X @c0rv4x

Joined November 2014

Tweets

849
Followers

1K
Following

182
Likes

1K

X @c0rv4x

3 years ago

Jeez, I hate reading twitter on 1st April...

0 0 2 0 0

X @c0rv4x

4 years ago

This year CCC was cancelled, so we hosted out own! @BushwhackersCTF

2 0 5 0 0

Download Image

X @c0rv4x

4 years ago

I haven't been watching security scene for the last year, now I want to catch up! Could you guys kindly send me the articles which you find interesting/noteworth in terms of security? 🙏

8 0 3 0 0

X @c0rv4x

4 years ago

That's some new side of transparency. Have seen your really great and open work at mail.ru and now in Acronis. Mad respects

Sergey Belov @sergeybelove

4 years ago

That's some new side of transparency. Have seen your really great and open work at mail.ru and now in Acronis. Mad respects

0 1 13 0 0

1 0 3 0 0

PT SWARM @ptswarm

4 years ago

This is bizzare

22 99 255 0 11

Download Image

0 0 4 0 0

X @c0rv4x

4 years ago

The man is a beast! Make sure you do check his latest research and subscribe to his account

Emil Lerner @emil_lerner

4 years ago

The man is a beast! Make sure you do check his latest research and subscribe to his account

3 149 336 0 103

0 1 8 0 1

Me and @d0znpp wrote an article on http2smugl (my tool that detects HTTP request smuggling that happens during HTTP2 termination) with detailed usage examples and #bugbountytips lab.wallarm.com/http2smugl-htt…

2 81 177 0 60

Bee 🐝 @securibee

4 years ago

http2smugl: HTTP2 request smuggling security testing tool lab.wallarm.com/http2smugl-htt…

0 18 46 0 17

PT SWARM @ptswarm

5 years ago

#Pentest pivoting cheat sheet for #redteam

3 117 355 0 61

Download Image

Emil Lerner @emil_lerner

5 years ago

I'm releasing my tool that detects HTTP Request Smuggling opportunities that arise during HTTP/2 -> HTTP/1.1 conversion by the "frontend" servers: github.com/neex/http2smugl. Comments & suggestions much appreciated. @albinowax what do you think about that?

2 160 426 0 97

PT SWARM @ptswarm

5 years ago

New attack! Our researcher Arseniy Sharoglazov has discovered a method to connect to LDAP via #MSExchange from the Internet and access the whole Active Directory database. Read the research: swarm.ptsecurity.com/attacking-ms-e…

10 638 1K 0 168

Download Image

PT SWARM @ptswarm

5 years ago

New article by Mikhail Klyuchnikov: RCE in F5 Big-IP (CVE-2020-5902) swarm.ptsecurity.com/rce-in-f5-big-…

4 156 324 0 31

Download Image

X @c0rv4x

5 years ago

PT SWARM is absolutely a fantastic idea! Also Arseniy is one of the best and most humble authors on infosec right now. Be sure to check his blog too: mohemiv.com

Arseniy Sharoglazov @_mohemiv

5 years ago

PT SWARM is absolutely a fantastic idea! Also Arseniy is one of the best and most humble authors on infosec right now. Be sure to check his blog too: mohemiv.com

0 4 17 0 0

Download Image

0 0 4 0 0

X @c0rv4x

5 years ago

Omg, my mind blown during the first 25 seconds!

FD @filedescriptor

5 years ago

Omg, my mind blown during the first 25 seconds!

14 365 856 0 261

0 0 1 0 1

X @c0rv4x

5 years ago

I just did `vim ~/.emacs`. Am I a sinner?

0 0 2 0 0

vient @_vient_

5 years ago

Made a context menu launcher for IDA which automatically chooses 32 or 64-bit version based on `file` output run in WSL: gist.github.com/vient/db5af9a8… Usage: right click on file, Open with IDA. Set your IDA_DIR env or change it in ida_launcher.bat

2 1 2 0 0

Andrei Abakumov @andrewaeva

5 years ago

SSRF + CRLF + HTTP Pipeline + Docker API = RCE… How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber link.medium.com/dSWQ6ewPL6