P."';

govnokoder

[P."'; @0sakaaa]

@NahamSec @hackinghub_io 🧑🏽‍💻

[P."'; @0sakaaa]

@vfsglobalcare Given me and my kid had the same application id, I have a strong suspicion there might’ve been a mix up on vfs’s side. Would be great if someone can investigate that for me

[P."'; @0sakaaa]

@vfsglobalcare hey! My kid and I had the same application id and I already received a decision on my application, but he’s not and it’s been almost 2 weeks since my decision was made. Could you help me figuring out what’s the status of his application?

[P."'; @0sakaaa]

@Rhynorater @CodeByNZ @CaidoIO Can it parse openapi? If it has functionality similar to postman in regards to parsing the spec/organizing requests, that’s a game changer

[P."'; @0sakaaa]

@intigriti @strangeMMonkey1 Can't log stuff :(

[P."'; @0sakaaa]

@Krevetk0Valeriy @juliocesarfort

[Gleb Cherbov @cherboff]

Looks like a self-hosted pentest collab/mgmt tool that we finally deserve. Still not perfect but with a huge potential.

[Valeriy @Krevetk0Valeriy]

I want to say huge thanks to @Jhaddix for sharing your stories, techniques, and experience! Also, I want to say thanks to @infosec_au. And of course thanks @pdiscoveryio 🙌🏻 https://t.co/gVge3LUnDz

[P."'; @0sakaaa]

@juliocesarfort @mshelton He knew 15% of your password even before you did

[P."'; @0sakaaa]

If you wanna learn security, have a look at https://t.co/mmBy1r0dSY, they just published a complete web security course

[P."'; @0sakaaa]

@WebSecAcademy Cool! Thanks a lot

[P."'; @0sakaaa]

@WebSecAcademy hey guys. tried to solve the XSS in html attributes task with the following payload: "+autofocus+onfocus%3Dalert('xss')%3B%2F%2F"
the alert is being executed at least in firefox 72.0.1 and chromium (79.0.3945.79). Am i doing something wrong?

[P."'; @0sakaaa]

@WebSecAcademy The name is "Reflected XSS into attribute with angle brackets HTML-encoded"
So yes, the status is not changing if the alert is executed with the aforementioned payload. However, later i tried a payload from your own solution (the one with onmouseover) and the status changed

[Luca Carettoni @lucacarettoni]

Say goodbye to SSRF on AWS EC2 Instances https://t.co/p0tdWNnZnd

[P."'; @0sakaaa]

https://t.co/mmBy1r0dSY super promising gamified security training startup. Gonna check it out

[ZeroNights @ZeroNights]

#ZeroNights 2019 CFP is OPEN: Offensive and defensive research (15/30/45min). Submit your talk! https://t.co/3v7qwIbVJ6 Please RT!

[VideoLAN @videolan]

About the "security issue" on #VLC : VLC is not vulnerable.
tl;dr: the issue is in a 3rd party library, called libebml, which was fixed more than 16 months ago.
VLC since version 3.0.3 has the correct version shipped, and @MITREcorp did not even check their claim.

Thread:

[ttffdd @_ttffdd_]

Today I've gone crazy. Proudly present to the world - web goose! 😂
Powerful asistent with #bugbounty programs and #pentest . He knows #web at the level of professionals.

RT for luck with BB🙃