Fu3l3dSecurity

Security Analyst | Wannabe Reverser | (RT || Fav || follow) != endorsement | views are my own | #infoSec #DFIR

[Fu3l3dSecurity @Fu3l3dSecurity]

@DayZ

[sagitz @sagitz_]

We found two 0-day vulnerabilities in @Ubuntu kernel and it all started by reading descriptions of old CVEs 📖
Thread about the discovery of #GameOverlay 🧵👇🏼

[💻 Sherrod @sherrod_im]

APT threat hunter to do intel and detection on Russia-based APT threats. This is on my team so required skills include a sense of humor and love of the absurd. #hiring #infosecjobs #russia
🇷🇺✨🎉

https://t.co/4CPNDGrRCs

[uɐpʇou@ ✸ @notdan]

ICYMI: @johnjhacking dropped a cool 0day for getting some free mental health assistance on the 1st Episode of 2021! This method was disclosed & disregarded by the company in charge, so that tells me it's ok to use. Besides, this is helping people. xoxo https://t.co/dz1p7SqE5F

[switched @switch_d]

“On Thursday (29 October), during Australian Cyber Week, members of the public will be given access to 12 real missing person cases and six hours to source intelligence and potential leads that could help solve their cases.”

[Katie Nickels @likethecoins]

JUST PUBLISHED. Today, we wrote a blog post about an incident this month where we saw Bazar + Cobalt Strike. We took action to help a medical center avoid a #Ryuk #ransomware outbreak. We're sharing analytics that worked for us - we hope they help you too. https://t.co/DCrDjH3MO4

[Fu3l3dSecurity @Fu3l3dSecurity]

@codingo_ @PentesterLab This would be awesome! Currently a blue-teamer who is trying to learn and get better at understanding the red-team side.

[Janggggg @testanull]

Analysis of CVE-2020-14882
Weblogic RCE via HTTP CVSS 9.8/10
Hope you enjoy it ;)
Thanks an anonymous man for supporting!
https://t.co/Olhn9oye0r

[Binni Shah @binitamshah]

Let's talk macOS Authorization : https://t.co/Dn5dk5lAww credits @theevilbit

Ref :

Demystifying `root` on macOS —The Authorization Database : https://t.co/Yg2YgYcKas

Part 3 — `root`& Scripting: https://t.co/LSQsVm3d8f

Part 2 — The `sudo` Command: https://t.co/80kZhyaS06

[Fu3l3dSecurity @Fu3l3dSecurity]

@m0rb down already

[Fu3l3dSecurity @Fu3l3dSecurity]

@three_cube working link:
https://t.co/xGYIrVx0AB

[Windows Forensic Environment (WinFE) @WindowsFE]

Download the WinFE Cheats ebook and build your very own Windows Forensic Environment.

[Omar Espino • @omespino]

#javascript How to extract urls,srcs and hrefs from all HTML elements in any website? Open DevTools and run

urls = []
$$('*').forEach(element => {
urls.push(element.src)
urls.push(element.href)
urls.push(element.url)
}); console.log(...new Set(urls))

#Bugbounty #infosec

[Fu3l3dSecurity @Fu3l3dSecurity]

@HackerHalted is over, back to the day-to-day with some new idea's and material to chomp on. Thanks HH team, all the speakers, the sponsor's and @ECCOUNCIL for a great week! Catch you next year. Stay Safe Everyone!

[Ben Sadeghipour @NahamSec]

Check out my interview with @MattiBijnens where we talked about full time bug hunting, learning web app hacking, his journey to become a top hacker on @intigriti, recon and more!

Watch the interview here: https://t.co/3NF00OlbOM

[Didier Stevens @DidierStevens]

New blog post "VBA Purging" https://t.co/djmGZbkvN4

[gabsmashh @gabsmashh]

in the past few years, a bunch of companies have had their ML systems tricked, evaded, or misled. this att&ck matrix iteration by @MITREcorp is fantastic.

https://t.co/lE9TpP94kA

[Brendan Dolan-Gavitt @moyix]

I joined this a couple days ago and it's a very nice place to discuss fuzzing research!

[Paul Seekamp @nullenc0de]

Turn a 2 hour "wpscan -e ap" scan into 10 min

curl https://t.co/bjcepky8e5 |jq -r '.plugins' | grep ": {" | cut -d "\"" -f2 |while read word; do echo /wp-content/plugins/$word/readme.txt; done > wordpress_dict.txt

ffuf -w wordpress_dict.txt -u $IP/FUZZ -t 400 -mr 'Contributors'