mpoitsos @mpoitsos

Joined October 2015

Tweets

240
Followers

28
Following

375
Likes

344

Kévin GERVOT (Mizu) @kevin_mizu

a year ago

Great research from @scryh_! I was keeping it for a CTF challenge, but it's probably too late now :p This trick is so powerful that it can be used to bypass most (if not all) server-side HTML sanitizers in the absence of a charset within the Content-Type response header 🤯

Sonar Research @Sonar_Research

a year ago

7 212 631 106K 500

Download Image

2 66 326 33K 236

Download Image

LADbible @ladbible

a year ago

The king of controversy isn't finished yet 👀🍿

69 83 1K 435K 12

Download Image

JS0N Haddix @Jhaddix

2 years ago

My personal GPT for offensive security, SecGPT. Been working on it for a while now. I use it like i have a peer in a chair next to me, asking questions to learn and bounce ideas off of. Enjoy: chat.openai.com/g/g-HTsfg2w2z-…

24 310 1K 104K 1K

Ricky Gervais @rickygervais

2 years ago

Tell me which country you're watching #Armageddon in and lets keep it at Number 1 👊 Also, hope you had a great 2023 ❤️

3K 465 7K 609K 32

Download Image

Ricky Gervais @rickygervais

2 years ago

#Armageddon was a record-breaking tour and is now Number 1 on Netflix worldwide. Please don't retweet this as it may annoy some people. Thank you 🙏

510 3K 9K 637K 26

Download Image

Bogdan Djukic @bdjukic

2 years ago

A group of security researchers from Technical University in Berlin managed to get root access to @Tesla's Autopilot computer by exploiting Secure boot mechanism with voltage glitching. #37c3 #tesla #carhack

54 762 5K 534K 952

Download Image

Ricky Gervais @rickygervais

2 years ago

Drink my vodka & watch my special. #NetflixAndShill 😂

255 121 3K 341K 10

Download Image

Soufiane @S0ufi4n3

2 years ago

Potentiel shitstorm ahead: CVE-2023-51385: OpenSSH OS command injection vulnerability. Merry Christmas! vin01.github.io/piptagole/ssh/…

5 128 430 62K 166

Security Blue Team @SecBlueTeam

2 years ago

You asked and we answered... Because of the interest in our merch, we've decided to run a giveaway! We're offering merch bundles to 10 lucky winners (items may vary to those shown). To enter: 🛡️ Follow us and @CysecCareers 🛡️ Retweet this tweet Worldwide. Closes Jan 5, 2024

106 588 343 54K 23

Download Image

Akamai Security Intelligence Group @akamai_research

2 years ago

Turns out, sometimes it isn't DNS... it's DHCP 👀 See @oridavid123's research on how DHCP can be used to spoof DNS records- potentially leading to Active Directory compromise. Worst part? No credentials needed, just network access. Full write-up: akamai.com/blog/security-…

3 102 288 39K 97

Download Image

Zak @_ZakSec

2 years ago

For those interested in developing standalone binaries that exploit vulnerable drivers (BYOVD), I just released a tool called IoctlHunter. This tool ease the process of identifying weaponisable IOCTL codes in win drivers 👌 📚 Blog post, code & full demo: z4ksec.github.io/posts/ioctlhun…

11 233 744 81K 392

Download Video

Cube0x0 @cube0x0

4 years ago

Let me introduce you to KrbRelay, the only public tool for relaying Kerberos tickets and the only relaying framework written in C#. No-fix LPE + No-fix Cross-Session, VDI deployments has never been more broken. Demo at Images/demo.mp4 ! github.com/cube0x0/KrbRel…

16 440 1K 0 196

Download Image

sysxplore @sysxplore

2 years ago

Linux awk command cheatsheet

4 143 670 77K 381

Download Image

OpenAI @OpenAI

2 years ago

OpenAI announces leadership transition openai.com/blog/openai-an…

3K 4K 14K 13.1M 1K

PortSwigger Research @PortSwiggerRes

2 years ago

We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class: portswigger.net/research/smash…

9 223 568 114K 147

HaxRob @haxrob

2 years ago

This invasive Bluetooth car battery monitor was found to be sending the following location data to 🇨🇳 - GPS - Wifi devices - Cell phone towers The Apple and Google app stores said no personal data was collected. A new update has emerged. Let's see what was changed 👇(1/n)

64 1K 4K 1.1M 1K

Download Image

Bug X Hunter 💻 @Bug_X_hunter

2 years ago

💻CVE-2023-35078💻 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core. This vulnerability impacts all supported versions. #BugBountytips #BugBounty

3 47 149 13K 51

Download Image

Shodan @shodanhq

2 years ago

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: account.shodan.io/billing/member

130 871 2K 614K 277

Barnacules Nerdgasm @Barnacules

2 years ago

Did you know that @Cloudflare has public DNS servers that block Malware -or- Adult Content? 🤔 1.1.1.1 - Resolve Everything 1.1.1.2 / 1.0.0.2 - Block Malware 1.1.1.3 / 1.0.0.3 - Block Malware & Adult Like, Follow & Share if you enjoy these Tweets! #TechTalk #Networking #Tips

72 1K 4K 376K 2K

Download Image

Feross @feross

2 years ago

I wish more developers understood the constant stream of malware that is posted to npm, PyPI, and all package managers... Here's just a taste of some crazy malware Socket identified in the past couple weeks... All malware descriptions were FULLY WRITTEN by Socket AI.