Gold Security

We Are Pro Ethical Hackers

[7h3h4ckv157 @7h3h4ckv157]

Using CVEmap you can get a list of CVEs with public proofs of concept, that have been marked as exploitable by CISA, are remotely exploitable AND don't have a Nuclei template (yet)!

Flags:
-k / -kev: Marked as exploitable vulnerabilities by CISA
-t=false / -template=false: Has no public Nuclei templates
-poc: Has public published POC
-re / -remote: is remotely exploitable

Credit : @pdiscoveryio

[Bitcoin Archive @BitcoinArchive]

🔸JUST IN: #Bitcoin is about to close the biggest $$$ gain on a monthly candle in its history.

This is more bullish than any month in the last bull market.

[blackorbird @blackorbird]

#Lazarus exploited a flaw in the Windows AppLocker driver (appid.sys) as a zero-day to gain kernel-level access and turn off security tools.CVE-2024-21338
Beyond BYOVD with an Admin-to-Kernel Zero-Day
https://t.co/irFNz3Dntt

[Gold Security @Gold_Security]

@ag_dwf Dm

[CZ 🔶 BNB @cz_binance]

@Mudit__Gupta So the seed can leave the device now?

Sounds like a different direction than "your keys never leave the device". 🤷‍♂️

[Gold Security @Gold_Security]

@The_HatedOne_ dm pls

[Gold Security @Gold_Security]

@NullByteWht @NullByteWht do you know any non-commercial tool doing this for emails instead of usernames?

[Gold Security @Gold_Security]

@ryanteck @hackerfantastic Well, way larger dataset, email:pass combo lookup possibility, risk assessment on password lookups, no limit on the API requests, SLA 99.5% uptime... Great for enterprise, but the HIBP API is awesome too for sure!

[Gold Security @Gold_Security]

Awesome start of the hands-on hacking session with @hackerfantastic @HackerHouseUK in London. Thanks guys!

[yan @bcrypt]

if you made #30Under30, don’t give your personal info to Forbes. I found a bug that lets any 30under30 member (like me) see other members’ DoBs, addresses, phones, etc. Forbes ignored my emails asking them to fix.

[Gold Security @Gold_Security]

@CthulhuSec Cool. One of our clients was looking for a AWS DevOps, Why I asked.

[Gold Security @Gold_Security]

@CthulhuSec How’s your skills working with AWS?

[DEF CON @defcon]

Yahoo Triples Likely Scope of '13 Hack to 3 Billion Users https://t.co/pFcjpyEwwb

[Gold Security @Gold_Security]

@bkimminich Hey Björn. Can you DM pls.

[Thomas Brewster @iblametom]

Google Is Fighting One Of The Biggest Ever Android Malware Outbreaks -- Up To 21 Million Victims @Forbes https://t.co/kJImlw2cUh

[Gold Security @Gold_Security]

We are the ones that has to thank you @troyhunt for an awesome blog :) https://t.co/6HnKo44GwK

[Troy Hunt @troyhunt]

Thanks to @Gold_Security for sponsoring my blog this week! They've been a regular sponsor, thanks for the support :)
https://t.co/1z3Q341i55

[Gold Security @Gold_Security]

Awesome start of the @BlackHatEvents 2017 with Black Ops Hacking 😎 Thanks @SensePost @v1ad_o @Trowalts @Saif_Sherei

[Gold Security @Gold_Security]

@ret2libc @defcon Of course 😎

[Gold Security @Gold_Security]

@CthulhuSec Yeah, it will be a too stressed visit :)

[Gold Security @Gold_Security]

@CthulhuSec Cool! You're in Stockholm city in 20 min with the express train.