Felipe Veas

Oh snap, you just found me!

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

Great #patchtuesday Microsoft, but did you not forgot something for #printnightmare? 🤔

Still SYSTEM from standard user...

(I may have missed something, but #mimikatz🥝mimispool library still loads... 🤷‍♂️)

[Cntr0llz @cntr0llz]

5th Place, What a huge Event!!! Thanks to
@RedTeamVillage_ for another amazing CTF ♥.
Ninja players from Cntr0llz
@fjv_cl @CesarSilence @xpl0ited11 @Hackttori
@DanielAndress4 @n4t_cl @f4d3_cl @Silverfuuu_ck
@s4mnez @b3t_a @Halx0n @Mataya_CL @litneet64

[Cntr0llz @cntr0llz]

Con gran orgullos nos complace anunciar la obtención de su certificación OSCP a la integrante de nuestro equipo @n4t_cl . Felicitaciones máquina🦊🏴‍☠️ !!!

[Felipe Veas @fjv_cl]

@KumaruSonna @cntr0llz I forgot to take notes, but basically you gotta use GetNPUsers from Impacket in conjunction with socat to solve part 1. As for part 2, it's the same idea but with GetUserSPNs and the credential you previously got.

[Mataya @Mataya_CL]

New achievement, my first CVE was a RCE!
#Cntr0llz #CVE

https://t.co/psghZHlxK7

[LiveOverflow 🔴 @LiveOverflow]

🤔

[f4d3 @f4d3_cl]

Here's my #writeup of an #XXE bug, exploited in more than one way,
Really hope that this helps anyone!
https://t.co/m6WGv2nVA5
https://t.co/b4inGDLzot
Thanks to @cntr0llz, @stokfredrik, @fjv_cl, @Mataya_CL, and everyone who keeps crushing it!
#bugbounty

[Years Progress @YearsProgress]

▓▓▓▓▓▓░░░░░░░░░ 41%

[Catherine @whitequark]

i'm happy to announce our problems are over

[Adam Zeloof (@[email protected]) @azzeloof]

Presenting the least useful Pi Hat ever- the Raspberry Pi Zero RF Modulator. The answer to the question nobody was asking: “How can I display my raspberry Pi Zero on an antique TV?”

[f4d3 @f4d3_cl]

Dungeon escape PPC Challenge writeup:

https://t.co/uvOOLdg3JX

Thanks to @fireshellst for the CTF (: <3

[Felipe Veas @fjv_cl]

@Capitan_Alfa Aguante Ezelf !!!1 Felicitaciones :)

[CVE @CVEnew]

CVE-2020-8946 Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/sys_log_clean.cgi log_3g_type parameter. https://t.co/wKIsfyx0E6

[CVE @CVEnew]

CVE-2020-8438 Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring. https://t.co/4iBGJAO6NQ

[Felipe Veas @fjv_cl]

@CesarSilence It's my very first CVE :3