Ana Maria Popescu

Pentester, Engineer and Visual Artist. Confusing, right?

[Kevin Bacon @kevinbacon]

Hot day, hot song. The goats and I are feeling Heated, @Beyonce. Loving this track. #GoatSongs #Renaissance

[Ana Maria Popescu @amiutza]

@nnwakelam You can use reds and pinks as complimentary colours. If you want to "fix it" I would use wax to seal the crack or green resin and then paint over

[Adrian Groves @adyG65]

Totally mad in our garden tonight,It's like a zoo.4 badgers and 5 foxes.@trail_wildlife @BBCSpringwatch @DorsetWildlife @ChrisGPackham

[Ana Maria Popescu @amiutza]

@Krenner I like the pair that has no number...suits you best as far as I can see.

[Ana Maria Popescu @amiutza]

@halvarflake Ours is 16 months, breastfed and not in day care (he is at home, in our care). He has never had any sickness or infection. The babies we know, who attend nursery or have a childminder, they have all been sick (at least) 2-3 times up to the same age.

[Ana Maria Popescu @amiutza]

@Jadwong @Hakingowi Gorgeous, elegant lady. No such misoginistic behaviour should be allowed in this day and age, especially at an MP level. Stand up for yourselves ladies! How we dress is nobody's business but our own.

[Ana Maria Popescu @amiutza]

Please address the Woodsley Green area as every night for 2 months we have a gang setting off fireworks. It is disturbing beyond imagination. On the 14th of November they were active at 5am and 9pm. They seem to be on a schedule every evening!!! @WYP_LeedsNW

[Ana Maria Popescu @amiutza]

I just realised that tweets are in fact short ads - a way to self promote and boost professional ego.

[Rick Delashmit @spotn00b]

My son is a huge @Tesla fan. For his birthday i asked if a few owners could parade by our house. 36 kind strangers from all over the St. Louis area showed up and made his day. Proving @Tesla @elonmusk built more than a car. It’s a community ⚡️ ❤️

[Sudeep Agarwala @shoelaces3]

Friends, I learned last night over Zoom drinks that ya'll're baking so much that there's a shortage of yeast?! I, your local frumpy yeast geneticist have come here to tell you this: THERE IS NEVER A SHORTAGE OF YEAST. Here's where I'm a viking. Instructions below.

[BSidesLeeds @BSidesLeeds]

Lovingly cut into row and columns! :-P

[I N F O S E C C H L Ö B O 👩🏼‍💻 ✨ @InfosecChlobo]

BSides Leeds 2020! Happy Birthday SQLi

[Mark C. @LargeCardinal]

The cake for @BSidesLeeds is here!!!

[Mark C. @LargeCardinal]

So - the @BSidesLeeds pre-party will be a Nation of Shopkeepers, which is located at 26-27 Cookridge St, Leeds LS2 3AG

To commemorate the occasion, we're gonna have a 21st Birthday party for SQLi!! Bring party hats and be prepared to sing on a live stream at about 2130! :P

[mpgn @mpgn_x64]

CVE-2019-19781 in three steps :

1⃣ No account needed
2⃣ Unrestricted File Upload
3⃣ Template Injection through Template Toolkit

Result into a Remote Code Execution without authentication ❗️

🛂 Follow Citrix Mitigation to avoid exploitation https://t.co/tYge6LymSl

[mpgn @mpgn_x64]

GET /vpn/../vpns/portal/scripts/newbm.pl
GET /vpn/../vpns/portal/scripts/rmbm.pl

The exploit is *maybe* linked to the Bookmarks feature of Citrix Gateway which creates an XML file with the parameters "name", "url" and "desc" in it.

Maybe related to a lack of sanitization !

[mpgn @mpgn_x64]

CVE-2019-19781 start with a path traversal on the "vpns" folder:

GET /vpn/../vpns/services.html
GET /vpn/../vpns/cfg/smb.conf

Patched if => HTTP/1.1 403 Forbidden

[Ana Maria Popescu @amiutza]

@mpgn_x64 Good to know about this! Do you have any suggestions for resources about how to exploit this?

[Ana Maria Popescu @amiutza]

@LargeCardinal Well done Dr. Carney! Or is it Dr. LargeCardinal? ;) anyway, Congratulations DR. !!!!!

[Ana Maria Popescu @amiutza]

Another drawing I finished: a little one...for those who miss the summer already. #oysterdrawing #illustration #artinmyheart