Δrr0way

Penetration tester, likes 0days, Linux, Lifting Weights, Tea, Coffee, Kitesurfing, Motorbikes. Blogs @

[Patrik Grobshäuser @ITSecurityguard]

if you've ever had to decompile hundreds of JARs/DLL just to find the 38 that actually matter

we built something for that 👀

Hyoketsu filters vendor dependencies out of your target before you even open your decompiler.

🪿 hash-matched against tens of millions of files.

👇

[Patrik Grobshäuser @ITSecurityguard]

I finally let Claude do my pentest this week. Full 5-day engagement, zero human input. Here's what the client got: 😏

https://t.co/1PPuxhs4V9

#bugbounty #pentesting #AI #cybersecurity #infosec #claudeai

[shubs @infosec_au]

We got frustrated with dealing with vendor dependencies when reverse engineering large applications. @ITSecurityguard from @SLCyberSec’s Sec Research Team built Hyoktesu to solve this problem forever: https://t.co/rQM2ypLLuW - releasing this today! Blog: https://t.co/KCPSTnFjVN

[Intigriti @intigriti]

Found an exposed Swagger/OpenAPI file on your target? 🧐

Sj by @BishopFox audits endpoints defined in Swagger docs automatically, tests all defined endpoints, generates curl/sqlmap commands, and even bruteforces for hidden definition files! 🤠

Check it out! 👇

🔗 https://t.co/x41DTGB6dR

[Δrr0way @Arr0way]

@damian_89_ Genau

[Δrr0way @Arr0way]

@MrTuxracer Noice <3

[joernchen @joernchen]

Today I have a more serious topic than usual, please consider reposting for reach:

My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]

[Δrr0way @Arr0way]

@MrTuxracer @OVHcloud Oh là là - OVH natürlich

Totally agree about the custom domain aspect, means you are in control 💪

[Δrr0way @Arr0way]

@MrTuxracer Understandable, i need to look at protonpass.

Are you using simplelogin with the protonpass integration, over apple iCloud “hide my email”?

Where we suck the most is stuff like cloudflare replacements, only thing I’ve found is BunnyCDN

[Δrr0way @Arr0way]

@MrTuxracer Haha, sorry mate 😂 I’d legit never heard of it :)

Apologies if it came across as negative ❤️

[Δrr0way @Arr0way]

@MrTuxracer Just read the whole article, nice find!

Enjoyed the write up, thanks for sharing :)

[Julien | MrTuxracer 🇪🇺 @MrTuxracer]

As promised! Here's a root/SYSTEM-level RCE (aka CVE-2025-47812) affecting Wing FTP Server in versions before 7.4.4.

Enjoy 🥷

#security #BugBounty

[Δrr0way @Arr0way]

@MrTuxracer Lucrative tweet

[Δrr0way @Arr0way]

@NullMode_

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top ten web hacking techniques of 2024! https://t.co/XHPEeqPQLR

[Δrr0way @Arr0way]

@damian_89_

[Δrr0way @Arr0way]

@damian_89_ @securibee Alright cheers, I’ll take a look