__3ntr0py__

Security Researcher @ s2lab, KCL London. Pentester. OSCP. Musician and life lover . HTB lover. Crypto ftw.

[__3ntr0py__ @Entrophy6]

@Primavera_Sound Refund please ! People are selling tickets at 70€, this is ridiculous :) good scam @Primavera_Sound

[prisec_ml @prisec_ml]

The first seminar of 2022 will be given by Prof. Li Xiong on Wed Jan 26th at 1.30 PM (London time)

"Trustworthy Machine Learning with Both Differential Privacy and Certified Robustness"

All details at https://t.co/dxL45RS8pq

[prisec_ml @prisec_ml]

Next seminar: @sarahookr (Google Brain), "The myth of the interpretable, robust, compact, and high performance deep neural network"

Wednesday, November 10th, 4 PM (UK time)

Live stream: https://t.co/xguStJdNqX

Zoom registration: https://t.co/FW5TuTE62Y

[Lorenzo Cavallaro @lcavallaro]

Interested in ML for (Privacy & Security) of ML research? Check @prisec_ml for upcoming seminars, slack to build a community of like minded people, and more :-) /cc @uclisec @uclcs

[Nir Ohfeld @nirohfeld]

Microsoft just patched 4 vulnerabilities we (@wiz_io) recently reported, including a CVSS 9.8 RCE. These vulnerabilities affect countless machines as the OMI agent is silently installed when enabling many Azure services. #PatchTuesday
https://t.co/N4OGpf371D

[Luca Demetrio @zangobot]

Our paper "Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection" is finally published!
Go and check it now 😎
@biggiobattista @DrScottCoull
https://t.co/xvqsLYcHOo
#malware #advml

[Emad Shanab - أبو عبد الله @Alra3ees]

Nuclei Templates Collection:-
https://t.co/90wrnS1g45
https://t.co/7EHpKXIrR7
https://t.co/gpZOAwHspR
https://t.co/9d6BfHu5cZ
https://t.co/Pe6uKbd36v
https://t.co/YYMuEy237p
https://t.co/UdMbm9KVYP
https://t.co/M2fEwvfZhQ
https://t.co/QJk770JWex

[Jonas Bülow Knudsen @Jonas_B_K]

I have created a free and open-source tool to identify AD attack paths breaking the tier model using BloodHound. Check it out :)

Github: https://t.co/EfmUq8d1av

Blogpost: https://t.co/M3eaWQPjsf

Demo video: https://t.co/q5HBt8xueb
#activedirectory

[Laura Shin @laurashin]

On Unchained, @willywoo and @n3ocortex break down turbulent times in BTC using on-chain analytics, covering:

- How much Elon's tweets matter
- What whales are doing
- What stablecoin trends say about BTC
- Why we're still in a bull market

Episode Link: https://t.co/OTgi9BTY5V

[HackerOne @Hacker0x01]

The AWS CTF is going on now! Join at https://t.co/3oYS1TRLZH to test your #cloud #hacking skills. #TogetherWeCTFHarder

[Fabio Pierazzi @fbpierazzi]

At 15:30 CET, in Session 1 of the AISSAI Workshop of @ITASEC_Conf, I am giving a talk on our @IEEESSP 2020 paper on Problem-space Adversarial ML :-) @s2lab @kclinformatics /cc @lcavallaro @Entrophy6 @0xtrustypatches
More info on the project: https://t.co/O9OUEqfDbf

[XSS Payloads @XssPayloads]

Another weird one (based on Cee triangles (https://t.co/SdNI8fifzl) by @aemkei
ᐁ='',ᐃ=!ᐁ+ᐁ,ᐅ=!ᐃ+ᐁ
ᐊ=ᐁ+{},ᐄ=ᐃ[ᐁ++],ᐆ=
ᐃ[ᐋ=ᐁ],ᐒ=++ᐋ+ᐁ,ᐗ
=ᐊ[ᐋ+ᐒ],ᐃ[ᐗ+=ᐊ[ᐁ]
+(ᐃ.ᐅ+ᐊ)[ᐁ]+ᐅ[ᐒ]+ᐄ
+ᐆ+ᐃ[ᐋ]+ᐗ+ᐄ+ᐊ[ᐁ]
+ᐆ][ᐗ](ᐅ[ᐁ]+ᐅ[ᐋ]+ᐃ
[ᐒ]+ᐆ+ᐄ+"`ᐁᐃ`")()

[Shodan @shodanhq]

Shodan now has more than 4 million users! To celebrate we are offering the membership at a discounted price of $4 for the next 24 hours: https://t.co/e6mRc8kQGt

[Orange Tsai 🍊 @orange_8361]

I know there are lots of people waiting for the recent Microsoft Exchange pre-auth RCE on our side. This is a short advisory and detailed timeline. https://t.co/lgpW7AVZZJ

#proxylogon

[ULISSe @ULISSecurity]

Thanks to all those who participated and guys from @cesenasec with whom we spent virtually the weekend and above all thanks to the @DragonSectorCTF for this amazing CTF

[Intigriti @intigriti]

1️⃣5️⃣.0️⃣0️⃣0️⃣ followers, time to reveal the results of our #EasterChallenge! 🎉
✅ 88 correct solutions
😅 2 unintended solutions
🏆 Check the winner in the video below
📝 Drop your solutions in the comments! 👇

[S2Lab @s2lab]

We have to limit our physical interactions, but we can enhance our virtual ones: here's the new slick Systems Security Research Lab website to keep us closer (kudos to @Entrophy6 and @0xtrustypatches for bringing this to life): https://t.co/3BilBP58Gf

[c0mr3x @c0mr3x]

Found easy xss

1. Subdomain enumeration
2. S3 bucket with access denied
3. Ffuf found -> /cdn/
4. Ffuf found -> /cdn/proxy.html
5. Blank page -> view source, found url param (document.location)
6. ?url=javascript:alert ()

XSS popped up