ghostccamm

I have a crippling addiction hacking websites
Sometimes participate in CTFs with @EmuExploit

[PortSwigger Research @PortSwiggerRes]

The voting has concluded, and we're thrilled to announce the top ten web hacking techniques of 2025! Massive thanks to everyone in the community for sharing their hard-earned discoveries, plus the panel and everyone who nominated or voted!
https://t.co/mjzzM4S7k0

[Sapra @0xsapra]

Here's lighttpd/1.4<>gunicorn Request smuggling N day writeup from m0lecon CTF 2025 https://t.co/OrzqR7Si2g

[Faav @efaav]

Part II: I found a bypass to Microsoft's fix using a Timing Attack to leak the Microsoft Event Registration database again! Here's the writeup: https://t.co/hgRoRiCptp #BugBounty #bugbountytips

[ghostccamm @GhostCcamm]

We've published a new advisory regarding a circumstantial authentication bypass for the Beego framework. This vulnerability was reported in May, and after multiple follow-ups with no response, we have made the advisory public.
https://t.co/MtLDlSuzuX

[ghostccamm @GhostCcamm]

I will be presenting my research into ORMs at Black Hat EU this year!

In my talk I showcase that an ORM could leak more data than what you joined for and methods on how to exploit a vulnerable use case, without exploiting an SQLi.

#BHEU @BlackHatEvents

https://t.co/oh6akHoRqB

[James Kettle @albinowax]

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: https://t.co/3vZ2bMx9DA

[Assetnote @assetnote]

Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: https://t.co/oh7iVBc3t1

[ghostccamm @GhostCcamm]

i will be dropping my fattest track at 7:30pm this friday
this song will straight up give you cholesterol

register to DownUnderCTF now!
https://t.co/VwPIepcg6A

[DownUnderCTF @DownUnderCTF]

Less than 2 days to go! The clock never stops! ⌛

Registrations are now open at:
https://t.co/VC71FNVWuB

Welcoming all skill levels! We can’t wait to show you what the team has cooked up this year! 🧑‍🍳

[xEHLE @xEHLE_]

New writeup:

Early last month, @samwcyo, @sshell_, and I found a Django ORM injection in an online shooter game that let us steal cryptocurrency from the game's wallet.

Read the blog post here:
https://t.co/YjkIlEPX9q

[DownUnderCTF @DownUnderCTF]

Did you guess right? ONE month until DownUnderCTF 2025 kicks off and by now you should know what you’ll be doing this 18-20th July!

Join us! Share your interest here! https://t.co/mRG1BaAv6v

[DownUnderCTF @DownUnderCTF]

🔥 2025, we’re coming in HOT! 🔥 Block out July 18th-20th - it’s going to be an absolute explosion of fun! 🎉🚀
#CTF #DownUnderCTF

[elttam @elttam]

New blog post: New Method to Leverage Unsafe Reflection and Deserialisation and gain RCE on Rails https://t.co/pc2ytyA1PM

[ghostccamm @GhostCcamm]

@nullableVoidPtr All you need is 1,000+ t2 micros

[Kylie McDevitt @kylieengineer]

Congrats ⁦@toasterpwn⁩ winning the #Hexacon2024 CTF speed run yesterday. Great work by the ⁦@hexacon_fr⁩ team in organising it - it was great fun to watch!

[ghostccamm @GhostCcamm]

If you want to try out an info leak challenge without SQLi check out my other challenge https://t.co/qO3kNoXZ2C

There are so many query logic bugs in the real world that are ripe for hacking.

[ghostccamm @GhostCcamm]

It's a bummer I missed @BSidesCbr this year since I now live in Deutschland. But I was very happy to be part of the famous @cybearsCTF CTF. Thank you to everyone!

Btw, new ORM Leak payload for the beego web framework that bypasses allow listing prefixes https://t.co/ADAtb0oa8P

[Cybears @cybearsCTF]

Cybears are getting ready to again awkwardly combine with the official BSides CBR theming! Join us on an epic quest to combine transformers, bears and LOTR into a fun CTF 🤣🤖🐻🏹⚔️ @BSidesCbr

[PentesterLab @PentesterLab]

Quick Blog Post on ORM Leak Exploitation with SQLite3:

https://t.co/YJWh8rjL6C

[PentesterLab @PentesterLab]

We just released our first challenge on ORM Leak:

https://t.co/05Z7vm11XI !

[ghostccamm @GhostCcamm]

@prisma @elttam A possible mitigation is switching operator options from string types to JS symbols, like what Sequelize has done (https://t.co/zHomeAl2FR). Then an attacker would not be able to control the operator by default. Downside is that this would introduce a breaking change.