hackingkurzy @hackingkurzy

Hackerlab hacking trainings hackingkurzy.cz Czech Republic Joined November 2015

Tweets

2K
Followers

86
Following

193
Likes

160

Cyber Advising @cyber_advising

2 years ago

CVE-2023-25136: OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2 PoC github.com/adhikara13/CVE…

0 20 69 8K 25

Download Image

Md Ismail Šojal 🕷️ @0x0SojalSec

3 years ago

WEB / BUG BOUNTY - APIs Resource API endpoints (gist.github.com/yassineaboukir…) - API Security part 1 (medium.com/datadriveninve…) - 31 Tips for pentesting APIs (medium.com/bugbountywrite…) - 31 Tips (drive document) (docs.google.com/spreadsheets/d…)

23 256 595 34K 277

Sam Curry @samwcyo

3 years ago

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies: samcurry.net/web-hackers-vs… Contributors: @_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

60 734 2K 341K 494

Nicolas Krassas @Dinosn

3 years ago

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE) github.com/stealthcopter/…

5 116 345 30K 95

Most of times html special charters like < > are properly encoded by giving a user input like: when the user tries to gives an input like this: →<img src=x onerror=alert(1)> And he got an actual reponse from the server like that: →<img src=x onerror=alert(1)>

2 26 88 8K 18

Bharath | భరత్ @0xbharath

3 years ago

Slides from the talk "An attacker’s guide to AWS Access Keys" that I have delivered a while ago. Covers various techniques, tools using which attackers can gain access to #AWS Access Keys (Security Creds) #AppSec #CloudSec speakerdeck.com/0xbharath/an-a…

9 107 314 0 140

Nicolas Grégoire @Agarri_FR

3 years ago

Reminder: when dealing with SQL injections, never use tautologies like "OR 1=1", they're too dangerous 🚨

MD Sagor Hossain (Professor) @bughuntar

3 years ago

Reminder: when dealing with SQL injections, never use tautologies like "OR 1=1", they're too dangerous 🚨

31 495 2K 0 654

Download Image

8 25 157 0 50

hackingkurzy @hackingkurzy

3 years ago

HTTP 1.0 without Host header medium.com/@abbasheybati1…

0 0 0 0 0

Begin n Bounty @beginnbounty

3 years ago

Old database dumps may contain all kinds of interesting information – user credentials, configuration settings, secrets and API_ keys, customer data and more: 👇 #bugbountytips #infosec

8 80 292 0 101

Download Image

Ptrace Security GmbH @ptracesecurity

3 years ago

dnsReaper - Subdomain Takeover Tool For Attackers, Bug Bounty Hunters And The Blue Team! kitploit.com/2022/08/dnsrea… #Pentesting #BugBounty #BlueTeam #WebSecurity #Infosec

1 22 45 0 7

Download Image

Ptrace Security GmbH @ptracesecurity

3 years ago

Linux Kernel Exploit (CVE-2022-32250) with mqueue blog.theori.io/research/CVE-2… #Pentesting #Linux #Kernel #Exploit #CyberSecurity #Infosec

0 22 39 0 9

Download Image

Ryan M. Montgomery @0dayCTF

3 years ago

HoaxShell (Encrypted Reverse Shell) - Currently undetected by Windows Defender, based on HTTPS traffic & supports SSL. Easy to use! - Repo: github.com/t3l3machus/hoa… - Creator: @t3l3machus - - #cybersecurity #infosec #CTF #bugbountytips #cybersecuritytips

18 132 435 0 109

Download Image

PortSwigger Research @PortSwiggerRes

3 years ago

We've just pieced together a playlist with the best recordings of all our past talks. Enjoy! youtube.com/playlist?list=…

2 60 183 0 39

hackingkurzy @hackingkurzy

3 years ago

Hack in space. threatpost.com/starlink-hack/…

0 0 0 0 0

Kali Linux @kalilinux

3 years ago

Just in time for #BHUSA, we are excited to announce the release of Kali Linux 2022.3! kali.org/blog/kali-linu… Check out the link to see all about the new features, our new discord server, the latest NetHunter updates, and more! Enjoy BlackHat and DefCon everyone!

27 299 896 0 40

Download Image

Bezpečnost stránek @IT_bezpecnost

3 years ago

K téma bezpečnosti: Češi zabodovali. V první kancelářské budově na světě nahradili přístupové karty za iPhone a Apple Watch ift.tt/aNv8hno

0 2 2 0 0

Arth Bajpai 🇮🇳 @arth_bajpai

3 years ago

A Insanely well written writeup by @ByQwert 🤞 link.medium.com/4nHVS0HWurb

1 66 221 0 73

Emad Shanab - أبو عبد الله @Alra3ees

3 years ago

Bug Bounty Tips:- Part 1:-

20 246 810 0 366

Download Image

Pethuraj M @Pethuraj

3 years ago

toxssin☣️A POST-XSS exploitation tool. » github.com/t3l3machus/tox… #cybersecurity #bugbounty #infosec #bugbountytips #xss

8 179 474 0 123

Download Image

The Fuzzing Book @FuzzingBook

3 years ago

The Fuzzing Book 1.1 is out! Now with 23 course videos, interactive quizzes, type annotations, updated code that you can run in your browser, and much more. Want to learn how to generate software tests? Check out @FuzzingBook at fuzzingbook.org 1/6