bugzy

n00b, wanna be hacker one day

[bugzy @d3vilbug]

Just published: Witcher: Managing GitHub Advanced Security (GHAS) Controls at Scale

Read full article here: https://t.co/JT6bLxA5ba

Witcher: https://t.co/FmjgdgHNpZ

#ApplicationSecurity #SAST #CyberSecurity #CodeQL #GHAS #witcher #SSDLC #ShiftLeftSecurity #AppSec #pentest

[bugzy @d3vilbug]

Witcher is a tool designed to streamline and automate security control management for GitHub repositories. Whether you’re enabling CodeQL, Dependabot, Secret Scanning, or IaC scanning, Witcher empowers you to implement and monitor security features across multiple repositories.

[bugzy @d3vilbug]

Just published: Witcher: Managing GitHub Advanced Security (GHAS) Controls at Scale

Read full article here: https://t.co/JT6bLxA5ba

Witcher: https://t.co/FmjgdgHNpZ

#ApplicationSecurity #SAST #CyberSecurity #CodeQL #GHAS #witcher #SSDLC #ShiftLeftSecurity #AppSec #pentest

[bugzy @d3vilbug]

This post explores the limitations of GitHub Advanced Security (GHAS) and how Witcher enhances security management by providing greater scalability, control, and efficiency across repositories.

[BSides Berlin @SidesBer]

#BSidesBerlin is back!

Save the date: Saturday 26.11 at @cbase and online

The CFP is Open until 16.10 https://t.co/lEbM1JMTfB

Tickets are available on our website https://t.co/kJPlqQJlHa

@SecurityBSides @cfp_time

[bugzy @d3vilbug]

@r0bre @Neodyme congrats 🥳🎉

[bugzy @d3vilbug]

Our team mango won the first place of @nullcon berlin onsite ctf.

thanks to @nullcon @antriksh_s and HackIM team for this amazing experience and LightSaber 😁

#nullcon #nullconberlin

[bugzy @d3vilbug]

Day 02 started with @albinowax talk ..... one of the interesting talk on web application security

#NullconBerlin

[bugzy @d3vilbug]

i am going to attend Nullcon Berlin 2022 using public transport

#tramps #greencon

[bugzy @d3vilbug]

more details at https://t.co/hSnMjg32WU

[bugzy @d3vilbug]

#NullconBerlin2022 talk #2 was fun and interesting .... uncovering smartness of today's smart devices 😁

[bugzy @d3vilbug]

I'll be giving one hours session today from 6:00 PM - 7:00 PM PKT with @BSidesPakistan

https://t.co/qvlLScRkQy

Session:
1. Demo of encryption and decryption of request & response on the fly (below are a few scenarios)
2. Decrypting Mobile App Traffic using AES Killer and Frida

[BApp Store @BApp_Store]

Added: AES Killer, decrypt AES traffic on the fly

https://t.co/KO9GEMvkRZ

[bugzy @d3vilbug]

GitHub: https://t.co/8yMdqHp9rT

For more info and usage kindly read below blog posts
- https://t.co/9OwJ9YcsJh
- https://t.co/UkOUXVFe6a

[bugzy @d3vilbug]

My second extension AES Killer published in the @PortSwigger BApp store.
https://t.co/d8xpFw4mgf

#cybersecurity #infosec #informationsecurity #pentesting #burpsuite #bugbounty #mobileappsecurity #applicationsecurity #pentester #aeskiller #aes_killer #frida #mobilesecurity

[bugzy @d3vilbug]

@pradhan2030 it can decrypt and encrypt request and response with multiple variation like in this post https://t.co/UkOUXVFe6a

you can check configuration for your request & response

[bugzy @d3vilbug]

In my second blog post, I have explained how one can decrypt the AES Encrypted mobile app traffic on the fly using AES Killer and Frida.

https://t.co/9OwJ9YcsJh

#cybersecurity #infosec #informationsecurity #pentest #burpsuite #bugbounty #mobileappsecurity #frida #MobileSecurity

[bugzy @d3vilbug]

Released AES Killer v4.0

GitHub: https://t.co/8yMdqH7y3j
Guide: https://t.co/UkOUXVnCHA

#cybersecurity #security #infosec #informationsecurity #pentesting #pentest #burpsuite #plugins #hackbar #bugbounty #mobileappsecurity #applicationsecurity #pentester #aeskiller #aes_killer

[bugzy @d3vilbug]

This BEAST will work with encryption & decryption of traffic on
- Complete Request and Response
- Specific Request Parameters and complete response
- Specific JSON Request parameters and complete response
- Specific Request and Response Parameters
- Override Request and Response

[bugzy @d3vilbug]

Now you can directly install HackBar from the Burp suite BApp store, Thanks to the @PortSwigger Product Team

https://t.co/E0UMK9ya1y

#pentesting #pentest #burpsuite #plugins #hackbar #bugbounty #mobileappsecurity #applicationsecurity #pentester #infosec