Anis_Boss

Interested in Cyber Security | REV, PWN | CTF Player at @the3000org | (1.01)^365== 37.8 |

[Anis_Boss @AnisBoss_]

Check out my article on Bash: bypassing command restrictions with obfuscated commands in the latest issue of PagedOut, and all the other cool articles while you are at it.

[PagedOut @pagedout_zine]

Paged Out! #6 has arrived! And it's jam-packed with content!
You can download it here:
https://t.co/kVmdLe0l7s

[Thomas Rinsma @thomasrinsma]

I'm very excited to finally share the first part of the research I did into Ghostscript. This post details the exploitation of CVE-2024-29510, a classic format string bug, which we abuse to bypass the SAFER sandbox and gain RCE.

https://t.co/gym3XltBpe

[Zimperium @Zimperium]

The most common mobile app attack vectors include: Rooted or jailbroken devices; Network attacks; & Malicious apps. This & more takeaways from our recent webinar w/ @Riscure's @AnisBoss_ and Zimperium's Tim Hartog & @bdogd: https://t.co/QUSAI3JSrh #WeSecureMobile #MobileSecurity

[Borgi @AymenBorgi]

Glad to share with you my recently discovered CVE in zone minder product (CVE-2023-26039).
The vulnerability has been discovered during pb ctf 2023, thanks to @Unblvr1 for the great challenge.
Link: https://t.co/dN5aYjPnKN

[Thomas Rinsma @thomasrinsma]

Last year, @krvalk and I uncovered a series of vulnerabilities in Feathers.js, Sequelize and SocketIO that lead to critical issues for our client. Now that everything is fixed, here's our write-up of this journey into Javascript madness.

https://t.co/1cLCvAIghj

[Martijn Bogaard @jmartijnb]

The slides for the @offensive_con talk “Bug Hunting S21's 10ADAB1E FW” of @ffmenarini and myself can be found here: https://t.co/ZvuU0SFZts Enjoy! We are still around at the conference so stop by and say hi.

[rekter0 @rekter0]

Exploiting NFS server via SSRF
#HITCON CTF 2021 Metamon-Verse Writeup
https://t.co/hL0sPWdgyb

[rekter0 @rekter0]

Moodle Stored XSS and Blind SSRF i've found earlier this year with @holme_sec
https://t.co/wZ8gFKL1Ly

[Anis_Boss @AnisBoss_]

@ptrYudai

[kaftejiman @kaftejiman]

A small writeup about HelloWorld challenge in CTF 3k2021. #font #truetype #stack-based-vm #assembly https://t.co/bkUvbVLUKX

[Maher @azz_maher]

#3kCTF-21 exploits to echo and klibrary, two kernel challenges that I created for this CTF:
https://t.co/qaxtvXrtFZ
and here exploits for the user-land challenges iterrun - stdout and masterc :
https://t.co/yEfYnOoX02

[rekter0 @rekter0]

#3kCTF-2021 my pwn challenges exploits

telnet
https://t.co/9Wp3N5OcfS

babyrtos
https://t.co/jIhHodksAH

[rekter0 @rekter0]

#3kCTF-2021 - ppaste writeup

https://t.co/LwK2Wxvwbp

[the3000 @the3000org]

#3kCTF-2021 is over, Thank you for playing !

Final scoreboard:
1- Never Stop Exploiting
2- Black Bauhinia - @BlackB6a
3- zer0pts - @zer0pts
4- greunion - @greunion_ctf
5- zh3r0

[the3000 @the3000org]

#3kCTF-2021 ~12 hours left
8 challenges remain unsolved

Current standing
1- Black Bauhinia - @BlackB6a
2- Never Stop Exploiting
3- greunion - @greunion_ctf

[the3000 @the3000org]

#3kCTF-2021 10 hours later, current standing

1- Black Bauhinia
2- Never Stop Exploiting
3- ISITDTU

[the3000 @the3000org]

We're excited to partner with @1Password for #3kCTF
There'll be 1 Free Year of 1Password Families for all participants

https://t.co/UydtsMPvNf

[the3000 @the3000org]

about 3 days to go, registration is open at:
https://t.co/RStbLwcFgB

We're Happy to have @SpyseHQ as a sponsor
#3kCTF

[Anis_Boss @AnisBoss_]

@ITSecurityguard #BEGBOUNTY -_-