Alibabas @0x_alibabas

Joined March 2022

Tweets

31
Followers

73
Following

338
Likes

1K

Alibabas @0x_alibabas

2 weeks ago

Yay, I was awarded a $800 bounty on @Hacker0x01! hackerone.com/0x_alibabas #TogetherWeHitHarder

0 1 64 3K 8

🚀Exciting News! Introducing my latest work: Beyond XSS This series of articles aims to introduce front-end security topics, perfect for frontend devs and those intrigued by frontend security. Suitable for all skill levels from beginners to intermediates aszx87410.github.io/beyond-xss/en/

4 85 294 24K 125

Two Seven One Three @TwoSevenOneT

a month ago

#oldnewthing Need something blue? Create the file "C:\Windows\System32\config\OSDATA" and restart Windows. You’ll get a permanent Blue Screen of Death( BSOD ). #pentester #redteam

10 81 676 58K 445

Download Image

Alibabas @0x_alibabas

a month ago

Just got a reward for a high vulnerability submitted on @yeswehack -- Code Injection (CWE-94). #YesWeRHackers

2 2 124 3K 4

Download Image

neils @midwestneil

2 months ago

Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:

wetw0rk @wetw0rk7

2 months ago

5 45 412 275K 195

47 564 3K 317K 1K

Alibabas @0x_alibabas

2 months ago

Hey that's my vuln teamviewer.com/en/resources/t…

0 0 2 128 1

Vitor Falcão "busfactor" @busf4ctor

6 months ago

New blog post! It took me a few months to get motivated to write again, but here we are with a remarkable client-side chain I found with @xssdoctor vitorfalcao.com/posts/hacking-…

9 50 219 16K 170

Maxim Suhanov @errno_fail

7 months ago

(A new class of symlink attacks is mentioned below.) According to Microsoft (MSRC), attacks involving symlinks stored on removable drives or in file system images (like VHDX) are not vulnerabilities. If an unprivileged user manages to quickly replace a regular file... 1/7

4 44 192 19K 135

Download Image

James Forshaw @tiraniddo

2 years ago

I try an avoid this hellsite, but I did a quick dive into sudo in Windows and here are my initial findings. tiraniddo.dev/2024/02/sudo-o… The main take away is, writing Rust won't save you from logical bugs :)