Dejan Zelic

Cloud, WEB-300 (AWAE), and WEB-200 Content Developer at Offensive Security. Also helped on PEN-210(WiFu), PEN-200 (PWK), EXP-312, Thoughts are my own.

[FalconSpy @0xFalconSpy]

I'm happy to publish a blog post regarding some Red Team tradecraft around Slack Impersonation tthat I've been working on. Please see https://t.co/bF41YEiQyr for more info.

Big thanks @TTimzen @r00tkillah @dejandayoff for their help.

[Dejan Zelic @dejandayoff]

This was a fun one to find, Arbitrary File Read via Symbolic links in @cncfartifacthub https://t.co/YnQWaRDFuc Also found SSRF via Rego Policy (https://t.co/HRxeqIzLWu) and Docker Credential Hijacking (https://t.co/Uqu76KNsfa)

[Dejan Zelic @dejandayoff]

I'm not good at bragging, but I'm proud of this. I discovered an authentication bypass vulnerability which leads compromise of a K8s Cluster. I flexed some new muscles and learned to reverse a go binary. https://t.co/l6q7D2BeDW Kudos to @SUSE and @NeuVector for the quick fix!

[Anthony Radzykewycz @redhataugust]

I just got my first blog article posted with Offensive Security. Check it out! https://t.co/oktu4ycpOu

[Dejan Zelic @dejandayoff]

@theevilbit @zh4ck lldb broke me

[Dejan Zelic @dejandayoff]

@LucianNitescu @offsectraining Congrats!

[Dejan Zelic @dejandayoff]

@iggyf @Ford You know what never had problems with SYNC?

[DяA | daniruiz @dani_ruiz24]

In case you want a more traditional prompt for your @kalilinux terminal screenshots, pressing Ctrl+P switches it instantly 😌👌

You can permanently configure it and much more with the new kali-tweaks command

[Dejan Zelic @dejandayoff]

https://t.co/27TX3xanwW

[Dejan Zelic @dejandayoff]

@milanshiftsec @offsectraining 😜 You might be able to tell which ones were designed before and after ručak

[Dejan Zelic @dejandayoff]

@iggyf Ahhh crap I’ve been waiting 2 months for new GE oven

[Dejan Zelic @dejandayoff]

@vsavic @offsectraining Nice job! Congratulations!

[Csaba Fitzl @theevilbit]

A few quick posts for the "Beyond the good ol' LaunchAgents" series.

Ideas from @0xdade, @bradleyjkemp and @dejandayoff

Part 6: SSHRC - https://t.co/xzlWq44LK9
Part 7: xbar - https://t.co/d3fIsmOqk3
Part 8: Hammerspoon - https://t.co/dOSwnsXcTE

[Dejan Zelic @dejandayoff]

@dougducey @AZDHS I was able to schedule an appt for a family member who is 65+ on 2/27. There was several appts available but I had to keep clicking search multiple times for it to pop up.

[OffSec @offsectraining]

Github Hall-of-fame alert 🚨 Earlier this year, our team discovered vulnerabilities in Wekan. Step 1, exploit Meteor: https://t.co/tICmtGmoQj

[Dejan Zelic @dejandayoff]

@iggyf Did you use dough from the “5 min a day bread”? Or is it different?

[OffSec @offsectraining]

AWAE content developer @dejandayoff discovered and reported an authentication bypass vulnerability in Wekan. Check out the walkthrough: https://t.co/GJYzWk7kxk

[Dejan Zelic @dejandayoff]

@iggyf Old town Sarajevo? I’m totally down I miss that place

[Dejan Zelic @dejandayoff]

@iggyf Idk last time I had it was like early March. Google Maps says it is open. But idk if you can eat there. It’s not the same getting it to go.