Kaibro

CTF @balsnctf / Websec Researcher

[LCFR @lcfr_eth]

nosqli here :PpPppPppPpPppPpp

purposely censored etc.

[shubs @infosec_au]

Note on WordPress pre-auth RCE (CVE-2026-63030). There are SQLi poc's out there, but RCE PoC has not yet been exploited in the wild. Will only release our technical post if we have proof of exploitation. Our RCE payload does NOT require poorly configured MySQL.

[stypr @brokenpacifist]

This man is killing the php://filter chain LFI
https://t.co/NN7PACQja5

[Ginoah @g1n04h]

Here's the slide from my talk at @hexacon_fr! Check it out if you're interested.

[pilvar (Philippe Dourassov) @pilvar222]

🧵[1/9] Time to publish the solution to this challenge! https://t.co/rBuH8nEVMX The goal of this challenge was to find an XSS while avoiding it being blocked by the CSP sent by the PHP header() function. Let's dive into it!

[Kaibro @KAIKAIBRO]

@terrynini38514 我幫你同事代購一雙ㄌ，行李箱要爆惹

[Kaibro @KAIKAIBRO]

左踩LPE，右踏RCE
#POC2023

[Kaibro @KAIKAIBRO]

hello, vegas

[Kaibro @KAIKAIBRO]

#roadtoDEFCON

[Kaibro @KAIKAIBRO]

@terrynini38514 好色ㄛ

[Kaibro @KAIKAIBRO]

@terrynini38514 好色ㄛ
其實我有兩包 我可以賣你我穿過的☺️☺️☺️

[Kaibro @KAIKAIBRO]

google ctf swag 🥳

[Kaibro @KAIKAIBRO]

@terrynini38514 god terrynini tql, so pro

[Elon Musk @elonmusk]

You can now buy a Tesla with Bitcoin

[Orange Tsai 🍊 @orange_8361]

I know there are lots of people waiting for the recent Microsoft Exchange pre-auth RCE on our side. This is a short advisory and detailed timeline. https://t.co/lgpW7AVZZJ

#proxylogon

[Balsn @balsnctf]

Balsn CTF is back! This year, Balsn CTF 2020 will feature creative and interesting challenges. We cordially invite you to join the party. Don’t forget to mark it on your calendar!

Date: 14 Nov. 2020, 10:00 am (UTC+8) ~ 16 Nov. 2020, 10:00 am (UTC+8)

https://t.co/GFom6kDbuW

[Kaibro @KAIKAIBRO]

@intigriti 314159

[Kaibro @KAIKAIBRO]

@bugpoc_official :p

[Kaibro @KAIKAIBRO]

@cyku_tw so hard