Finally 🤩 I'm an Offensive Security Certified Professional 🥳 Thanks to @offsectraining for the awesome experience. Here's my review and preparation guide on How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt
https://t.co/pZtSySnRCm
⚠️A while ago I developed Heimdall-WiFi-Radar, only with 3× ESP8266 it was possible to track and position WiFis devices through walls, now with the help of AI we have a new level, it is possible to know where you are and what are you doing! 😱😱
If you want to master XSS, open this thread!
Cross-site scripting vulnerabilities are injection attacks that allow attackers to execute malicious Javascript in your browser! 🤯
A Thread 🧵👇
Are you into web hacking?
If so, you must have technology-specific wordlists
If not, you're missing obvious vulnerabilities.
Don't believe me?
Let's look at an information disclosure in an ASP[.]NET Core site:
What interesting or innovative C2/exfil channels have you seen/used/considered? WebSockets and QUIC seem promising - I'm curious what else is out there.
Another 0-day LPE on the latest Ubuntu Desktop (v5.13). Was initial saving for pwn2own this year, but a patch that appears on upstream fixed this vulnerability just two months before pwn2own : (
So we decide to disclose our exploit. CVE already assigned, writeup will come soon.
If your 2022 goal involves learning #linux - #ubuntu#centos or even #ansible, did you know that you don’t even have to wait!
I’ve made a FREE lab that gives you 7 Linux machines, all networked with terminals in your browser - https://t.co/Rnixfzkmvl
Dive Into your Future Now!
@Sri_Hxor@ich_rish99 It's stalking omgggg!! how cheap people can make jokes outta it? damn creepy! It's dreadful and pathetic to see people making fun out of this unimaginably serious issue 😑
Now, CTO, short for Call Tree Overviewer, which is an IDA Pro plugin, has been released officially. Check the web page on github. #idapro#reversing#malware#dfir
https://t.co/I9IJFcYPTu
And check my presentation on #vblocalhost as well.
https://t.co/FiHEL4shLi
It's that time of month where I complain about @firefox ptrace protection. In Linux this means bypass of all protections available (tested on clean Ubuntu Linux).
You have weak ptrace perms. Here is a snippet of basic ptrace protection/1
src: https://t.co/X9fBBnfEaO
As a part of our new VRP platform launch (https://t.co/iBpWvPDcvl) we are excited to announce that we will now have Bug Hunters swag available for special occassions.
Stay tuned for more information on what those are & how you can get your hands on some....