Anass Sbai

[Anass Sbai @Flashy911]

Here are some pictures from #LeetCTF organized by our cyber security club @leetctf at @1337FIL , it was really fun and intense, thanks to everyone that participated.

[Anass Sbai @Flashy911]

@Shawntiqm @CristiVlad25 Shortly after posting the comment, one of the accounts (not the one I just reverified) lost trusted access, and I wasn't able to reverify it like the first one. Maybe they're rolling out something so each person can only have one verified account?

[Anass Sbai @Flashy911]

@CristiVlad25 However for claude, the CVP applications have been sitting 'in review' for a couple weeks now

[Anass Sbai @Flashy911]

@CristiVlad25 I have 2 max subscriptions, one of them got de-verrified this morning but i was able to easly reverify it for my case

[Anass Sbai @Flashy911]

@Burp_Suite Incorrect disclosure or report 🤔🤔

[Elon Musk @elonmusk]

🇲🇦🇲🇦 Congrats Morocco!! 🇲🇦🇲🇦

[Anass Sbai @Flashy911]

@THyasser1 Happy birthday man 🎉🎉

[mr.d0x @mrd0x]

Bypass Defender AV static detection:

If you name a malicious file DumpStack.log Defender doesn't scan it.

[Tom Anthony @TomAnthonySEO]

Interesting Log4j payload I discovered, simply omit the closing brace }, and now you will potentially get a bunch of data exfiltrated to your server until the next } appears in that data. Had it work on a FANG target...

[Leeroy Jenkins @SirLeeroyJenkin]

1st writeup..How I turned a Blind SSRF to $15k RCE. My public disclosure request has not been approved so I cannot directly name the program involved, but this was found on one of Hackerone's largest bug bounty programs!
#bugbounty #bugbountytips

https://t.co/fo0m1VJAJQ

[Anass Sbai @Flashy911]

@thecybermentor Link anyone?

[Akasec @akasec_1337]

We were pleased to meet @DataProtect_ 's team, the meeting resulted in exchanging ideas between both sides and making plans for future collaborations between both teams.

[Avi @avicoder]

31-days-of-API-Security-Tips 👌🏻
https://t.co/t8HLFr0b3t

[stephen @_tsuro]

I made a website: https://t.co/4KJAv1BOzY

[James Kettle @albinowax]

Annual reminder: you can find all my past research, whitepapers & presentations helpfully archived at https://t.co/MzFanmVouC

Often the oldest techniques are the most valuable.

[PortSwigger Research @PortSwiggerRes]

The top 10 web hacking techniques of 2020, by
@albinowax with help from @filedescriptor, @irsdl, @Agarri_FR and the entire community
https://t.co/k26IEKXsE4

[perfect blue @pb_ctf]

Unintended solution for DragonCTF "Home Office 2" :-)

[nobody_cares @www_latish]

Sharing my OSCP notes. I hope it will help you guys!

https://t.co/e0z9jPLA26

[Anass Sbai @Flashy911]

@orewaestarossa Same a sat

[me_dheeraj @Dheerajmadhukar]

Do it ASAP !!! BugBounty Write-up AGAIN

https://t.co/3uSKUbnAoE

#BugBounty #InfoSec #Cybersecurity #BugHunters #WebAppSecurity #BugBountyTips #hackerone #bugcrowd

[alaa @alaadotsol]

Hello followers 👋 if you know someone who's interested to learn basics React please let him dm me, I'm hosting learning sessions each day (7pm) with couple of friends and everyone is welcome to join! RT if you have followers who might be interested 🤗