BootMe

[前澤友作 @yousuck2020]

Are there any groups or people, not just in Japan but anywhere in the world, who would like to try a similar experiment within their communities/region? Who would like to try and change their society too?

[HZV @asso_hzv]

Triste nouvelle - https://t.co/x887wMoJr2

[Max Moroz @Dor3s]

"Analysis of UXSS exploits and mitigations in Chromium" by Sergei Glazunov of Google Project Zero and me: https://t.co/rq2QWkq2WS #uxss #security #vulnerability #research #chromium

[Eduardo B. @Edu_Braun_0day]

MSHTML Engine RCE - CVE-2019-0541: Running arbitrary code on any Windows version since at least XP up to latest 10 and Server 2019 made SURPRISINGLY easy. Video: https://t.co/V1jQ0TJ7C7 and PoC: https://t.co/KRLmCHXYpN

[Bugra Eskici @bugraeskici]

How can we get XSS in Markdown or BBCode?

Markdown : [Hi](javascript:alert(1))
BBCode : [url=javascript:alert(1)]Hi[/url]

Markdown : ![a]("onerror="alert(1))
BBCode : [img]test.png" onerror="alert(1)[/img]
#bugbountytips #bugbounty #infosec #hacking

[Emad Shanab - أبو عبد الله @Alra3ees]

TYPO3 News module SQL Injection. https://t.co/cxzDpDP51S

[Nicolas Krassas @Dinosn]

Exploiting Drupal8's REST RCE (SA-CORE-2019-003, CVE-2019-6340)
https://t.co/jvJEhdBcLl

[Matthew Mesa @mesa_matt]

The adventures of Josephine Pena. From LinkedIn invitations to More_eggs Jscript Downloader:
https://t.co/xuhAbbT1f6

[sehno @_sehno_]

My recon map for #bugbounty for the win ! Don't hesitate to DM me or propose improvments
#bugbountytip #sharingiscaring

[The Hacker News @TheHackersNews]

Configuring DNS-over-TLS and DNS-over-HTTPS with any DNS Server

https://t.co/W21VbRoPou

[FBK CyberSecurity @fbk_cs]

ELF in-memory execution via php/python/perl (MSF module included)

https://t.co/ehDMV5Ipcz

[Florian Hansemann @CyberWarship]

Cobaltstrike Over External C2 via Dropbox

#infosec #pentest #redteam
https://t.co/vFkZL3luYe

[Nicolas Krassas @Dinosn]

RCE in PHP or how to bypass disable_functions in PHP installations (CVE-2018–19518)
https://t.co/Ty7NAUityp

[ippsec @ippsec]

#HackTheBox Active is now online! It's a fun box that involves my favorite Active Directory attack and includes using bloodhound! The box was also created by the same people that made #OffShore! If you want more hands-on AD, that's worth the extra money. https://t.co/tCkFQx5Edk

[RedDrip Team @RedDrip7]

Hacking Team’s new weapon? Flash 0day #CVE-2018-15982 targeted attack: malware, vulnerability and attribution. https://t.co/Oj6pyHVTj1

Chinese version: https://t.co/mjS6e8TM1a

[DirectoryRanger @DirectoryRanger]

Schtasks without Schtasks.exe via Reflective DLL
https://t.co/pvShDLg6lk

[Michael.Gorelik @smgoreli]

CVE-2018-15982 PoC (Excel pop-up calculator and swf to be played in IE) https://t.co/sgc4oMfKI1 just modified the end result of the cmd.exe

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

How cute, Microsoft is using ** >56kb ** of code in LSASS... just to know if you have enough licence to run Credential Guard
Of course, obfuscated 😉

[Rootshell @0xrootRE]

Frida hooking android cc @11x256 #Android #Mobile #Reverse
part 1:https://t.co/7Yz17pyM5E
Part 2：https://t.co/dL8iU5a48x
part 3：https://t.co/PP7pOOvsY3
part 4：https://t.co/9fOwlxC6VB
part 5：https://t.co/HqEkoosuwB