iiinova — where your digital self keeps evolving

Rich Warren

@buffaloverflow.rw.md

267 followers 52 following 6 posts

Red Team & Offensive Security Research @amberwolfsec.bsky.social

Posts Replies Media

Rich Warren @buffaloverflow.rw.md · 29/07/2025

Clearing out the research queue in time for DEFCON, and dropping some new NachoVPN updates! 🌮🔓 Part 1: Ivanti SYSTEM RCE/LPE: blog.amberwolf.com/blog/2025/ju...

blog.amberwolf.com

020

Reposted by Rich Warren

johnnyspandex.bsky.social @johnnyspandex.bsky.social · 26/12/2024

Some Christmas cheer with @buffaloverflow.rw.md . A nice bug in the URL handler for Delinea Secret Server. blog.amberwolf.com/blog/2024/de...

blog.amberwolf.com

Delinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)

AmberWolf Security Research Blog

033

Rich Warren @buffaloverflow.rw.md · 27/11/2024

d3bfdeed17448756d36a326f0b7972162b7f67951df6d2004faa196444b6c5aa 🙃

010

Rich Warren @buffaloverflow.rw.md · 26/11/2024

For anyone mad at Palo Alto for pushing out a limited fix, just remember that other vendors (*cough* Ivanti) consider 1-click RCE from a browser .. a feature 😜 www.reddit.com/r/paloaltone...

210

Rich Warren @buffaloverflow.rw.md · 26/11/2024

New platform, who dis? It me, and @johnnyspandex.bsky.social dropping some VPN client exploit freshness! 🌮🔒 Today, we're releasing NachoVPN, our VPN client exploitation tool, as presented at SANS HackFest Hollywood. Get it on the @amberwolfsec.bsky.social blog: blog.amberwolf.com/blog/2024/no...

blog.amberwolf.com

Introducing NachoVPN: One VPN Server to Pwn Them All

AmberWolf Security Research Blog

01311