Adithyan AK

OSEP | OSWE | OSCP | CRTP | CREST CRT | Information Security @CarnegieMellon | Red Team Member @SynackRedTeam | OWASP | Offensive Security Researcher

[Adithyan AK @akoffsec]

Finally 🤩 I'm an Offensive Security Certified Professional 🥳 Thanks to @offsectraining for the awesome experience. Here's my review and preparation guide on How I Passed OSCP with 100 points in 12 hours without Metasploit in my first attempt
https://t.co/pZtSySnRCm

[Matt Johansen @mattjay]

A new container escape vulnerability just dropped.

It gives an attacker the ability to hop from container to host OS via runc.

[Adithyan AK @akoffsec]

Yayy! CRTP done ✅

[Altered Security @AlteredSecurity]

Congratulations to @akoffsec for clearing our Certified Red Team Professional exam!
#ADLab #CRTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Ieu8xslmiS

[Galileo @G4lile0]

⚠️A while ago I developed Heimdall-WiFi-Radar, only with 3× ESP8266 it was possible to track and position WiFis devices through walls, now with the help of AI we have a new level, it is possible to know where you are and what are you doing! 😱😱

[Derek Parfait @haus_cole]

ChatGPT jailbreaking itself

[Intigriti @intigriti]

If you want to master XSS, open this thread!

Cross-site scripting vulnerabilities are injection attacks that allow attackers to execute malicious Javascript in your browser! 🤯

A Thread 🧵👇

[Adithyan AK @akoffsec]

Man spittin facts

[prin @fuxksniper]

half of infosec is ranting about cost of courses and certs.

and other half is just sharing https://t.co/vSOHzextFq links over telegram 🤣🤣

[Corben Leo @hacker_]

Are you into web hacking?

If so, you must have technology-specific wordlists

If not, you're missing obvious vulnerabilities.

Don't believe me?

Let's look at an information disclosure in an ASP[.]NET Core site:

[Kyle Avery @kyleavery]

What interesting or innovative C2/exfil channels have you seen/used/considered? WebSockets and QUIC seem promising - I'm curious what else is out there.

[Stealthy @stealthybugs]

Check out my vulnerability write up about critical bugs in Apple infrastructure worth 36,000 in bounties.

https://t.co/lT59uEGNZi

#BugBounty #exploit #infosec #whitehat #bugbountytips #ethicalhacking

[ETenal @ETenal7]

Another 0-day LPE on the latest Ubuntu Desktop (v5.13). Was initial saving for pwn2own this year, but a patch that appears on upstream fixed this vulnerability just two months before pwn2own : (
So we decide to disclose our exploit. CVE already assigned, writeup will come soon.

[James Spurin @jamesspurin]

If your 2022 goal involves learning #linux - #ubuntu #centos or even #ansible, did you know that you don’t even have to wait!

I’ve made a FREE lab that gives you 7 Linux machines, all networked with terminals in your browser - https://t.co/Rnixfzkmvl

Dive Into your Future Now!

[Anubhav Singh🇮🇳 @AnubhavSingh_]

1/n) Blog for OSCP Preparation by @akoffsec

https://t.co/7GJ50nCPGr

OSCP (Offensive Security Certified Professional) - Git Hub Repositories
Credit : @imabhisarpandey

https://t.co/bVGrL5invQ

https://t.co/N1QYOnWlge

https://t.co/sipRHjGdxo

https://t.co/APibIR1UTc

[Adithyan AK @akoffsec]

@Sri_Hxor @ich_rish99 It's stalking omgggg!! how cheap people can make jokes outta it? damn creepy! It's dreadful and pathetic to see people making fun out of this unimaginably serious issue 😑

[Hiroshi Suzuki @herosi_t]

Now, CTO, short for Call Tree Overviewer, which is an IDA Pro plugin, has been released officially. Check the web page on github. #idapro #reversing #malware #dfir
https://t.co/I9IJFcYPTu
And check my presentation on #vblocalhost as well.
https://t.co/FiHEL4shLi

[P4X -pronounced PAX (peace). Not pea four ex, thx. @_hyp3ri0n]

It's that time of month where I complain about @firefox ptrace protection. In Linux this means bypass of all protections available (tested on clean Ubuntu Linux).

You have weak ptrace perms. Here is a snippet of basic ptrace protection/1

src: https://t.co/X9fBBnfEaO

[Adithyan AK @akoffsec]

I wonder how researchers use the swag and post pics online 😂

[Google VRP (Google Bug Hunters) @GoogleVRP]

As a part of our new VRP platform launch (https://t.co/iBpWvPDcvl) we are excited to announce that we will now have Bug Hunters swag available for special occassions.

Stay tuned for more information on what those are & how you can get your hands on some....

[Adithyan AK @akoffsec]

@gentilkiwi

[Adithyan AK @akoffsec]

@gentilkiwi

[Adithyan AK @akoffsec]

@panchapikesan @mkstalin @mkstalin @ptrmadurai