Ar1fshaikh

Learner | Yellow Belt @pwncollege | appsec x Bug Bounty hunter | CTF - web.pwn

[Ar1fshaikh @ar1fshaikh]

+1

[Pankaj @the2ndfloorguy]

switch to hardware. go into debt if you have to 🚨

[Pankaj @the2ndfloorguy]

switch to hardware. go into debt if you have to 🚨

[Ar1fshaikh @ar1fshaikh]

@zi0Black @logangraham This is really important question!
Another perspective would be, since consuming so many files makes certain things to definitely out of context which makes chaining hard unless specifically curated in context, Also there are some additional challenges for this to work in CI-CD.

[Ar1fshaikh @ar1fshaikh]

Please read my new writeup on challenge breaking AES-ECB + Insecure deserialization :

https://t.co/5MAYtK4TSn

#bugbountytips #bugs #hacking #infosec #CyberSecurity #ctf

[Nithin 🦹‍♂️ @thebinarybot]

☃️Bug Bounty Beginners Roadmap☃️

➡️ What to learn
➡️ Where to learn
➡️ Practice Labs

and much more...

🔗 Link: https://t.co/o3XCmnljoh

#bugbounty #hacking #infosec #cybersecurity

[H4x0r.DZ @h4x0r_dz]

UEFA to suspend Israel next week.

This follows @Hacker0x01 and @jobertabma’s bold move to ban all Israeli users and companies from HackerOne.

HackerOne concluded Israel is committing war crimes in Palestine so they’ve cut ties, just like they did with Russia.

First bug bounties, now football? Consistency is key.
Proud of you, HackerOne. 🇵🇸✊

[Mosab Abu Toha @MosabAbuToha]

‼️‼️‼️‼️‼️
Note from my friend the doctor:

Just three hours ago, these children were alive, real children.
Now they are scattered body parts we could not even piece back together.
This family came from the north, believing they would be safe here in the south. They were eating spaghetti, which was visible coming out of the little baby's facial wounds
Little Nada was preparing for the evening prayer. And in that moment, the "most moral army in the world" decided to bomb their tent; with a missile, from an endless stockpile, enough to kill all the children of the earth.
Their mother and siblings were killed instantly. The children who survived carry injuries so cruel that, even if they live, life itself may feel unbearable. Nada lost both of her legs. Her little brother Abdullah lost one leg, and his bowels were spilling from his belly. Their little sister's face was blown apart; food was spilling out through her wounds. Their father suffers from severe bleeding in his lungs, and many fractures.

To all people, to the entire world: how do you feel as you watch these images? How can anyone live in comfort, celebrate their children, and dream of their futures, while watching children here grow up in the darkest realities, waiting for their turn under the machine of terror? What does it say about your humanity if you allow this to continue without giving everything you can to stop it and save as many children as possible? Your children are children; and Gazan children are children too. You cannot claim to care for children if you care only for yours only.

[Mohammad Alsaafin @malsaafin]

Israel bombed a multistory home today in Jabalia housing more than 40 people.

This young man says he can hear his aunt calling from under the rubble for the last 2 hours.

With no heavy machinery allowed in Gaza, there’s little hope for those trapped. Nonevent for global media.

[Anonymous @YourAnonOne]

The Israeli army has just hit a school in Gaza and killed 100 people. No one talks about it and it "seems" that X censors these topics.

[xvonfers @xvonfers]

(CVE-2024-1283)[1521893]Heap buffer overflow in Skia(crash when a BMP image contains an unnecessary EOF code) is now public with RCE exploit and novel cross-cache technique.
https://t.co/VcE917EJqS
https://t.co/yaHTKKKAWy

@r3tr074

[Ar1fshaikh @ar1fshaikh]

Do checkout my new writeup for .pac exploitaiton leading to RCE.
https://t.co/s51zQxHl4A
#bugbountytips #infosec #cybersecurity #learning #RCE

[Ar1fshaikh @ar1fshaikh]

Nice reading, overview of how Dirty Pagetable works
https://t.co/RZhnbAGfDT
#Linux #CyberSecurity #infosec #exploit #kernel

[Lau @notselwyn]

Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵

https://t.co/zFimVzjgYB

[0xor0ne @0xor0ne]

Exploiting CVE-2023-3390 in Linux kernel
Nice presentation by Dongok Kim (@c0m0r1) & SeungHyun Lee (@0x10n) & Insu Yun (@insu_yun)

"One shot, Triple kill"
https://t.co/bw6iEpJH4T

#Linux #cybersecurity

[Nicolas Krassas @Dinosn]

A Technical Deep Dive: Comparing Anti-Cheat Bypass and EDR Bypass https://t.co/61A5XKvde6

[ceolawyer @ceolawyer]

IDF soldiers raped a 5 month old pregnant Palestinian woman in front of her family.

They forced the men and children to keep their eyes open and watch.

Otherwise they would be shot.

This is what Zionism represents - the sickest form of evil and terrorism you can imagine.

It’s not enough that they killed over 30,000 innocent civilians, mostly children, in 6 months.

They want to humiliate and torture the most vulnerable people in society.

Every accusation from Zionists is an admission.

[Ar1fshaikh @ar1fshaikh]

Breakpoints at ring 0 🔥
#pwn #kernel #binaryexploitation

[Anonymous @YourAnonOne]

This Thursday, the Israeli army killed at least 104 Palestinians and injured 760 in #Gaza, as they headed towards humanitarian aid trucks

[Ar1fshaikh @ar1fshaikh]

I am elated to share that I have achieved the Yellow Belt rank on @pwncollege (https://t.co/xQOAD72pwT) by
@ASU, a great platform for learning security. Special thanks to amazing mentors @Zardus, @adamdoupe, @TheConnorNelson and the team 🫡.

[0xor0ne @0xor0ne]

Dirty pagetable technique for pwning Linux kernel (CTF challenge)
Mitigations KASLR, SMAP, SMEP, KPTI and slab freelist randomization

https://t.co/vwd2SFgnM1

#Linux #cybersecurity