Muhi

appsec. Tweets are my own, who else should write them.

[Muhi @0xMilly]

@vxunderground @Kevin2600 A couple more. Some of them are clearly test tokens where as others look seemingly legit

[Marcel Böhme👨‍🔬 @mboehme_]

So what do LLMs mean for software security? Here #ChatGPT is decompiling assembly into C.
(Credit: @spimescape & @moyix).

Prompt: What does this code do?
push rbp
mov rbp, rsp
mov DWORD PTR [rbp-4], edi
mov eax, DWORD PTR [rbp-4]
imul eax, eax
pop rbp
ret

Response:

[cts🌸 @gf_256]

OMG WTF

[Nick Moran @NickEMoran]

@moyix I kinda like this one even more!

[Akash Gupta @akashtesla]

This is cool 🫡
bug bounty tip: use ChatGPT generate nuclei templates
@pdiscoveryio #bugbounty #infosec #bugcrowd #bugbountytips

[Brendan Dolan-Gavitt @moyix]

ChatGPT exploits a buffer overflow 😳

[Muhi @0xMilly]

@MrBeast My sister is born on the 11.11.11 and she turned 11 this Nov. Something odd is happening

[ProjectDiscovery @pdiscoveryio]

[NEW-PROJECT] 🥳🥳

Katana –– A next-generation crawling and spidering framework.

→ Standard / Headless
→ Customizable Config
→ Scope control
→ Output Filters

GitHub Project –– https://t.co/ZPFtqcxpWL

#hackwithautomation #cybersecurity #crawler #opensource #bugbounty

[Muhi @0xMilly]

@LasVegasLocally @DownloaderBot

[Muhi @0xMilly]

@JackRhysider @DownloaderBot

[Muhi @0xMilly]

@LasVegasLocally @DownloaderBot

[Muhi @0xMilly]

@itsJevette That’s actually so cool

[Immunefi @immunefi]

Whitehat satya0x reported a critical vulnerability in @wormholecrypto on Feb 24 via Immunefi.

The bug was quickly patched, no user funds were affected, and satya0x received a $10 million payout from Wormhole, the largest bounty payout on record.

https://t.co/xKDGxfFLjA

[Muhi @0xMilly]

@williambaobean Thank you William! I appreciate it. If you are still in London let’s go for a coffee one day

[Muhi @0xMilly]

@williambaobean Hello. It’s the guy from the London Underground. Super interesting stuff you guys are doing.

[VictorV @vv474172261]

As you can see, how many bugs they bured at Tianfucup

[mj0011 @mj0011sec]

Team PangU pwned iPhone13 Pro remote jailbreak on the day1 of TianfuCup, will take $300k as reward and ranked as #1 currently.

[Money Printer @pkell7]

Fucking lol 😆😆😆

[CODE WHITE GmbH @codewhitesec]

How the search for deser bugs in #SAP sent @kaidentity down a rabbit hole where he winded up stumbling upon a completely unrelated unauth'ed admin access #CVE-2021-21481 https://t.co/Pk6F4lnpcA

[CODE WHITE GmbH @codewhitesec]

Happy to announce that our talk 'PIC Your Malware' was accepted @BruCON! @thefLinkk and @b00n10 will share their experiences on leveraging fully position independent code to avoid suspicious memory artifacts & other useful techniques to stay under the radar of EDRs & BlueTeams 😎