Majed Asi

IT: Network admin and Security

[نادي النصر السعودي @AlNassrFC]

يا عاجز عنّا من الميدان
اشغلتنا بكثرة مناديبـك

[Majed Asi @1Majiid]

@Fahad_Y2 الله يرحمه ويغفر له ويرحمه ويحعل مثواه للجنه. وعظم الله اجركم واحسن الله عزاكم.

[The Hacker News @TheHackersNews]

AT&T Alien Labs finds new Golang malware (BotenaGo) targeting millions of routers and IoT devices with more than 30 exploits

Read: https://t.co/yQrZcDniMm

#infosec

[The Hacker News @TheHackersNews]

A serious security #vulnerability has been discovered in Travis CI that exposed API keys, access tokens, and credentials, potentially putting organizations using public source code repositories to the risk of further attacks.

Read details: https://t.co/BZfQwZhtli

#infosec

[The Hacker News @TheHackersNews]

FIN7 hackers are using Windows 11-themed Word documents to drop malicious payloads, including a JavaScript backdoor.

https://t.co/EGoXCdn5FI

The attack targeted a US-based point-of-sale (PoS) service provider as part of spear-phishing campaigns.

#infosec #cybersecurity

[Anton @therceman]

Bug Bounty Resource Collection

📖 Resources & Disclosed reports
💰 For beginners and experienced players

🔹 Books
🔹 Blogs
🔹 Training Platforms
🔹 Recon
🔹 XSS
🔹 CSRF
🔹 IDOR
🔹 SSRF
🔹 XXE
🔹 SQLi
🔹 Race Condition
🔹 Subdomain Takeover

https://t.co/4zsGKVp3zp

[CyCatz @CyCatz_Official]

#bugbountytips #bugbounty PHP Code Injection Trick to #Bypass Remote Code Execution #RCE

1. What is #PHP Code Injection
2. Injected payload
3. Back end code
4. Getting Reverse Shell

More..https://t.co/BTgk5JlZpm

[James Kettle @albinowax]

How to find a HTTP/2 playmate:
1. Install Burp 2020.8 and HTTP Request Smuggler
2. Configure scope & browse some bug-bounty sites
3. Go to proxy, hide out of scope traffic
4. Ctrl+A, right click->Extensions->pick your scan
5. Wait
https://t.co/kJWVEPcgYi

[Majed Asi @1Majiid]

@alameer132 عظم الله اجركم واحسن الله عزاكم وتغمده الله بواسع رحمته

[Majed Asi @1Majiid]

@alameer132 الله يشفيه ويقوم بالسلامه، ماجورين باذن الله

[The Hacker News @TheHackersNews]

ppfuzz: A new "fast" tool to scan prototype pollution #vulnerability written in Rust.

https://t.co/NsdFAEdExW

#bugbounty #cybersecurity #infosec

[The Hacker News @TheHackersNews]

Bypassing macOS TCC User Privacy Protections By Accident and Design

https://t.co/HhxzvQqX6I

[The Hacker News @TheHackersNews]

The United States government has declared emergency in 17 states and D.C. over a #cyberattack on a major fuel pipeline company.

Read: https://t.co/o8qvCSzf67

#infosec #cybersecurity #hacking #ransomwre

[The Hacker News @TheHackersNews]

Researchers analyzed one of the largest password dumps, containing over 3.2 BILLION usernames and plain-text passwords, and discovered 1.5 MILLION records associated with emails linked to government domains around the world.

Read: https://t.co/pghLUy17L1

#infosec #cybersecurity

[The Hacker News @TheHackersNews]

🔥 You may find this alarming...

A recently reported bug in #WhatsApp messenger could have enabled attackers to hack into your phone remotely and even compromise encrypted communications.

Find details and demos here https://t.co/NMbkutCwhI

#infosec #cybersecurity #hacking

[ProjectDiscovery @pdiscoveryio]

#httpx v1.0.5 is out with technology detection support 📢

Changelog —https://t.co/9oSQFl1odw

#opensource #osint #recon

[The Hacker News @TheHackersNews]

WARNING: A new malware dropper distributes AlienBot Banker and MRAT #malware via #Android apps on #Google Play store, designed to let attackers gain intrusive access to victims' financial accounts as well as full control of their devices.

Read: https://t.co/PAkEt8J6f7

#infosec

[Majed Asi @1Majiid]

@amer402 اذا تدري وتعرف انه رجل طيب و معروف عنه هذا الشيء اعطيه حتى لو ما يسدد، غيرها سند لامر لان بعض وجيه ماينفع معها الا كذا

[عبدالله الغذامي @ghathami]

سؤال لو سمعه بايدن لعلم أي خطأ اقترفه على المنطق والحقيقة

[The Hacker News @TheHackersNews]

UNC2546 hackers exploited Accellion FTA's 0-day vulnerabilities to steal its targets' data in the recent extortion attacks.

Read details: https://t.co/Cy2dn3Vj8v

#infosec #databreach #hacking