el_d33 retweeted
1996: "Hackers" (the first episode of TV series Net Cafe) aired. It was filmed in the San Francisco cyber cafe CoffeeNet. Deth Veggie, Aleph One, White Knight, Mudge, Reid Fleming, and Dan Farmer appeared in the episode.
Grab some 🍿 and 👀! Stream it: archive.org/details/nc101_ha…
el_d33 retweeted
i wonder if burp scanner would have caught this!
"I wasn't going to report it, I thought it was your laboratory but after my first analysis this seems real"
We've just disclosed a surprisingly simple directory traversal that @0xd0m7 found in our website for $5,000!
hackerone.com/reports/242481…
![PortSwigger Web Security disclosed on HackerOne: [portswigger.net]...](https://pbs.twimg.com/card_img/2115809690093223936/6SB7-dF1?format=png&name=280x280_2)
el_d33 retweeted
A review of zero-day in-the-wild exploits in 2023 @google blog.google/technology/safet…
el_d33 retweeted
Billets au tarif lève-tôt en vente demain (vendredi) midi! (ET)
Early bird tickets on sale tomorrow (friday) at noon! (HE) tickets.nsec.io/2024/
Hype? 😎
I really like this icon, from @safebreach
You can find this icon (along with a really good explanation on Microsoft Defender Update process and exploitation here: blackhat.com/us-23/briefings… )
el_d33 retweeted
Hi everyone!
I’m looking for a new role. If you need (or know a place who does) a senior leader in Threat Research, Detection Engineering, Threat Hunting, OffSec or even a CISO let’s talk.
Curious to see if my next opportunity will come from Twitter or LinkedIn. Bets are on!!
Anyone knows where/how I can buy a Crypto Ag H-460 machine?
#AskingForAFriend #cryptography
el_d33 retweeted
Want to (partly) automate your next client security check? I threw together some lines of PowerShell to query lots of the stuff I used to check manually.
Bonus: If you use PwnDoc for your reports, I even got you covered there <3
github.com/LuemmelSec/Pentes…
el_d33 retweeted
Turns out you don't need semi-colons to batch queries in MSSQL!
SELECT * FROM test WHERE id = 1 WAITFOR DELAY '0:0:5'
Great writeup by @GoSecure_Inc, we'll update the @WebSecAcademy SQLi cheat sheet shortly.
gosecure.net/blog/2023/06/21…
el_d33 retweeted
Another AWS WAF bypass allowing SQLi caused by an unorthodox MSSQL design choice gosecure.net/blog/2023/06/21…
el_d33 retweeted
Great research from Marc Olivier our SQLi ninja. The "MSSQL doesn't need ; terminators" was also used in his @NorthSec_io track. This track was wild and the greatest design of SQLi challenges I have ever seen. Very whitebox.
🎯 "After some research; [...] we had to conclude that this was unknown to the public and that it could potentially be an unintentional bug in MSSQL."
Read our latest blog ⬇
bit.ly/3PoAnJM
#cybersecurity #AWS #Amazon #EthicalHacking
