Brian Hysell (@BrianHysell) profile picture

Brian Hysell

@BrianHysell

Pretend appsec guy

 Atlanta
Joined September 2013
  • Tweets19
  • Following213
  • Followers42
My colleague @BrianHysell wrote an awesome blog on backdooring Jenkins builds! Check it out synopsys.com/blogs/software-…
6
13
After much procrastination, my write-up of (some of) the OpenClinic GA vulnerabilities I found that were disclosed last year. brianhysell.com/posts/opencl…
Brian Hysell retweeted
Lewis Ardern (@LewisArdern) profile picture
Lewis Ardern@LewisArdern4 Feb 2021
I had fun speaking with @ethicalhack3r check out the video
SecuriTEA & Crumpets (@SecuriTnC) profile pictureSecuriTEA & Crumpets@SecuriTnC4 Feb 2021
If you weren't able to watch the live stream, episode 2 with @LewisArdern and @ethicalhack3r is now on YouTube! youtube.com/watch?v=wVbNdlUH…
SecuriTEA & Crumpets - Episode 2 - Ryan Dewhurst - WPScan

SecuriTEA & Crumpets - Episode 2 - Ryan Dewhurst - WPScan

SecuriTEA & Crumpets is a series where security professionals come ...

youtube.com
1
3
1
Brian Hysell retweeted
ICS-CERT (@ICSCERT) profile picture
ICS-CERT@ICSCERT2 Jul 2020
CISA issued medical advisory ICSMA-20-184-01 OpenClinic GA to the ICS webpage - go.usa.gov/xwuBq #cyber #cybersecurity #infosec #ICS
3
1
Intro to Pentesting Jenkins slideshare.net/BrianHysell/i… via @SlideShare
Intro to Pentesting Jenkins

Intro to Pentesting Jenkins

The document discusses the security vulnerabilities and penetration testing techniques for Jenkins, a widely-used CI/CD system. It highlights the importance of securing Jenkins to prevent unauthori...

slideshare.net
1
1
3
We'd like to recognize our only Crystal Sponsor: @Synopsys
Image from BSides Atlanta (@bsidesatl)
2
1
Slightly shorter: {{$on.constructor('alert(1)')()}}
Gareth Heyes \u2028 (@garethheyes) profile pictureGareth Heyes \u2028@garethheyes26 Oct 2018
AngularJS 1.6 shorter vector: {{$eval.constructor('alert(1)')()}}
1
20
86
Thanks @BSidesAugusta @philplantamura for the opportunity to give my first (but hopefully not my last) conference talk! It was nerve-wracking, but a lot of fun.
1
3
Pentesting Modern Web Apps: A Primer slideshare.net/BrianHysell/p… via @SlideShare
2
2
OSCAR EMR 15.21beta361 XSS / Disclosure / CSRF / Insecure Direct Object Reference packetstormsecurity.com/file… #exploit
1
Brian Hysell retweeted
Full Disclosure (@SecLists) profile picture
Full Disclosure@SecLists6 Jan 2016
Unauthenticated remote code execution in OpenMRS goo.gl/fb/iPuRtN #FullDisclosure
1
I hope it's the bug that's being called out and not the reporter. ;) teapaw.org/sneakatdatavibe/status…
Load more