SamBeckS @SamBeckS

CEO DSecBypass dsecbypass.com Joined October 2015

Tweets

567
Followers

780
Following

770
Likes

2K

Thomas Stacey @t0xodile

11 months ago

Excited to release my latest research today. Exploiting CORS can be a tricky in modern web apps, but there are still critical cases out there if you know what to look for. If you want to learn more about CORS exploitation, the research is available at outpost24.com/blog/exploitin…

2 62 179 15K 149

Charles Fol @cfreal_

11 months ago

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT

Ambionics Security @ambionics

11 months ago

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT https://t.co/XOiXdF9Nff

1 54 145 44K 54

2 70 240 34K 131

Download Video

André Moulu @andremoulu

11 months ago

the @CellebriteLabs French🇫🇷 team is recruiting! Don't miss the rare opportunity to join a team that specializes in breaking Android security boundaries (bootchain/trustzone/Secure Element/kernel and other goodies) for forensic purposes. ⤵️ 1/5

1 19 55 11K 10

Stéphane Bortzmeyer @bortzmeyer

a year ago

Si vous gérez des serveurs #DNS (qu'ils soient résolveurs ou faisant autorité), lisez bien ce décret, vous avez plein de nouvelles obligations legifrance.gouv.fr/jorf/id/JORFTE… Si vous utilisez des serveurs DNS (c'est a priori le cas 😀), réfléchissez à ceux que vous utilisez.

17 117 240 58K 201

Somdev Sangwan @s0md3v

a year ago

Little trick to find cloud storage of a company allinanchor:amazonaws site:example.com

1 15 110 11K 129

bsysop @bsysop

5 years ago

When you are fuzzing API Endpoints worth you add XMLHttpRequest headers, some frameworks filter requests that don't was called by Frontend Applications. - "X-requested-with: XMLHttpRequest" * Found in some PHP frameworks. #BugBounty #BugBountyTips #Pentesting

3 54 206 0 130

ACE Responder @ACEResponder

a year ago

How the #XZUtils SSHD backdoor works. #ThreatHunting #DFIR #xzbackdoor Based on @amlweems POC

1 173 576 33K 319

Download Video

Thomas Roccia 🤘 @fr0gger_

a year ago

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)! I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis…

101 3K 13K 1.1M 7K

Download Image

parth @parth220_

a year ago

Last night, I was targeted for a sophisticated phishing attack on my Apple ID. This was a high effort concentrated attempt at me. Other founders are being targeted by the same group/attack, so I’m sharing what happened for visibility. 🧵 Here’s how it went down:

39 647 2K 522K 1K

Cyber Advising @cyber_advising

2 years ago

CVE-2023-36899 - CVE-2023-36560: Source Code Disclosure in ASP.NET apps. PoC swarm.ptsecurity.com/source-code-di…

0 10 41 5K 16

Download Image

Julien Briault 🩷💿💜 @ju_hnny5

2 years ago

Aux @restosducoeur, nous recherchons activement des modules SFP (Juniper, Cisco Fortigate), câblage fibre, DAC 10G et surtout des disques dur/SSD (idéalement SAS) pour notre infrastructure. N'hésitez pas à me contacter. Merci par avance pour votre aide !🩷

21 126 104 115K 14

JS0N Haddix @Jhaddix

2 years ago

My newsletter "Executive Offense" is back from haitus! Check out this weeks issue on Mobile Application Hacking resources (pt 1) featuring: @DanielMiessler @OWASP_MAS @BHinfoSecurity @lain7z @martrudix @8kSec executiveoffense.beehiiv.com/p/executive-of…

5 36 130 18K 32

Download Image

Root-Me @rootme_org

2 years ago

Need more points on Root-Me? To make up for it : 5 new Miscellaneous challenges are now available on the Root-Me and Root-Me Pro environments. root-me.org/?page=news&lan… Many thanks to the authors: @Njord_____, @0xTRIKKSS, @Elweth_, #Mister7F and #S1m 👏 !

0 6 14 5K 1

Download Image

Root-Me @rootme_org

2 years ago

✅ NEW FREE-ACCESS CHALLENGE ✅This Network Challenge is now open access on Root-Me: 𝐀𝐑𝐏 𝐒𝐩𝐨𝐨𝐟𝐢𝐧𝐠 - 𝐄́𝐜𝐨𝐮𝐭𝐞 𝐚𝐜𝐭𝐢𝐯𝐞 👉 root-me.org/en/breve/First… Thanks to @voydstack for this creation 💪☠️ Enjoy !

Root-Me @rootme_org

2 years ago

0 1 15 5K 0

Download Image

1 5 18 3K 1

Root-Me @rootme_org

2 years ago

Can't wait to see some new web server challenges? 4 new ones are now available! Thanks to the authors: @_Sanlokii #lolo42, #K4ndar3c 👏 ! root-me.org/?page=news&lan… + 🥳 we've got a new contest just for you! 3 of you could win: 1 months' Premium subscription => be among the first 3…

0 5 14 2K 0

Download Image

Haax @Haax9_

2 years ago

Hello Twitter! Petit post recrutement, notre équipe offensive recrute actuellement un ou deux profils afin de renforcer l'équipe technique sur Rennes ou Nantes Idéalement, on recherche un profil disposant d'une double compétence [1/n]

2 28 39 17K 6

Mayfly @M4yFly

2 years ago

A new Lab 🏰 is available on GOAD: NHA. This time it is a challenge, 5 vms, you start with no account and try to get domain admin on the two domains. github.com/Orange-Cyberde… Have fun !

8 158 465 36K 151

Download Image

DSecBypass @DSecBypass

2 years ago

Some (non-exhaustive) advices from the @DSecBypass experience to get maximum return on investment on your #pentest. dsecbypass.com/en/prepare-and…

0 2 0 129 1

Charles Fol @cfreal_

2 years ago

#Fortinet published a patch for CVE-2023-27997, the Remote Code Execution vulnerability @DDXhunter and I reported. This is reachable pre-authentication, on every SSL VPN appliance. Patch your #Fortigate. Details at a later time. #xortigate

25 295 700 371K 95

🐞Sara Badran @SaraBadran18

2 years ago

Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3 at @Sitecore -- publication date : 2023-05-10 -- by Dylan Pindur -- blog.assetnote.io/2023/05/10/sit… -- #BugBounty #BugBountytips #hackeronereport #writeups #BugBountywriteupspublished