1ns0mn1h4ck.bsky.social with @ipmegladon.bsky.social and myself! If you've dabbled with Frida before, but want a practical learning opportunity to improve your usage and understanding, this one is for you!

Insomni'hack @1ns0mn1h4ck.bsky.social

Learn how to bypass security controls using Frida at #InsomniHack workshop. "Binary Instrumentation with Frida" is led by SensePost and it is made for reverse engineers, pentesters & security researchers. Get your ticket: https://ow.ly/lTxz50XVBJm #Cybersecurity #Infosec #INSO2026 #Cyberworkshops

💥 leonjza
@leonjza.bsky.social

It’s almost time for my @BSidesCapeTown talk, and I’ve just open sourced pipetap. My Windows named pipe proxy & multi-tool. Excited to see what you do with it! github.com/sensepost/pi...

github.comGitHub - sensepost/pipetap: A Windows Named Pipe Multi-tool / ProxyA Windows Named Pipe Multi-tool / Proxy. Contribute to sensepost/pipetap development by creating an account on GitHub.
💥 leonjza@leonjza.bsky.social

I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)

💥 leonjza reposted

pard0p.bsky.social
@pard0p.bsky.social

LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loading, runtime PICO substitution, and advanced evasion techniques like sleep masking through a single RWX code block. github.com/pard0p/LibPi...

github.comGitHub - pard0p/LibPicoManager: LibPicoManager is a unified PICO management framework that provides centralized control over Position Independent Code Objects in shared memory, enabling dynamic code l...LibPicoManager is a unified PICO management framework that provides centralized control over Position Independent Code Objects in shared memory, enabling dynamic code loading, runtime PICO substitu...

💥 leonjza reposted

Carlos Holguera
@grepharder.bsky.social

We've been waiting 5 years for this: objection has been updated to 1.12.x with Frida17+ support. Thank you so much @leonjza.bsky.social and everyone who contributed! github.com/sensepost/ob... Thanks to @ipmegladon.bsky.social for updating the MASTG accordingly (OWASP/mastg/pull/3378)

github.comRelease 1.12.0 · sensepost/objectionThe, wow, finally, a release release! 😂 Honestly, there has been so much that has changed, and it's hard to thank and attribute to everyone that has contributed. To that end, thank you for your con...
View full thread

💥 leonjza reposted

Dominic White
@singe.bsky.social

Made this last night, it’s useful for finding a large number of domains hosting phishing kits or malware based on a consistent pattern github.com/singe/domain-p… Might be useful for some of you.

github.comGitHub - singe/domain-probe: A utility to find identically configured domains and web-servers based on a pattern. Used to find phishing kits.A utility to find identically configured domains and web-servers based on a pattern. Used to find phishing kits. - singe/domain-probe

💥 leonjza reposted

MITRE ATT&CK
@attack.mitre.org

ATT&CK v18 is now out! Today marks the release of Detection Strategies, where we've moved from single-sentence notes to structured, behavior-focused strategies across the board. A new blog post describes the changes medium.com/mitre-attack... with details at attack.mitre.org/resources/up....

medium.comATT&CK v18: Detection Strategies, More Adversary Insights,ATT&CK v18 is released with new Detection Strategies, Analytics, and revamped Data Components!

💥 leonjza reposted

Calzone
@calz0n3.bsky.social

Working on a new PICO! This one is an in-memory CLR hoster that uses the same technique as execute-assembly/donut to invoke a .NET assembly without touching the disk.

💥 leonjza
@leonjza.bsky.social

Romhack was absolute 🔥! The conference, the community, the vibe - all of it was just something else. Special mention to merlos1977@x and the CybersaiyanIT@x team for making the speaking experience excellent too. 🙃

💥 leonjza
@leonjza.bsky.social

Soon™ Private invites at Romhack next week, public release a while later.

💥 leonjza@leonjza.bsky.social

I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)