Security guy with SysAdmin & DevOps background; MTB enthusiast @Ciklogen; Activist @cryptopartyrs, @hklbgd, @LiBRE_magazin, https://xitter.cf/t.co/BChyfjy6qQ, https://xitter.cf/t.co/lTIsiRXNZf
Serbia
Joined February 2011
- Tweets8.8K
- Following1.3K
- Followers839
- Likes47.6K
Imamo jedan server na mreži koji ja zovem vežbanka (idealan za vežbanje mlađanih pentestera) - ima toliko ranjivosti da bi napadač pomislio ma ovo je 100% honeypot nisam ja toliko glup hehe
#cybersecurity
overused retweeted
Nalog @lazidetektor, jedan od glavnih za širenje laži koje se posle pojavljuju na Informeru kao i dele među botovima na ovoj mreži nije ništa objavio već 15 sati.
overused retweeted
🚨 UPDATE: The Brotli flaw (CVE-2026-111497) goes beyond Node.js and web traffic.
• .NET: patched by Microsoft
• FFmpeg: hit via a crafted JPEG XL image
• ClickHouse: one request crashes it, fix not yet released
• Apache Arrow: no fix yet
Details ↓ thehackernews.com/2026/10/br…
overused retweeted
I found a new RCE bug in PHP, missed by previous auditing teams. It’s unpatched in PHP v8.5.12
overused retweeted
🚨 PHP warns of another unpatched remote code execution risk; CVE-2026-115560
The newly disclosed vulnerability is separate from the two PHP2Shell flaws patched earlier this week and is not fixed by PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
⠀
PHP says exploitation requires an unusual configuration where an application:
• Uses php_binary or php_serialize as its session serializer
• Changes the serializer to php at runtime before session_start()
• Has session upload progress enabled
⠀
PHP considers the risk unlikely and plans to release a fix during its next regular update cycle.
Until then, administrators with affected configurations should set:
session.upload_progress.enabled=0
Applications that do not change the session serializer at runtime are not exposed through this path.
No exploitation has been reported.
Source:
php.net/
overused retweeted
oko 09:07 štucnuli su i bili na kratko nedostupni svi sajtovi koji su iza @Cloudflare.
Status za Beogradsku CF lokaciju je trenutno "Re-routed" što znači da je došlo do neplaniranog problema sa hardverom ili mrežom i da se saobraćaj rutira kroz druge lokacije ⬇️
overused retweeted
High fidelity detection mechanism for node2shell (CVE-2026-111497)
github.com/assetnote/node2sh…
overused retweeted
Php2shell-scanner
Herramienta para escanear php2shell con 3 métodos: vía URL, localhost, SSH
github.com/aancw/php2shell-s…
overused retweeted
gentoo.org/news/2026/10/24/e…
On 2026-10-20, it has been disclosed that the private keys of eight eMudhra intermediate CA certificates have been compromised. These keys can be used to issue forged CA certificates that would be considered fully trusted by the affected software...
overused retweeted
React2Shell
WP2Shell
PHP2Shell
Node2Shell
Python2Shell
HTTP2Shell
Broccoli2Shell
Log4Shell
Spring4Shell
Text4Shell
Act4Shell
#alldashells
overused retweeted
I wanted to see if agent can exploit php2shell behind a reverse proxy. I tried on CloudRun, where the requests have to go through "Google Frontend" server.
It works...
overused retweeted
Da instaliramo svi bitchat za sutra, zlu ne trebalo? @bashgrylls
overused retweeted
Deleting a secret from your repo does not remove it.
It's still in the git history, maybe in old branches, CI logs and release files. Anyone who clones the repo, or any agent that reads it, can find it.
Before I open-sourced Optimus, I audited the full history, release files and CI logs, not just the current code.
If a key was ever committed:
1. Rotate it first. Assume it's out.
2. Then clean the history if you want to.
3. Add a secret scanner so it doesn't happen again.
Also keep env files out of what your agents read. An agent that can see a key can paste it into a log, a commit or a prompt.
overused retweeted
CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution
PoC: github.com/Boreas37/CVE-2026…
overused retweeted
Open-source maintainers, I'm calling on you 🫵
Free tools, unpaid bug reports, the occasional kind sponsor.
If that's you, let's connect.
overused retweeted
github.com/mitmproxy/mitmpro…
That went fast.
