security research,red team memeber,code reviewer
Joined June 2017
- Tweets67
- Following2.2K
- Followers79
- Likes1.1K
RandomHt retweeted
发现一款 Chrome 插件，用于将网页文档以原样式保存到本地浏览器数据库，不用担心隐私泄漏，不依赖网络，支持关键词快速搜索和检索功能，节约磁盘空间同时减少浏览器内存的使用。github.com/wvit/web-document
RandomHt retweeted
New Blog!
Exploiting XSS with Javascript/JPEG polyglot.
#xss #infosec #javascript
medium.com/@Medusa0xf/exploi…
RandomHt retweeted
A small gift from my side to all bug bounty hunters.
My 8 hour long burp suite focused course for free.
share to someone who need it.
#bugbountytips
#bugbounty
#infosec
(rt & share + enjoy)
udemy.com/course/bug-bounty-…
RandomHt retweeted
CVE-2022-0824 Webmin revshell - Post-Auth Reverse.
PoC
github.com/faisalfs10x/Webmi…
RandomHt retweeted
Talk about 2 POC of DirtyPipe(CVE-2022-0847)
Original POC: dirtypipe.cm4all.com/ is able to overwrite arbitrary file with offset like ./exp /etc/passwd 5 ":0:0:rootx"
Improved POC: haxx.in/files/dirtypipez.c is able to overwrite a SUID program like ./exp /usr/bin/su
RandomHt retweeted
Top 25 Browser Extensions for Pentesters and Bugbounty Hunters (2022)
p1boom.com/2022/02/top25-bro…
Did i miss something?
#bugbounty #bugbountytips #infosec #Pentesting
RandomHt retweeted
Found an XSS filter that allows SVG-based tags? Try the 'use' element, you can import a SVG via a data url and execute JavaScript automatically!
portswigger.net/web-security…
ALT Base64 encoded and plain use element that auto executes
RandomHt retweeted
Most popular key word in #Linux with definitions that’s help u to learn more about who to use it in linux platform.
#CyberSecurity
#cybercrime
#الامن_السيبراني
RandomHt retweeted
#update St8out - Extra one-liner for reconnaissance
gist.github.com/dwisiswant0/…
Workflow: metabigor > findomain & amass > filter-resolved > subjack > dig > nmap > webanalyze > dirsearch > LinkFinder > cors-blimey > gowitness > Arjun > meg > gf
#bugbountytips
RandomHt retweeted
I added a script to generate the PDF & archive for my #OSCP Exam Report Template in Markdown, as I saw a lot of people where creating their own scripts.
github.com/noraj/OSCP-Exam-R…
RandomHt retweeted
If you didn't know, you can use Sn1per to retrieve a targets ASN, full subnet list and IP's via 'recon' mode. These can easily be fed into Sn1per using 'discover' mode to scan full subnets and enumerate all hosts. 😎
xerosecurity.com
#bugbounty #netsec #infosec #offsec
RandomHt retweeted
Confirmed. Everyone is affected. Or you are not on the Internet.
I have a major #Databreach announcement tomorrow - 1.2 BILLION people exposed from a single organization. More details soon. @lilyhnewman @troyhunt @MayhemDayOne @DataViperIO
RandomHt retweeted
Here's Predator: github.com/s0md3v/Predator
A collection of techniques to detect and fuck up bots 🔥
I made it for @mubix's OSCP voucher giveaway which I didn't win, it's community property now ❤️
RandomHt retweeted
Some github search keywords.
Assuming target(.)com
*"target(.)com" password
*"target(.)com" "pass" 'email'
*"target(.)com" "api"
*"target(.)com" FTP
*"target(.)com" SMTP
*"target(.)com" LDAP
*"target(.)com" PEM (For Keys)
If found nothing try to change it.
RandomHt retweeted
SilkETW is now available ✍️🧐💡! Check out my short introduction post here => fireeye.com/blog/threat-rese…, you can find the code on the @FireEye GitHub => github.com/fireeye/SilkETW
RandomHt retweeted
Exploiting Spring Boot Actuator, nice find from @artsploit. I utilize the RMI service for Remote Code Execution here.