@_chipik

Yet another security researcher

Joined March 2009
  • Tweets365
  • Following243
  • Followers1.4K
42Media
Dmitry Chastuhin retweeted
Gleb Cherbov@cherboff3 Jul 2023
Played around with ChatGPT for pentest reporting. Still a long way from making us unemployed anytime soon. But yeah! It can speed up a boring routine😺
2
3
11
1,472
Dmitry Chastuhin retweeted
gelim@gelim20 Jan 2021
What's missing in recent #Onapsis publicación related to @_chipik's exploit on #CVE-2020-6207 anon #RCE is that #detection rules have been published for #snort/#suricata, nothing's perfect but a good addition when you don't have budget for anything else but a #NIDS...
2
4
Dmitry Chastuhin retweeted
CodeProfiler@codeprofiler9 May 2019
Did the wave of scary news about #10KBLAZE hit you, too? Here are some facts in order to de-escalate the current hype and scaremongering: serpenteq.com/en/blog/10KBla… #SAP #security #gateway #sapmessageserver
1
10
1
10
Dmitry Chastuhin retweeted
gelim@gelim4 May 2019
Some more context on threat analysis detection and defense for our #SAP research presented at #OPCDE with @_chipik at github.com/gelim/sap_ms/blob…
1
8
1
10
Finally @gelim and @_chipik's work on pysap presented during @OPCDE has been merged into master 💣 Check it out: github.com/SecureAuthCorp/py… #testneeded The slide deck is gold 🔥 github.com/comaeio/OPCDE/tre… And so is their exploit code 💥 github.com/chipik/SAP_GW_RCE… github.com/gelim/sap_ms
1
11
1
17
Dmitry Chastuhin retweeted
Joris van de Vis@jvis25 Apr 2019
Boom! RCE via the Message Server be_trusted attack confirmed on multiple SAP versions. Great research from @gelim & @_chipik build on top of @MartinGalloAr his #pysap. Create restricted MS ACL files and restrict access to port 39XX NOW!
3
10
19
Dmitry Chastuhin retweeted
Bob@NotS0Funny14 Mar 2018
Decryption tool for SAP SecStore. Feel free to contact us. Enjoy! github.com/erpscanteam/SecSt…

GitHub - erpscanteam/SecStoreDec: Python script for SAP secure storage decrypton

Python script for SAP secure storage decrypton. Contribute to erpscanteam/SecStoreDec development by creating an account on GitHub.

github.com
1
21
1
27
Dmitry Chastuhin retweeted
gelim@gelim6 Mar 2018
You didn't know what to do with those mangled SAP CODVN hashes dumped via RFC_READ_TABLE? Now you do: erpscan.com/press-center/blo… #sap #abap #hashcat #password #cracking
1
21
1
18
#eko13 Charlas "Get to the Money: Hacking POS and POP Systems" por @_chipik buff.ly/2w0k5Pr
2
11
Dmitry Chastuhin retweeted
gelim@gelim10 Aug 2017
when you arrive at work and find your colleagues have had apparently fun on the evening with latest rig =) @_chipik @NewFranny #erpscan
3
5
Welcome back for #TR16 @sh2kerr & @_chipik!!! Troopers, you will not want to miss these two!! troopers.de/events/troopers1…
5
1
Dmitry Chastuhin retweeted
Dominic White 👾@singe26 Mar 2015
We were asked to do a talk on Mana after our friends @erpscan couldn't at BHASIA. @dcuthbert stepped up & I pushed several mana updates.
5
5
Dmitry Chastuhin retweeted
ZeroNights@ZeroNights21 Oct 2013
HackQuest ZeroNights 2013! Quest will start at Monday, October 21, 8 pm hackquest.zeronights.org/
9
Dmitry Chastuhin retweeted
ZeroNights@ZeroNights27 Aug 2013
Hardware village: bladeRF, HackRF, JTAGulator, Proxmark3, DieDatenkrake, Facedancer, NFC riders, RaspberryPi, Arduino, Teensy #ZeroNights
13
7
Dmitry Chastuhin retweeted
Sergey Belov@sergeybelove20 Aug 2013
XPERIA Go from @Sony - WiFi monitor mode is works on stock firmware! Airodump-ng in action // DSecRG lab
2
5
Dmitry Chastuhin retweeted
Sergey Bobrov@Black2Fan4 Apr 2013
IE 5.5 - 10.0: XSS via Request-Path, XSS via Host, URLencode bypass, XSS filter bypass, Address Bar Spoofing bit.ly/ZBhj6H
2
24
15
Dmitry Chastuhin retweeted
Jeremiah Grossman
@jeremiahg2 Apr 2013
Top Ten Web Hack Techniques of 2012. Slide Deck: bit.ly/11iRq09 Recorded webinar: bit.ly/11iRqND
1
38
28
Dmitry Chastuhin retweeted
Jeremiah Grossman
@jeremiahg25 Feb 2013
#2 is "Pwning via SSRF (memcached, php-fastcgi, etc)" via @erpscan on the Top Ten Web Hacking Techniques of 2012: bit.ly/YSf2Jc
1
9
7
Bypassing XSS Auditor thespanner.co.uk/2013/02/19/…
3
26
14
Dmitry Chastuhin retweeted
Eldar Zaitov@kyprizel6 Feb 2013
Oops, curl SSRF can lead to RCE: blog.volema.com/curl-rce.htm…
1
9
3
Load more