Bastien Faure

[Bastien Faure @_b0z]

@PhenixOneS @palerievecresse @pierricklegal @michaels92i @MartinMedus @AlertesInfos Un assassin planifier de tuer, un meurtrier provoque un meurtre, ce qui peut être involontaire. Un assassin c’est un meurtrier volontaire en gros.

[Bastien Faure @_b0z]

@Paingout Soit vous êtes un troll doué, soit vous êtes de mauvaise foi. Toutes les grosses boîtes utilisent Windows. Je suis presta, j'ai travaillé pour des PME et des grosses boites y compris Apple depuis 10 ans et personne n'a de Mac, à part Apple et des boîtes de taille moyenne

[Bastien Faure @_b0z]

@Tajmaat_Service @Ebm__school Mais OUI. C’est ça qu’on veut a l’éducation nationale. Des tartes violentes dans des gueules mal élevées, tous les jours, tout le temps. Le prof devrait se mettre au tennis il a bel enroulé du droit.

[Bastien Faure @_b0z]

@DIBZ95 @HommesInfluence J’ai soufflé du nez

[Bastien Faure @_b0z]

@_julespizza_ @mickeyoik @IamAlKhelaiFit @Chloebm94 @TheSisterNight Sauf qu’en fait en France, l’humour bancalo raciste, bah on aime.

[Mayfly @M4yFly]

AD Pentest mindmap upgrade :
Full version: https://t.co/hE0VKO5b2I

xmind version (slow, the map is big) :
https://t.co/D3Dck14tiq

Fell free to tell me what is missing !

[Somdev Sangwan @s0md3v]

I created a tool that removes boring/duplicate URLs from a URL list.

"uro" understands our pain, check the demo below :)

https://t.co/qlLQBgb9Mz

[Szlam @szLam_]

After 6 years working at an awesome and talented security company in Paris where I learned a lot and had a ton of fun❤️, and in part thanks to @snyff inspiring tweets. I finally decided to move forward and start a new journey on my own . Wish me luck and stay tuned !

[ch @chybeta]

CVE-2021-34429 Jetty WEB-INF infol leak

simple analysis:
https://t.co/mhRoCIjfdi

[Bastien Faure @_b0z]

@ClaireJeanneAnt Après lecture attentive de votre dossier, la team 2nd degré se voit contrainte de rejeter votre candidature

[Bastien Faure @_b0z]

@CA_DMV @ERock4Light This is totally unacceptable, you could at least inform people that you are having delays. You could even show a warning on the buying workflow before we actually give you money.

[soaphorn seuo @soaphornseuo]

https://t.co/4yCsDhDYNo

[Synacktiv @Synacktiv]

It has been a difficult year for many of us, especially for students. We're teaming up with @PentesterLab to offer 30 student accounts on this fantastic platform.

Stay at home, learn webapp security and redeem a free account at [email protected] from a valid school/Uni e-mail.

[Ivan Novikov @d0znpp]

Meet JWT heartbreaker! A Burp extension that finds thousands of weak JWT secrets https://t.co/pI2HSJIIyG

[Web Security Academy @WebSecAcademy]

We just added an awesome new topic on HTTP Host header attacks.

https://t.co/kjPoHZeCu0

[Sayed Abdelhafiz @dPhoeniixx]

I have published Arbitrary code execution on Facebook for Android's write up, Enjoy reading!
https://t.co/HTKUDxJk4M

[PT SWARM @ptswarm]

💥Easy RCE Ports

Java RMI: 1090,1098,1099,4444,11099,47001,47002,10999
WebLogic: 7000-7004,8000-8003,9000-9003,9503,7070,7071
JDWP: 45000,45001
JMX: 8686,9012,50500
GlassFish: 4848
jBoss: 11111,4444,4445
Cisco Smart Install: 4786
HP Data Protector: 5555,5556

#ptswarmTechniques

[Corey Quinn (in Dublin this week) @QuinnyPig]

Well this is my @awscloud TIL tip of the day!

[Charles Fol @cfreal_]

This is indeed the vulnerability I reported to @vBulletin. Pre-auth SQLi, leads to privilege escalation and RCE as admin (CVE-2020-12720).