Yuval Avrahami

@yuvalavra

Vulnerability research @wiz_io

سنجاق‌شده
Yuval Avrahami
@yuvalavra
۲۵ دی ۱۴۰۴
We hacked the AWS JavaScript SDK, a core library powering the entire @awscloud ecosystem - including the AWS Console itself 🤯 How did we do it? Just two missing characters was all it took. This is the story of #CodeBreach 🧵👇
۱۵۸
Yuval Avrahami
@yuvalavra
۲۹ مهر
Another insane find by @sagitz_ powered by ATLAS 🤖our agentic vuln researcher php2shell.com
sagitz
@sagitz_
۲۹ مهر
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
۶
Yuval Avrahami
@yuvalavra
۸ مرداد
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯 And all we needed was a single key 🔑 This is the story of #CosmosEscape 🧵👇
۵
Yuval Avrahami
@yuvalavra
۸ اردیبهشت
Cross-tenant vuln on Github! Absolutely brilliant research from @sagitz_
این پست دردسترس نیست.
Yuval Avrahami
@yuvalavra
۶ اردیبهشت
Excited to announce our talk "One Key to Rule Them All: Taking Over a Flagship Cloud Service" was accepted to @BlackHatEvents! @liormama and I will share how an odd exception led us down a rabbit hole to uncover one of the most impactful cloud vulns to date💥 More details
۱