zseano 

@zseano

Web application security researcher / hacker. Currently focused on bug bounty programs & training companies how to hack themselves. Perhaps I can teach you? :)

UK
Vrijeme pridruživanja: veljača 2012.
203 fotografije ili videozapisa Fotografije i videozapisi

Tweetovi

Blokirali ste korisnika/cu @zseano

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @zseano

  1. Prikvačeni tweet
    1. sij

    sorry to 2019 and here's to the new year and improving. 2020 .. the year you can all get your hands on my methodology :)

    93 proslijeđena tweeta 381 korisnik označava da mu se sviđa
    Poništi
  2. prije 3 sata

    can't even make up half the shit you experience in bugbounties lol wish it was simple as do research -> find vulnerabilities -> report -> get paid -> we're all happy

    4 proslijeđena tweeta 39 korisnika označava da im se sviđa
    Poništi
  3. prije 7 sati

    things are awfully quiet over on , last invite was almost 4months ago on October 9th :/

    7 replies 44 korisnika označavaju da im se sviđa
    Poništi
  4. proslijedio/la je Tweet
    prije 8 sati

    Laugh of the morning :-)

    6 replies 23 proslijeđena tweeta 125 korisnika označava da im se sviđa
    Poništi
  5. proslijedio/la je Tweet
    4. velj

    by $12,500 USD Read From The File System Access (potencial RCE) on Whatsapp Desktop (electron)

    82 proslijeđena tweeta 227 korisnika označava da im se sviđa
    Poništi
  6. 4. velj

    Just a quick blog post: Easily leaking passenger information on a program. Be careful what you share online! :)

    7 replies 48 proslijeđenih tweetova 210 korisnika označava da im se sviđa
    Poništi
  7. proslijedio/la je Tweet
    3. velj

    When testing for SSRF, change the HTTP version from 1.1 to HTTP/0.9 and remove the host header completely. This has worked to bypass several SSRF fixes in the past.

    19 replies 462 proslijeđena tweeta 1.444 korisnika označavaju da im se sviđa
    Poništi
  8. proslijedio/la je Tweet
    4. velj

    I published this trick in 2015

    When testing for SSRF using a black list, take internal IP addresses and when encoding them, dont encode entire IP. Encode 1 octet of the IP address, or 2 or 3. For Instance: AWS Metadata - 0251.254.169.254 (this got the $160,000 payout in Oct 2018)
    Prikaži ovu nit
    7 replies 77 proslijeđenih tweetova 285 korisnika označava da im se sviđa
    Poništi
  9. proslijedio/la je Tweet
    4. velj

    When testing for SSRF using a black list, take internal IP addresses and when encoding them, dont encode entire IP. Encode 1 octet of the IP address, or 2 or 3. For Instance: AWS Metadata - 0251.254.169.254 (this got the $160,000 payout in Oct 2018)

    11 replies 284 proslijeđena tweeta 962 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  10. proslijedio/la je Tweet
    3. velj

    trillion dollar company

    Microsoft Forgets to Renew Certificate, Teams Goes Offline -
    6 replies 71 proslijeđeni tweet 254 korisnika označavaju da im se sviđa
    Poništi
  11. 3. velj

    manual hacking ftw. i knew today was going to be a good today ^_^ prob gonna find nothing for a few days now.. rip :(

    12 replies 178 korisnika označava da im se sviđa
    Poništi
  12. proslijedio/la je Tweet
    3. velj

    Guy creates fake traffic jams on Google maps by walking a handcart with 99 phones lmao

    19 proslijeđenih tweetova 46 korisnika označava da im se sviđa
    Poništi
  13. proslijedio/la je Tweet
    3. velj

    We are going public with our some of the products in our program . ~10 services will go from private -> public. This will be done gradually over the next two months. The program is now online at Happy hacking!

    5 replies 9 proslijeđenih tweetova 51 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
    Poništi
  14. 3. velj

    good morning world! feeling hyped AF this monday, ready to get straight into hacking, lets get dem bugz

    1 proslijeđeni tweet 77 korisnika označava da im se sviđa
    Poništi
  15. 2. velj

    joining Ben in 5 minutes:) come say hi!

    Doing stuff live right now on Twitch! is joining me in a bit to talk about hacking and bug bounties!
    1 reply 37 korisnika označava da im se sviđa
    Poništi
  16. 2. velj

    Looking forward to chatting with tonight! :)

    2 proslijeđena tweeta 73 korisnika označavaju da im se sviđa
    Poništi
  17. proslijedio/la je Tweet
    31. sij

    😱😱😱 is joining me on my stream this Sunday and we have a lot to talk about. I’m excited to see what makes zseano’s approach so unique and how he looks for bugs when he’s hacking!

    11 replies 25 proslijeđenih tweetova 240 korisnika označava da im se sviđa
    Poništi
  18. 29. sij

    😍 , what a pleasure meeting you all, awesome bunch of people!! Unexpectedly met aswell 🥳

    3 proslijeđena tweeta 90 korisnika označava da im se sviđa
    Poništi
  19. proslijedio/la je Tweet
    27. sij

    this was a fun one :)

    21 proslijeđeni tweet 75 korisnika označava da im se sviđa
    Poništi
  20. 26. sij

    This is a really good stream if you aren’t already watching check it out!

    Live with now!!
    Prikaži ovu nit
    1 reply 4 proslijeđena tweeta 45 korisnika označava da im se sviđa
    Poništi
  21. 26. sij

    GET /example?param=test .. nothing interesting happened, not vuln to XSS. (<> " was filtered) but if I change it to POST it's reflected as value=\"test\" POST /example#xss param=test+onfocus='alert(0)'id='xss' ..and I can haz XSS bypassing their 'filter'

    8 replies 148 proslijeđenih tweetova 463 korisnika označavaju da im se sviđa
    Poništi

@zseano još nije objavio nijedan Tweet.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·