Severus

Red Teamer @ShielderSec.

[Shielder @ShielderSec]

🎁-time: Here you go two @Cisco BroadWorks CommPilot Application Software vulnerabilities which our team (@smaury92, @zi0Black, @Th3Zer0) found during an engagement for one of our customers.
CVE-2022-20951: Unauthenticated SSRF
CVE-2022-20958: Authenticated RCE
Links in the 🧵👇🏿

[Severus @Sev1rus]

@CitiesGold @Heather_v Malta

[antisnatchor @antisnatchor]

@WarConPL V edition was a blast. With @h0wlu we are now summoning the proliferation of similar offensive security private events across EU. Make them happen!

May WarCon stay in your memories.

Ave WarCon, morituri te salutant!

🐐🐐🐐🐐🐐🐐

[Severus @Sev1rus]

This was my first time at an IT sec conf, and I'm very glad it was at @WarConPL. It's been a truly amazing experience, huge props to @antisnatchor and @h0wlu for organizing it!