breno_css @breno_css

Joined April 2020

Tweets

125
Followers

133
Following

382
Likes

1K

Mente Binária (ONG) @mentebinaria

4 months ago

🚀 Orgulho nacional! 🇧🇷 Parabenizamos todos os envolvidos por essa conquista histórica! Vocês levaram o nome do Brasil ao topo e mostraram que nossa comunidade de CTF está cada vez mais forte e preparada para desafios globais! 🔗 Assista o vídeo em youtube.com/watch?v=5Yt3HG…

2 7 41 1K 3

Download Image

Epic Leet Team @eltctfbr

4 months ago

youtube.com/watch?v=5Yt3HG… Obrigado @mentebinaria ! Não foi dessa vez mas DEFCON que nos espere ano que vem! Até lá, como todos devem fazer sempre, estudaremos! Obrigado novamente ao @hackaflag por nos receber!

0 1 10 277 0

Download Image

Epic Leet Team @eltctfbr

5 months ago

Brazil made history last weekend, and of course, ELT was a part of it! Thanks @GaneshICMC , @boitatech , @gris_ufrj and #hawksec_unifei for partnership! We got 17th place, the best brazilian result, at #DEFCONCTF Quals as "pwn de queijo"! Thanks @hackaflag for hosting us!

0 8 35 2K 1

Download Image

bugcrowd @Bugcrowd

9 months ago

Where there’s bug bounty, there’s #Bugcrowd. 😉✨ We’re honored to have supported the @BugBountyBr at H2HC in #Brazil, big thanks to @bsysop! Seeing the hacker community come together with such passion was nothing short of amazing (as always). 🥲 Huge thanks to the organizers,…

0 12 32 6K 1

Download Image

OtterSec @osec_io

9 months ago

NEW blog post: Netfilter Universal Root 1-day Our latest blog dives deep into the state of Linux kernel security and the open-source patch-gap, exploring how we monitored new bug fixes and achieved 0day-like capabilities by exploiting a 1-day vulnerability. Read more here →

0xTen @_0xTen

9 months ago

3 113 431 50K 154

Download Image

1 8 48 5K 7

Alex Plaskett @alexjplaskett

10 months ago

✍️ Pivoting Capabilities and Conquering the Linux Kernel by @_0xTen youtube.com/watch?v=bxJhlw…

1 9 38 3K 13

Luan Herrera @lbherrera_

a year ago

Seeing that Pwn2Win isn't happening this year, here's an unreleased beginner-level XSS challenge I created for it (shouldn't be too difficult). lbherrera.me/challenge

3 13 49 5K 20

HackerOne @Hacker0x01

a year ago

The results are in!🥇 Congratulations to these 32 teams who will move on to the Group Round of the 2024 #AmbassadorWorldCup! 🙌 The next round kicks off at the end of August! Stay tuned for the latest info, and read more about the AWC here. bit.ly/3SwGbkV

45 53 307 182K 25

Download Image

[email protected] @r3tr074

a year ago

Excited to read about browsers??? 👻

Phrack Zine @phrack

a year ago

Excited to read about browsers??? 👻

25 133 534 126K 49

Download Image

0 4 94 3K 1

Balthasar @BalthasarMartin

a year ago

Today at #Troopers24 we released Certiception – the ADCS honeypot we always wanted to have. Blog: srlabs.de/blog-post/cert… Source code: github.com/srlabs/Certice… Slide deck, including our guide to deception strategy: github.com/srlabs/Certice…

2 163 403 33K 217

Luan Herrera @lbherrera_

a year ago

Decided to give my childhood game a try now that they relaunched Habbo's 2005 version back again, oops! (It was already reported and fixed).

9 13 205 47K 48

Download Video

Luan Herrera @lbherrera_

a year ago

"Additionally we set Attack Complexity to High because the attack depends on the victim being authenticated in their default browser" - Shopify

6 2 47 7K 1

cloud @cloud11665

a year ago

casual CSS injection on github using the math mode

163 415 6K 792K 2K

Download Image

[email protected] @r3tr074

a year ago

Just dropped my exploit with new cross-{cache,bucket} techniques (I love the creativity of kernel exploits, it gave me a very cool experience with SLAB allocators), the coolest part for me is the exploit, basically almost any memory corruption in Blink/Chrome can achieve RCE :D

xvonfers @xvonfers

a year ago

0 43 133 42K 59

Download Image

8 40 150 21K 65

blasty @bl4sty

a year ago

auth bypass confirmed! > INFO:paramiko.transport:Authentication (password) successful! mm_keyallowed_backdoor cmd 1 allows to override the response for mm_answer_authpassword with a custom one. if you set it to { u32(9), u8(13), u32(1), u32(0) } you can login with any pass 🤓

14 141 1K 109K 111

‌Renwa @RenwaX23

2 years ago

XSS to OAuth access token leak in office online which can be used to account takeover Includes strict CSP bypass, postMessage origin spoof, how MSRC handle reports! I'm sharing this because MSRC considered this as (Low Quality Report) and awarded $500 gist.github.com/RenwaX23/03118…

10 66 320 41K 106

Download Image

Obsidian @obsdmd

2 years ago

Obsidian has been independently audited by the security firm @cure53berlin — you can find the report on our new /security page. obsidian.md/blog/cure53-se… Obsidian is designed to be a private and secure space for your thoughts. Since the start, Obsidian has been built to give you…

15 63 812 104K 121

Timo Lo(n)gin @timolongin

2 years ago

Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing! r.sec-consult.com/smtp

18 86 239 21K 105

Eduardo Vela @sirdarckcat

2 years ago

Google's Product Security Team (my broader team!) is hiring in Brazil! Here's the link for the Manager we want to hire there to start the team! google.com/about/careers/…