emJncnh2

セキュリティ勉強中
CISSP/RISS

[emJncnh2 @emJncnh2]

AIセキュリティWG 行ってきた

[emJncnh2 @emJncnh2]

HackNight #4 行ってきた

[emJncnh2 @emJncnh2]

行ってきた

【CDLE Cyber Security】AI × Security 勉強会#7

[Linuxiac @linuxiac]

Let’s Encrypt has made IP-based TLS certificates generally available, allowing secure HTTPS connections directly to IP addresses.
https://t.co/X8b28mJXTV

#LetsEncrypt #Certificates #TLS #Security

[PortSwigger Research @PortSwiggerRes]

Voting is now live for the top ten web hacking techniques of 2025! Grab a coffee, browse the 61 quality nominations and cast your vote on the most creative and ground-breaking techniques:
https://t.co/srZ9GhJgSN

[emJncnh2 @emJncnh2]

行ってきた #CybozuBugBounty

[Gareth Heyes \u2028 @garethheyes]

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below:

https://t.co/Tje8Ce8if0

[emJncnh2 @emJncnh2]

PentestSecJP 行ってきた

[emJncnh2 @emJncnh2]

Shibuya.XSS 行ってきた

[slonser @slonser_]

My new research
Escalation of Self-XSS to XSS using modern browser capabilities.
https://t.co/aYKhHAeCcq

[emJncnh2 @emJncnh2]

HackNight行ってきた

[slonser @slonser_]

I think many people are familiar with the topic of blind CSS exfiltration, especially after the post by
@garethheyes
However, an important update has occurred since then, which I wrote below ->

[MBSD NEWS @mbsdnews]

【MBSD技術者ブログ】
当社エンジニアがブログを更新しました。
「CSRF、この罠いける？いけない？クイズ」
今回の技術者ブログは、どのようなブラウザ、正常リクエスト、罠ページの組み合わせであればCSRFが成立しうるのか、全5問のクイズ形式で整理しています。ぜひ考えながら読み進めてみてください。

▼詳しくはこちらをご覧ください
https://t.co/eXXjydcnyc

#mbsd #MBSDセキュリティ勉強会 #csrf

[emJncnh2 @emJncnh2]

ブラクラクラ勉強になりました

[André Baptista @0xacb]

Somehow, Chrome 130+ started parsing the hostname from javascript URLs again and this can be used for a constrained XSS 🤯

https://t.co/wPeCdD6TVW

This was the second solution for the recent CTF challenge.

[Masato Kinugawa @kinugawamasato]

@garethheyes I was able to complete them :D (tested on Chrome)
Shift_JIS (0x81FC) https://t.co/8sOPq74IT3
GBK (0x81FD) https://t.co/EB1ZW2xzuM
gb18030 (0x81FE) https://t.co/D0qyIgRcVw
big5 (0xA15C) https://t.co/KoH4lBne6j

[Intent To Ship @intenttoship]

Blink: Intent to Deprecate and Remove: Remove auto-detection of ISO-2022-JP charset in HTML
https://t.co/UWi2tu9iBw

[Intigriti @intigriti]

💡 Quick tip

💳 When testing checkout systems, always try to order with test cards!

Test cards are used by developers to simulate payments during development but they are sometimes still accepted in production!

A few test card combinations for 2Checkout / Stripe 👇

[kurenaif🪄🗝 @fwarashi]

当日にすみません！！！
会場のキャパが思ったより広かったので、枠を拡張しました。
参加できそうであれば、来ていただけると嬉しいです！
https://t.co/OwfUCcpPbs

[emJncnh2 @emJncnh2]

魔女のお茶会補欠...