Dhvl

Psst!

[Dhvl @17haval]

@notgrubles The hash rate of bitcoin has been on steady rise since Feb where it was around 50 TH/s to now which is around 100-110 TH/s, this may be due to last few block remaining before reward is reduced, next year around May the block reward will be reduced from 12.50 to 6.25 Bitcoins

[Securitum @securitum_com]

We have published a writeup of latest DOMPurify bypass with mutation XSS

https://t.co/5sUIh86PKK

[XSS Payloads @XssPayloads]

DOMPurify 2.0.0 bypass using mutation XSS, yet another excellent writeup by @SecurityMB !
https://t.co/gCbF5sGYnE

[Dhvl @17haval]

@akhilreni_hs Sweet swag era of 2013!

[丨几匚ㄖᎶ乃ㄚㄒ乇! @incogbyte]

RCE chain a pathtraversal https://t.co/f74R6Hk7DH
#bugbountytips #BugBounty

[Somdev Sangwan @s0md3v]

HTTP Request Smuggling

Introduction: https://t.co/c1e0m8u4Kk
Detection: https://t.co/FvmIeppVH1
Exploitation: https://t.co/4VuPNNk1YO
IRL Example: https://t.co/2qyS4YSCvC

[Dhvl @17haval]

@s0md3v So now they removed the whitelist for 'debugger tool' ?, I meant for fixing the issue.

[Phith0n @phithon_xg]

Webmin Unauthenticated Remote Code Execution 0DAY (CVE-2019-15107)

Use #Vulhub# to simply reproduce the vulnerability here:
https://t.co/p7dPv8jYzH

[Dhvl @17haval]

@exilmas @oasace @nixcraft Yes, Instagram also insert the identifier
5. https://t.co/YHH7gdaW29 - Today

[Dhvl @17haval]

@p0358 @oasace @nixcraft Yes, just trying to deduce around when they started adding identifier to the images

[Dhvl @17haval]

@oasace @nixcraft 3. Messenger - Today - https://t.co/cMYqvNaBNI (Contains Identifier)
4. Whatsapp - Today - https://t.co/Upa122B96f (No Identifier)

[Dhvl @17haval]

@oasace @nixcraft I dug a little more, seems like facebook has been injecting the identifier recently.
I managed to hexdump some images I uploaded to Facebook
1. 2014 - https://t.co/mWwnNOyJJr (No Identifier)
2. 2017 - https://t.co/AJel2caSXL (Contains Identifier)
Whatsapp isn't injecting though

[Dhvl @17haval]

Runaway Regular Expressions: Catastrophic Backtracking : https://t.co/qu8118CkyW

[Rebecca Franks @riggaroo]

User Interface vs The Underlying Code #programming

[Dhvl @17haval]

@Alra3ees Umm, Thanks for sharing!

[Burp Suite @Burp_Suite]

Burp Suite Community Edition users can now enjoy the new dark theme.
To enable, go to User options / Display / User Interface / Look and feel, and select Darcula.

[Burp Suite @Burp_Suite]

Burp Suite Pro/Community 2.1 STABLE released. We are now officially out of beta!
https://t.co/A00IyharfN

[Khalil @sehnaoui]

Stack Overflow releases its own keyboard.

[RIVER @wugeej]

Hacking thousands of websites via third-party JavaScript libraries

Example 1: RCE in datatables. net

1=cat /etc/passwd

https://t.co/oz4TNCzOKw