Spenge @SpengeSec

Tweets

123
Followers

165
Following

225
Likes

33

CVE Announcements @CVEannounce

4 years ago

641 CVE Records + their NVD CVSS scores when available in CISA’s Vulnerability Summary bulletin for the week of August 9, 2021 us-cert.cisa.gov/ncas/bulletins… #CVE #CVEID #NVD #CVSS #Vulnerability #VulnerabilityManagement #HSSEDI #CISA

0 1 0 0 0

James Kettle @albinowax

5 years ago

Want a free scholarship pass to Black Hat USA? I have two to offer to the first two eligible students to complete all ten deserialization labs by 2359 UTC Friday portswigger.net/web-security/d…

5 66 208 0 15

Spenge @SpengeSec

5 years ago

Wrote a script in bash this morning to automate the creation of virtual hosts in Apache2. It's fully automated and makes life a lot easier! Feel free to take a look: github.com/SpengeSec/Mult…

0 0 4 0 1

Spenge @SpengeSec

6 years ago

Just owned system on Cascade ! hackthebox.eu via @hackthebox_eu

0 0 2 0 0

Florian Hansemann @CyberWarship

6 years ago

Attack Methods for Gaining Domain Admin Rights in Active Directory #infosec #pentest #redteam adsecurity.org/?p=2362

2 108 284 0 52

Wow, a lot of people asking for the script and asking for mentorship. Methodology: 1) Identify bug bounty 2) Enumerate sub domains (I use amass, subfinder) 3) Feed those to httpprobe 4) Feed that list to a crawling tool 5) Feed that list to kxss 6) grep output for " (easiest win)

7 115 458 0 166

Spenge @SpengeSec

6 years ago

When vulnerabilities lead to goodies... Hopefully we can disclose soon. Thank you @Centreon

0 1 8 0 0

Download Image

Hussein Daher @HusseiN98D

6 years ago

WooT! There is always a way. New #bugbounty #pentest short write up! Chain the bugs till you get what you want. #bugbountytip #bugbountytips #hacking Some steps were not mentionned. RT, Like and Comments are appreciated. For any pentest work DM me:) 🎉🎉

27 213 734 0 143

Download Image

Luke Stephens (hakluke) @hakluke

6 years ago

FINALLY releasing hakrawler! A web crawler for hackers! Check out the blog post for details. medium.com/@hakluke/intro…

27 434 1K 0 284

Download Image

Edward Snowden @Snowden

6 years ago

The subtitles are very slightly more readable in this version of the video (via reddit).

442 4K 8K 0 419

Download Video

Spenge @SpengeSec

6 years ago

spenge.pw has been completely revamped, it no longer is a filthy WordPress website! I will be gradually migrating my write ups to the new website.

0 1 1 0 0

Spenge @SpengeSec

6 years ago

Officially confirmed by Mitre and Centreon. CVE-2019-19699 affecting Centreon Infrastructure Monitoring Systems =< 19.10. Found by me and TheCyberGeek. #SpengeSec #TheCyberGeek #CVE #0day

1 1 6 0 0

Spenge @SpengeSec

6 years ago

If you don't have a password manager yet, now is the time to get in! @1Password is giving out 1 year family plans, for free: start.1password.eu/sign-up/family…

0 0 0 0 0

Spenge @SpengeSec

6 years ago

Thank you so much @netsecfocus, you're an absolute legend! Made a selection of those that I'll keep, and those that I will be giving away.

1 0 7 0 0

Download Image

Luke Stephens (hakluke) @hakluke

6 years ago

Want to do some lazy bug bounty hunting today? Get the ASN of a company by using this (in this case, Tesla): whois -h whois.cymru.com $(dig +short tesla.com) Then use the ASN filter in Shodan to scroll through their IP space. shodan.io/search?query=a…

7 128 401 0 136

Kali Linux @kalilinux

6 years ago

Keep your eyes open this week! We are starting up something awesome for everyone…

144 976 4K 0 43

Download Video

Somdev Sangwan @s0md3v

6 years ago

I just made my "Corsy" public ❤️ It scans for all known misconfigurations in CORS implementations (currently 10+ checks). Github: github.com/s0md3v/Corsy