secssecsecs

Whoever

[secssecsecs @bytebytebyte0x]

@S1r1u5_ Sure, competition is there, but fun is gone. I don’t like to use ai to solve CTF tasks (partially or not, doesn’t matter), and I don’t like to stay behind(on leaderboard) someone who just uses ai. That’s just not the game I like playing.

[secssecsecs @bytebytebyte0x]

@sama Welcome to black mirror

[secssecsecs @bytebytebyte0x]

@go_in_portals @traderInosuke The ticker is $sol, lfgggg

[secssecsecs @bytebytebyte0x]

@SOLM69I Nice one:)

[secssecsecs @bytebytebyte0x]

@degenIzzy $conan ?

[Ambionics Security @ambionics]

We're proud to announce LIGHTYEAR, a tool that let you dump files, blind, in PHP, based on a new algorithm.
https://t.co/GG4tSNnUCf

[secssecsecs @bytebytebyte0x]

@LehmannLorenz @magicking_ @banteg Bold claim. Russian server and a Ru TLD domain are different things. It looks like it’s behind cloudflare.

[secssecsecs @bytebytebyte0x]

@LehmannLorenz @code People saying in comments that Linux is a solution, are you making a joke? How the heck it’s saving you from code execution after you’ve clicked “install” on malicious extension?!?

[secssecsecs @bytebytebyte0x]

@Hacker0x01, your support team has been unresponsive for 9 days regarding ticket #532796. I have dedicated considerable time to a program, discovered multiple bugs, and have been unable to withdraw my bounties since December. Please address this issue immediately. #hackerone #bb

[secssecsecs @bytebytebyte0x]

@albinowax @BlackHatEvents As always, James! Incredible, can't wait

[secssecsecs @bytebytebyte0x]

Is there a way to find out if application is running PHP version < 8?
- phpinfo is NOT available
- Errors are suppressed

#php #bugbounty #hackers #hunters #cve

[James Kettle @albinowax]

The easiest way to find a max-impact desync vulnerability in 2024:

1. Create a novel desync technique
2. Add it to a tool like HTTP Request Smuggler
3. Scan a bunch of systems and see what sticks.

The only tricky step is #1 and there's a new tool to help with this 1/2

[slonser @slonser_]

A writeup analysis of a simple logical vulnerability at @googlechrome for which @GoogleVRP paid me $16,000.
Link: https://t.co/YMpxGVQCSo
P.S. I have very few subscribers, so I am grateful for every repost
#0day #Chrome #GoogleVRP #CVE

[ProjectDiscovery @pdiscoveryio]

🚨 Explore the CVE jungle with ProjectDiscovery's cvemap! 🌐🛡️

A powerful tool integrating KEV, EPSS, POCs, and more data, for a comprehensive threat analysis. Stay on top of cybersecurity challenges with #cvemap! #CyberSecurity #HackWithAutomation

https://t.co/XpTJXxZ4im

[secssecsecs @bytebytebyte0x]

@MrBeast What is luck baby don’t hurt me

[secssecsecs @bytebytebyte0x]

Yay, I was awarded a $100 bounty on @Hacker0x01! https://t.co/xtkHljvAHU #TogetherWeHitHarder

[secssecsecs @bytebytebyte0x]

Was avoiding BB for too long. Let’s go!

Yay, I was awarded a $250 bounty on @Hacker0x01! https://t.co/xtkHljvAHU #TogetherWeHitHarder

[sagitz @sagitz_]

We found two 0-day vulnerabilities in @Ubuntu kernel and it all started by reading descriptions of old CVEs 📖
Thread about the discovery of #GameOverlay 🧵👇🏼

[Gareth Heyes \u2028 @garethheyes]

Universal MXSS. Works in all browsers and is likely to bypass lots of filters because title is both an SVG and HTML tag. Briefly checked DOM Purify and it looked okay.

[secssecsecs @bytebytebyte0x]

@bug_vs_me Great commitment!