Vidya Bhaskar @zer0crypt

tweets are my own unless compromised. Earth Joined December 2010

Tweets

780
Followers

209
Following

2K
Likes

1K

Vidya Bhaskar @zer0crypt

2 years ago

Just got a new OffSec credential via @Accredible for scq.io/uWyWXeT #OSEP via @offsectraining

0 1 20 6K 1

Here's the official release of Chisel-Strike: A .NET XOR encrypted Cobalt Strike Aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. github.com/m3rcer/Chisel-… #RedTeaming #CobaltStrike #Pentesting

2 138 331 0 64

PortSwigger @PortSwigger

4 years ago

Introducing DOM Invader: DOM XSS just got a whole lot easier to find portswigger.net/blog/introduci…

9 233 583 0 91

Raj Samani @Raj_Samani

4 years ago

"Adversaries have been using LDAP to perform recon, so if we want to understand the techniques of the attackers. We have to do the same thing, as they do" excellent work by @DebugPrivilege detailing how to hunt for LDAP recon: m365internals.com/2021/05/22/how… #malware #cybersecurity

1 103 257 0 50

Download Image

checkra1n @checkra1n

4 years ago

#checkra1n 0.12.3 released with support for iOS 14.5 and various bug fixes, including M1 support! Grab it at: checkra.in/releases/0.12.…

274 488 2K 0 51

Nicolas Grégoire @Agarri_FR

4 years ago

Looking for injectable DTD files *inside* JAR archives may easily be overlooked. A good read from @iamnoooob 👍 #XXE blog.noob.ninja/spilling-local…

2 86 222 0 68

Zack Freedman @zackfreedman

4 years ago

173 14K 86K 0 745

Download Image

NCC Group Research & Technology @NCCGroupInfosec

4 years ago

Yesterday we published our Public Report on the VPN by Google One system, assessing the product's technical security properties and its associated privacy claims: research.nccgroup.com/2021/04/08/pub…

1 10 33 0 3

Alaa Abdulridha @alaa0x2

5 years ago

Part two of my article about how I hacked Facebook. Total bounty: $54,800 Two account takeover and Internal SSRF. alaa0x2.medium.com/how-i-hacked-f… #bugbountyTip #infosec #facebookbugbounty #CyberSec #bugbounty #bugbountyTips

18 352 1K 0 291

ϻг_ϻε @steventseeley

5 years ago

CVE-2021-26857 is a Exchange Binary Formatter Deserialization RCE triggered in the Microsoft.Exchange.UM.UMCore.PipelineContext class within the FromHeaderFile method via the contactInfo type. Second order deserialization which requires unified messaging enabled (common config)

2 110 291 0 27

Download Image

Jake Miller @theBumbleSec

5 years ago

Just when you thought JSON was the one thing you could trust. My latest research on JSON interoperability vulnerabilities highlights the risks of inconsistent parser behavior (40+ parsers) and attacks to bypass business logic in microservice architectures. labs.bishopfox.com/tech-blog/an-e…

17 514 1K 0 263

Alex Birsan @alxbrsn

5 years ago

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies 👇Check the thread after reading for a few bonus facts👇 medium.com/@alex.birsan/d…

72 2K 4K 0 718

payloadartist @payloadartist

5 years ago

If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it. BugBountyHunting.com #cybersecurity #BugBountytips #infosec #100DaysOfCode

65 1K 2K 0 726

Download Gif

Rahul Maini @iamnoooob

5 years ago

I and @rootxharsh found and exploited a 0Day RCE in Apple's Travel Portal and were rewarded with $50K. Here's the write-up for that: github.com/httpvoid/write…

84 815 3K 0 528

Download Image

Assetnote @assetnote

5 years ago

What do you do once you have found a blind SSRF? Check out our blind SSRF glossary which contains a number of handy attack chains: blog.assetnote.io/2021/01/13/bli…. The post also briefly touches on SSRF canaries, using existing DNS data and side channel attacks.

0 129 270 0 70

Harsh Bothra @harshbothra_

5 years ago

#learn365 Day-2: Regular Expression Denial of Service (ReDoS) Due to weakly implemented RegEx Sometimes it is possible to perform a DoS attack by making this expression to evaluate an expression which will make the application work relatively slow. (1/n) #bugbountytips

5 58 226 0 51

Harsh Bothra @harshbothra_

5 years ago

Created a detailed Mind-Map including How to Test (quick steps) on 2FA Bypass Techniques. (Added few more techniques). MindMap: mm.tt/1736437018?t=S… I hope it will be helpful. #bugbountytips #appsec #infosec

Harsh Bothra @harshbothra_

5 years ago

13 269 724 0 200

8 89 214 0 67

Harsh Bothra @harshbothra_

5 years ago

#learn365 Day-1: 2FA Bypass Techniques 1. Response Manipulation - In response if "success":false, change it to "success":true 2. Status Code Manipulation - If Status Code is 4xx, try to change it to 200 OK and see if it bypass restrictions. (1/n) #bugbountytips