Reece

Software Security Engineer | Secure Comms Hobbyist | Still Trying To Catch The Rat.

[SusluSec @suslu7616]

#sqli

payload: '%2b(select*from(select(sleep(5)))a)%2b'

#bugbounty #bugbountytrics #infosec #xss #sqli

[0xor0ne @0xor0ne]

Authenticated RCE on TP-Link AX10/AX1500 via CWMP exploitation

https://t.co/9UgZe6WLeV

#infosec

[H4x0r.DZ @h4x0r_dz]

Dirty Frag: A New Universal Linux LPE
https://t.co/otEQLQD9ly

[H4x0r.DZ @h4x0r_dz]

Reproducing a Double Free RCE in Apache CVE-2026-23918 on the most used software on the internet with one prompt that costs like $0.001 via DeepSeek is scary as hell.

Now, anyone with zero knowledge can hack the internet.

(Not default installs though. You need mod_http2 enabled.)

[International Cyber Digest @IntCyberDigest]

❗️🚨 Microsoft Edge keeps every saved password in process memory as cleartext from the moment it launches. Microsoft's responsed when reported: "by design."

All of them. Including credentials for sites you won't open this session.

Researcher @L1v1ng0ffTh3L4N tested every major Chromium browser. Edge is the only one that behaves this way.

Chrome decrypts credentials on demand, and App-Bound Encryption locks the keys to an authenticated Chrome process so other processes can't reuse them.

In Chrome, plaintext surfaces only during autofill or when a password is viewed, making memory scraping far less useful.

What makes this extra weird is that Edge still demands re-authentication before revealing those passwords in its Password Manager UI, while the same browser process already holds every one of them in plaintext.

In shared environments, this turns into a credential harvest. On a terminal server, an attacker with admin rights can read the memory of every logged-on user process. In the published PoC video, a compromised admin account lifts stored credentials from two other logged-on (and even disconnected) users with Edge running.

Microsoft's official response when notified: "by design."

The finding was disclosed April 29 at BigBiteOfTech by PaloAltoNtwks Norway, alongside a small educational tool that lets anyone verify the cleartext storage for themselves.

[Reece @N0tReeceHarris]

@Whiplash437 @grok is this true

[Reece @N0tReeceHarris]

@Justin_Gaethje

3 eye pokes and paddy doesn’t complain, 1 gut shot and you say it’s a nut shot.

What a pathetic fighter you are, should have been paddy’s win.

#justingaethje #UFC324

[Reece @N0tReeceHarris]

Latest late night project, a realtime updating Tor relay tracker with historical data.

I was gambling with the idea of collecting tor bridge servers but scrapped that due to ethical considerations.

https://t.co/AnrpDjmcNn

#data #tor #archives

[Elon Musk @elonmusk]

But 𝕏 and Starlink didn’t skip a beat

[7h3h4ckv157 @7h3h4ckv157]

This is crazy! https://t.co/ubWHCVA3yg

Anyone tried…??

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Data breach search engines for Penetration Testing and Threat Intelligence 📕

#infosec #cybersec #PenetrationTesting

[Reece @N0tReeceHarris]

@qriousec

[Reece @N0tReeceHarris]

@p3taminx @CloudflareHelp Typical it goes down as I start working.

[Reece @N0tReeceHarris]

Is it just me that can’t access #Cloudflare dashboard, keep looping the captcha. What’s up @CloudflareHelp

[Reece @N0tReeceHarris]

"Why on-boarding processes can be a snooze fest (and how to fix It with svelte)" https://t.co/oT7y0ijiL5

[Reece @N0tReeceHarris]

If your using #spacedesk by datronicsoft on a public network please lock it otherwise your leaving your device free to anyone with the app.

For example this cs student leaving their laptop unattended with spacedesk open, on a student accommodation network!

#CyberSecurity #CyberAwareness