#exploitsexplained - Twitter Hashtag

9 days ago

The flaw was in the timing. Synack Red Team researcher Elison Kaloshi sent identical payments in parallel using free Burp Suite. A few milliseconds turned 2,000 units into a 10,000-unit card credit. https://t.co/eVg2252635 #ExploitsExplained

SynackRedTeam's tweet photo. The flaw was in the timing. Synack Red Team researcher Elison Kaloshi sent identical payments in parallel using free Burp Suite. A few milliseconds turned 2,000 units into a 10,000-unit card credit. https://t.co/eVg2252635

#ExploitsExplained https://t.co/Wm1WlpF78K

2

40

3

12

2K

Synack Red Team

@SynackRedTeam

about 2 months ago

@turakbusra breaks down three shifts security teams need to account for when pentesting AI systems: https://t.co/nNpg50Tcx4 #ExploitsExplained #PromptInjection #AISecurity #LLMSecurity #SynackRedTeam

SynackRedTeam's tweet photo. @turakbusra breaks down three shifts security teams need to account for when pentesting AI systems: https://t.co/nNpg50Tcx4

#ExploitsExplained #PromptInjection #AISecurity #LLMSecurity #SynackRedTeam https://t.co/bx08nnnuYe

0

15

0

9

3K

Synack Red Team

@SynackRedTeam

4 months ago

A single prompt got an AI to hand over S3 bucket contents, and Amazon Bedrock's content moderation never flagged it. We broke down the full exploit chain, the sanitized PoC, and the fixes in this week's Exploits Explained: https://t.co/96cvCXD0oZ #ExploitsExplained #PromptInjection #AIsecurity #OffensiveSecurity #SynackRedTeam

SynackRedTeam's tweet photo. A single prompt got an AI to hand over S3 bucket contents, and Amazon Bedrock's content moderation never flagged it. We broke down the full exploit chain, the sanitized PoC, and the fixes in this week's Exploits Explained: https://t.co/96cvCXD0oZ

#ExploitsExplained #PromptInjection #AIsecurity #OffensiveSecurity #SynackRedTeam

0

45

6

26

3K

Viren Pawar @VirenPawar_

about 3 years ago

I’m thankful to @SynackRedTeam for having me on their platform and for helping me upgrading my skills. Long engagements and a slow pace definitely yields positive results. Don’t give up. #infosec #bugbounty #srt #exploitsexplained #writeup

Synack Red Team

@SynackRedTeam

about 3 years ago

@VirenPawar_ is no stranger to a prototype pollution. Read about his determination to understand the complexity of the vuln and how he was finally able to achieve a successful exploitation in this Exploits Explained: https://t.co/dShtGGHMlN

0

40

14

19

6K

0

3

0

602

Synack

@synack

over 4 years ago

@SynackRedTeam member @kuldeepdotexe discusses #NoSQLInjection in the latest blog. He details his most recent discovery on #NoSQLinjection and his reporting on how he managed the #vulnerability. 💻 Learn more here on #ExploitsExplained 🔗: https://t.co/7rKjNQ58kj

1

69

33

24

0

Synack

@synack

about 5 years ago

In the latest installment of #ExploitsExplained, see a demo of a vulnerability in an Oracle WebLogic Server that allows attackers to perform remote code execution via a single HTTP request. Check out this video walkthrough: https://t.co/E3Iyv7KwDy #cybersecurity #hacking

0

5

0

3

0

Synack

@synack

over 5 years ago

What worries #hackers? Attend for our next #ExploitsExplained installment on 4/21 where @synackredteam researcher, @Adam_Logue details the risks #deserialization attacks pose to security practitioners, including a demo of a JBoss Server exploitation. https://t.co/in5XAU9RjP

synack's tweet photo. What worries #hackers? Attend for our next #ExploitsExplained installment on 4/21 where @synackredteam researcher, @Adam_Logue details the risks #deserialization attacks pose to security practitioners, including a demo of a JBoss Server exploitation. https://t.co/in5XAU9RjP https://t.co/kzbIMwdAJU

0

12

4

0

Top Tweets for #exploitsexplained

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users