[ Android ]  One more #Zer0Con slide was released. Dan Austin's slide: https://source.android.com/security/reports/zer0-conf-2017-Your-Move.pdf

[ Browser ]  Apple WebKit: UXSS via PrototypeMap::createEmptyStructure https://bugs.chromium.org/p/project-zero/issues/detail?id=1084

[ iOS ]  Project Zero blog: "Exception-oriented exploitation on iOS" by Ian Beer - https://googleprojectzero.blogspot.com/2017/04/exception-oriented-exploitation-on-ios.html

[ Pentest ]  DPAPI exploitation during a pentest, slides presented @ sth4ck by @ Fist0urs are here: http://www.synacktiv.ninja/ressources/synacktiv_DPAPI_Sthack.pdf

[ Popular Software ]  Unitrends RCE (CVE-2017-7280) exploitation: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-2/ https://t.co/Uzpp3lVYVs

[ SecurityReport ]  The upcoming #Java critical patch update contains 9 new security fixes for Oracle Java SE http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html #JDK 8 #Java security

[ Tools ]  NCC Group Tool: A Generic Windows Memory Scraping Tool - https://github.com/nccgroup/mnemosyne by @ m4tt_lewis

[ Tools ]  How to make your Ubuntu less shitty https://github.com/butteff/Ubuntu-Telemetry-Free-Privacy-Secure #privacy #ubuntu

[ Tools ]  CompileShellCode.py : Embed up to 65KB of Shellcode into a x86 Windows exe for analysis : https://github.com/roastbeef/compileShellCode/blob/master/compileShellCode.py

[ Tools ]  LiME (Linux Memory Extractor) : Allows acquisition of volatile memory from Linux and Linux-based devices : https://github.com/504ensicsLabs/LiME

[ Tools ]  Advanced computer science concepts behind the Xi editor : https://github.com/google/xi-editor/tree/master/doc/rope_science

[ Tools ]  New Post! Building a Keyword Monitoring Pipeline with Python, Pastebin and Searx | Automating OSINT Blog https://t.co/oSVOAaqcL6 #OSINT

[ Tools ]  Docker announces LinuxKit! https://github.com/linuxkit/linuxkit and see also the blog post https://blog.docker.com/2017/04/introducing-linuxkit-container-os-toolkit/

[ Virtualization ]  An overview of the PHP7 virtual machine https://nikic.github.io/2017/04/14/PHP-7-Virtual-machine.html

[ Vulnerability ]  #SSD Advisory – Ubuntu LightDM Guest Account Local Privilege Escalation - https://blogs.securiteam.com/index.php/archives/3134

[ Vulnerability ]  CVE-2017-5662 XXE vulnerability in Apache Batik http://seclists.org/oss-sec/2017/q2/85 #java #infosec

[ Windows ]  Make sure you're up to date if you use WMI/DCOM in .NET otherwise you could get hacked back https://bugs.chromium.org/p/project-zero/issues/detail?id=1081 /cc @ daveaitel @ blowdart

[ Windows ]  New playbook! How enterprises can leverage Windows Defender ATP to detect, investigate & mitigate #ransomware https://t.co/Vux7sKfx3t

[ Windows ]  Fun Edge/UWP sandbox escape https://bugs.chromium.org/p/project-zero/issues/detail?id=1079 would be accessible from LPAC as well being in the core RuntimeBroker COM server :-D