Andrei Agape @msd0s7

I help companies secure their web applications - Cybersecurity strategy, pentesting and advisory | OSCP - CRTP - CARTP #cybersecurity #pentesting #webapp #api tripla.dk Denmark Joined October 2015

Tweets

689
Followers

997
Following

3K
Likes

662

Andrei Agape @msd0s7

8 months ago

𝐑𝐞𝐥𝐞𝐚𝐬𝐢𝐧𝐠 "𝐒𝐎𝐀𝐏𝐈 - 𝐒𝐜𝐚𝐧𝐧𝐞𝐫 𝐨𝐟 𝐎𝐩𝐞𝐧𝐀𝐏𝐈" 𝐝𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧𝐬 👇 After my OWASP presentation from last year, many people asked me when/if the tool is public because they'd love to give it a try Well, now it is! 😄 github.com/andrei8055/SOA…

0 0 2 104 0

Andrei Agape @msd0s7

a year ago

Level up your offsec skills with the Weekly Pentest Tips & Tricks course 👇 sqrsec.com/tips-and-tricks

0 0 0 136 0

Andrei Agape @msd0s7

a year ago

𝐓𝐢𝐫𝐞𝐝 𝐨𝐟 𝐭𝐡𝐞 𝐬𝐚𝐦𝐞 𝐨𝐥𝐝 𝐟𝐮𝐳𝐳𝐢𝐧𝐠 𝐰𝐨𝐫𝐝𝐥𝐢𝐬𝐭𝐬? 👇 Download my custom-made collection of API wordlists which I scraped from 120,000+ public documentations -> API ports, paths, parameters, objects, headers and many more: sqrsec.com/api-fuzzing-li…

0 2 5 180 2

CVE @CVEnew

a year ago

CVE-2024-22272 VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware Cloud … cve.org/CVERecord?id=C…

0 2 1 616 0

Andrei Agape @msd0s7

a year ago

SVGs images (unlike other image types) don't rely on unique pixels But they use 'vector' data What many applications and developers fail to understand is that SVG files are just XML documents with graphical tags. This is usually abused to inject XXE, XSS and SSRF payloads

0 1 5 249 2

Download Image

Andrei Agape @msd0s7

2 years ago

GraphQL DoS Payload 👇 This payload abuses the option to concatenate multiple queries into one single request. When the number of batched requests were increased, an exponential increase in response time was also observed, ultimately exhausting the server. #graphql #pentest