@[email protected] @BugBountyWeekly

Weekly #BugBounty realated news and tips - Curated by @TechbrunchFR The Internet Joined March 2016

Tweets

1K
Followers

4K
Following

300
Likes

506

Kuba Gretzky @mrgretzky

2 years ago

Finally my talk from @x33fcon is online! 🔥 I try my best to explain what websites could do to protect the users against reverse proxy phishing attacks like Evilginx.🪝🐟 There is also a bonus live demo at the end with some Evilginx Pro secret sauce! 💡 youtube.com/watch?v=C-Fh4s…

4 80 222 23K 62

Frans Rosén @fransrosen

3 years ago

I decided to make a homage-post to @homakov and @Nirgoldshlager about different OAuth-token leakage methods I've been researching – ten years after their blog posts that inspired me to start hunt for bugs ♥️ thank you. labs.detectify.com/2022/07/06/acc…

20 376 961 0 372

terjanq @terjanq

2 years ago

@zeyu2001 I used <object> with fonts to leak it with even stricter CSP. My tweet also has a reference to a research paper in the first reply :) These leaks are also useful for port scanner in an environment with javascript disabled

terjanq @terjanq

6 years ago

3 98 339 0 78

Download Image

1 24 87 19K 38

mgeeky | Mariusz Banach @mariuszbit

2 years ago

☢️ClickOnce + AppDomain Manager Injection (aka signed EXE + DLL sideloading) is the new Initial Access Hotness❤️ Check out @zyn3rgy and @0xthirteen insights on weaponising them: posts.specterops.io/less-smartscre… Pssst. there's a training & framework already scratching that surface too🥳

4 125 346 40K 140

Molly White @molly0xFFF

2 years ago

I wish the SEC had filed their exhibits in the binance lawsuit, which include internal chatlogs, before I published my article (newsletter.mollywhite.net/p/sec-v-binanc…) because these are great reading 🍿 Instead I will do a thread 🧵

15 120 497 168K 111

Burp Suite @Burp_Suite

2 years ago

[In a movie trailer voiceover voice] This summer, Burp Scanner is going to get a whole lot more customizable …

11 31 193 54K 14

Download Image

sqlmap @sqlmap

2 years ago

Help us fuel #sqlmap's journey! Passionate about #websecurity? Support our open-source project & make the digital world safer. Check our GitHub Sponsors page for donation options & unique benefits: github.com/sponsors/sqlma… 💙🔒 #cybersecurity #opensource

5 11 15 8K 1

S4ntiagoP @s4ntiago_p

2 years ago

🔥 Big update! Nanodump now supports the PPLMedic exploit! meaning you can dump LSASS on an up-to-date system with PPL enabled 😃 github.com/fortra/nanodump

2 211 578 58K 149

Shir @shirtamari

2 years ago

Continuing the #BingBang thread, many have asked how we found the vulnerable Bing Trivia endpoint. Let me share our unique Azure Active Directory cloud reconnaissance technique to find misconfigured authentication prompts🧵

18 153 576 110K 328

Download Image

web3 is going just great @web3isgreat

2 years ago

In some cases, employees advised customers who were "very closely associated with illicit activity" that they need to be "careful with [their] flow of funds, especially from darknet like hydra", and to create new accounts. "offboarding = bad in cz's eyes"

1 10 78 17K 1

Download Image

Nick Frichette @Frichette_n

2 years ago

New cloud security research! We found a method to bypass CloudTrail logging for both read AND write API actions in AWS Service Catalog! In addition, we also reported an issue with a lack of CloudTrail logging in AWS Control Tower. securitylabs.datadoghq.com/articles/bypas…

3 60 143 33K 24

James Kettle @albinowax

2 years ago

Just submitted my talk proposal to Black Hat USA!🤞 Psyched to share some wild techniques that should burn for a long time after! #BHUSA

6 14 274 22K 3

Scott Piper @0xdabbad00

3 years ago

If you have shell access on an EC2 and want to extract creds, instead of remembering how to get them from the 169.254.169.254 path, recent versions of the AWS CLI allow you to use `aws configure export-credentials --format env`.

3 40 197 24K 52

Aloïs Thévenot @TechBrunchFR

3 years ago

Does anyone has a script to correlate DNS and Portscan results ? Something like github.com/pry0cc/tew but that uses dnsx and naabu ? #bugbounty

0 1 1 283 1

leandro @0xdeaddood

3 years ago

📝 New blog post! Let's talk about NTLM authentication coercion methods using Impacket. Somedays ago, we updated mssqlclient[.]py with many new commands. Among them, the xp_dirtree option was added. MSSQL and xp_dirtree, you know the rest 😉. 0xdeaddood.rocks/2023/02/28/rel…

2 68 168 19K 34

Porchetta Industries @porchetta_ind

3 years ago

📣 We’re excited to announce the launch of Porchetta 2.0! We migrated from Gitlab to Gitea. If you’re an existing subscriber you can access the private tools and updates at git.porchetta.industries. Use your subscription email and perform a password reset to gain access.

1 12 25 8K 3

Cas van Cooten @chvancooten

3 years ago

After almost 2 years of working on NimPlant as a personal side project, I’m proud to release it to the public! NimPlant is a light-weight, first-stage C2 implant written in Nim, with a supporting Python server and Next.JS web GUI. Available here now! 👇 github.com/chvancooten/Ni…

31 204 621 110K 132

Download Image

Shane Huntley @ShaneHuntley

3 years ago

"Fog of War: How the Ukraine conflict Transformed the Cyber Threat Landscape" TAG's biggest ever report. Along with @Mandiant and others from @Google we outline insights into changes in the cyber threat landscape triggered by the war. blog.google/threat-analysi… 1/7

4 251 506 234K 144

Cloudflare @Cloudflare

3 years ago

Recently, a vulnerability was reported to our bug bounty program, in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses. Read about how Cloudflare addressed this vulnerability and what will prevent similar exploits in the future. cfl.re/3DyPBoq