Tweetovi
- Tweetovi, trenutna stranica.
- Tweetovi i odgovori
- Medijski sadržaj
Blokirali ste korisnika/cu @menztrual
Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @menztrual
-
Prikvačeni tweet
I found bunch of remote code execution vulnerabilities in a variety of
@GrandstreamNet products. Full advisory is here: https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920 … and working PoCs can be found here:https://github.com/scarvell/grandstream_exploits …Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
I just got a fancy idea to create strings in
#javascript without using dangerous characters
Inspired by @garethheyes challenge from@WebSecAcademy.#bugbountytips#xsspic.twitter.com/GiAe0REwLI
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
[Educational] One of the best blog posts that I ever read about going from 0 to unauth RCE in f**king Mikrotik OS step by step:https://medium.com/@maxi./finding-and-exploiting-cve-2018-7445-f3103f163cc1 …
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
I'll make my tech report and poc public soon. It was a fun bug affecting most major distributions. one exploit to rule them all w/ all kernel expl mitigation bypasses - no rop chains / hardcoded crap https://duasynt.com/blog/ubuntu-centos-redhat-privesc …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Fun challenge. Highly recommend giving it a go! :)https://twitter.com/PwnFunction/status/1202667612615802881 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Playing blue team on a red vs blue ctf gives you a much greater appreciation on just how hard a blue teamer’s job is. Props to you guys and girls.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
Quick and dirty way to find parameters vulnerable to LFI & Path Traversal & SSRF & Open Redirect: Burp Search > Regex \?.*=(\/\/?\w+|\w+\/|\w+(%3A|:)(\/|%2F)|%2F|[\.\w]+\.\w{2,4}[^\w]) Suggestions are welcome.pic.twitter.com/E0nEDFeUaM
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
If I want to quickly, manually spray an application input, I use this payload: '"><svg/onload=alert()>{{7*7}} It's fairly short, and will give indicators of basic SQLi, XSS and SSTI vulnerabilities. Disclaimer: This isn't a replacement for proper testing.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Quote of the night goes to
@TheColonial: “if you leave it to the last minute then it only takes a minute”Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
Found a full-blown CSP bypass on the current version of Firefox (69). Not working on the beta version. PoC: http://abrasax.club/?payload= <object data="javascript:alert(1)"></object>
#bugbountyHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
HELLO! Unfortunately or fortunately, elttam has three spare
@kawaiiconNZ tickets to give away! If you or someone you know is interested, please send us a DM. Maybe some@purpleconNZ goers are keen?Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Highly recommend checking it out if you missed out last year. Incredible conference and will probably sell out quickly.https://twitter.com/Bsides_BNE/status/1178268939626745858 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
lol vBulletin 5.x RCE 0day. Tested and works. https://seclists.org/fulldisclosure/2019/Sep/31 …pic.twitter.com/fgwe7fZ3by
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je TweetHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Brendan Scarvell proslijedio/la je Tweet
Ruxmon Melbourne is on again in August. We are trying a new format with lightning talks (max 10 minutes) and are looking for speakers. Please spread the word and submit a talk here: https://docs.google.com/forms/d/e/1FAIpQLSfP8t5nUAun-_SqElQ-WfxIO3J3dzbpb1_sdDIu5mJJsFg7WQ/viewform?usp=sf_link …pic.twitter.com/3ni7d1A8G4
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je TweetHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
@N0M4D1C@ChickenBoolean can't believe it's been a year! :oPrikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Brendan Scarvell proslijedio/la je Tweet
I just used something like this in my work, so I recorded a simple video too. If you like this kinds of stuff, you should sign up for my newsletter: http://masteringvim.com or get my book: https://jovicailic.org/mastering-vim-quickly/ …pic.twitter.com/9JjoX47FNp
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
and also epic shoutouts to
@K1NGIE and the rest of the team involved with the enourmous amount of work that would have gone into building the hackable arcade!Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Competed in my first solo CTF over the weekend and super happy with the outcome. Huge thanks to
@Bsides_BNE for an epic conference and great CTF and also a huge thanks to@rapid7@oz_hack and@hackthebox_eu for the prizes!#BSidesBrisbane2019pic.twitter.com/0IKt8iwNZu
Prikaži ovu nitHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi -
Freemarker SSTI and can't use < [ or spaces to make the PoC work? Try: ${"freemarker.template.utility.Execute"?new()("id")}
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.


Website: