NotMe @zer0s3c

Joined April 2017

Tweets

86
Followers

36
Following

527
Likes

201

NotMe @zer0s3c

4 years ago

When you scan for #Log4Shell,don't just expect to receive a DNS query at the same moment, I received the first call back from a vuln server after 6 min.,another server sent the 1st query after 22 hrs,the third one sent the 1st query after 3 days!! It's hitting so DEEP!#log4j2

0 0 2 0 0

Florian Hansemann @CyberWarship

6 years ago

Juicy potato is basically a weaponized version of the RottenPotato exploit - service account to system 😉 #infosec #pentest #redteam hunter2.gitbook.io/darthsidious/p…

1 41 101 0 10

Download Gif

Panos Gkatziroulis 🦄 @netbiosX

6 years ago

[New Post] Phishing Windows Credentials pentestlab.blog/2020/03/02/phi… #phishing #redteam #pentestlab

0 35 72 0 10

NotMe @zer0s3c

6 years ago

Modern red teaming: 21 resources for your security team techbeacon.com/security/moder…

0 0 0 0 0

mpgn @mpgn_x64

6 years ago

Update CVE-2019-19781 You can exploit the vulnerability without the file newbm.pl and only use the file rmbm.pl ! You can inject your payload inside the name of the XML file and fire the command execution ! 🔥💪 #shitrix #citrix

12 355 738 0 86

Download Image

Paul Seekamp @nullenc0de

6 years ago

Want Free💰? Jump on the Citrix wagon! Pick a program on github.com/arkadiyt/bount… git clone github.com/cisagov/check-… cd check-cve-2019-19781 pip3 install -r requirements.txt cat hosts.txt | while read url ; do cve-2019-19781 $url ;done > loot.txt 2>&1 cat loot.txt | grep appear

9 151 383 0 98

shubs @infosec_au

7 years ago

github.com/righettod/poc-… - Learn GraphQL related exploitation techniques with examples

0 118 206 0 50

Dirk-jan @_dirkjan

7 years ago

New blog! Abusing Exchange: One API call away from Domain Admin. From any user with a mailbox to Domain Admin. Probably affects the majority of orgs using AD and Exchange. dirkjanm.io/abusing-exchan…

27 591 934 0 79

Ashar Javed @soaj1664ashar

7 years ago

Server-Side Template Injection #SSTI github.com/epinna/tplmap + owasp.org/images/7/7e/Ow… + github.com/swisskyrepo/Pa… + medium.com/@david.valles/… + hackerone.com/reports/399462 + blackhat.com/docs/us-15/mat… + 0day.work/jinja2-templat… + pequalsnp-team.github.io/cheatsheet/fla… + blog.orange.tw/2016/04/bug-bo…

2 125 270 0 40

tampe125 @tampe125

7 years ago

Last post for 2018! How to edit WebSocket messages with Burp (link to repo tool included!) #infosec #bugbounty nc-lp.com/blog/edit-webs…

1 17 69 0 8

Emad Shanab - أبو عبد الله @Alra3ees

7 years ago

Web Application Penetration Testing Notes. 1:- XXE 2:- Out of band 3:- XSS 4:- SSRF 5:- SQL Injection 6:- Session Fixation 7:- CSRF 8:- Open Redirect 9:- CRLF Injection 10:- Template Injection 11:- RCE 12:- IDORs 13:- Clickjacking 14:- LFI AND MOORE techvomit.net/web-applicatio…

11 651 1K 0 213

Valerio Brussani @val_brux

7 years ago

“MITM using arpspoof + Burp or mitmproxy on Kali Linux” #pentesting #hacking #infosec link.medium.com/JsbL1pQQtS

0 1 0 0 0

barracuda_ @barracud4_

7 years ago

Yet another memory leak in #ImageMagick or how to #exploit CVE-2018–16323. medium.com/@ilja.bv/yet-a…

1 132 179 0 13

Paulos Yibelo @PaulosYibelo

7 years ago

Here is a zero-day RCE crafted from a tricky XXE, affecting millions of users on NetGear Stora, SeaGate Home, & Medion LifeCloud NAS: paulosyibelo.com/2018/11/zero-d…

5 138 228 0 18

ippsec @ippsec

7 years ago

#HackTheBox Bounty video is up. Relatively easy machine, so do a bunch of extra stuff after root. Merlin, metasploit, and some python coding. youtu.be/7ur4om1K98Y

3 42 143 0 8

Avinash Jain @logicbomb_1

7 years ago

How I was able to download the Source Code of India’s Largest Telecom Service Provider including dozens of more popular websites! #bugbounty link.medium.com/lr5mUWepmR