HHHHarshil

[Sam Curry @samwcyo]

New blog post with @infosec_au:

We found a vulnerability in Subaru where an attacker, with just a license plate, could retrieve the full location history, unlock, and start vehicles remotely.

The issue was reported and patched.

Full post here: https://t.co/QPzRIqqx9t

[HHHHarshil @hhhharshil]

@Gonski47 Classic Gonski47 move

[Sam Curry @samwcyo]

New writeup from @_specters_ and I: we're finally allowed to disclose a vulnerability reported to Kia which would've allowed an attacker to remotely control almost all vehicles made after 2013 using only the license plate.

Full disclosure:
https://t.co/e2EwvUMgqw

[ϻг_ϻε @steventseeley]

What you think, you become. What you feel, you attract. What you imagine, you create.

[HHHHarshil @hhhharshil]

@d415k Congrats 🔥

[Matt Biedronski @Gonski47]

My template for identifying CVE-2023-5830 is now available within @pdnuclei's community template repository (https://t.co/MhXuMO8SlI)! Update your nuclei templates and read more about the vuln via the pinned post on my profile.

[HHHHarshil @hhhharshil]

@Gonski47 @pdnuclei NUCLEI UPDATE LOADED 😮‍💨

[Octoberfest7 @Octoberfest73]

This field is too vast to know it all, let alone remember it all the time. So the question becomes what "baseline" knowledge is, and how deep it goes(e.g. Nmap? Probably baseline. Unconstrained delegation? Probably not.)

Portfolios/proven work and practical certs > trivia IMO

[Matt Biedronski @Gonski47]

Wrote a blog on CVE-2023-5830 which is a critical (CVSS 9.8) security vulnerability in ColumbiaSoft's Document Locator. Shoutout to @micahvandeusen
for the help on this! Link to Nuclei template provided in the blog.

https://t.co/nQRcdj0vz3

[HHHHarshil @hhhharshil]

@s1zzzz > Discord Mod

[John Hammond @_JohnHammond]

CVEs!!! 🤩
CVE-2024-1708 and CVE-2024-1709 assigned for the #ScreenConnect vulnerabilities.

.... and ah, the words 'affected from version 0' are pretty brutal 😅😅

[HHHHarshil @hhhharshil]

With the release of the PoC's by @watchtowrcyber and @HuntressLabs, I have created a nuclei template to help identify any instances of ScreenConnect that may be vulnerable to the authentication bypass.

thanks @s1zzzz for the idea 🤠

https://t.co/71c24Sp4Ux

#ScreenConnect

[HHHHarshil @hhhharshil]

A more refined query to find unpatched ScreenConnect instances would look like the following:

Server: ScreenConnect -"ScreenConnect/23.9.8.8811"

Direct link: https://t.co/b5wP8bN1dm

#ScreenConnect

[Hunter @HunterMapping]

🚨Alert🚨Critical Flaws Found in ConnectWise ScreenConnect Software
⚠ConnectWise has released security updates to address critical RCE vulnerability in its ScreenConnect remote desktop and access software.
📊 17.3K+ Services are found on the https://t.co/ZkWaUVRSkG
🔗Hunter:https://t.co/SZPwUW0K7v
Dorks 👇👇👇
Hunter: https://t.co/yFFcJwegJK="ConnectWise ScreenConnect software"
FOFA: app="ScreenConnect-Remote-Support-Software"
Shodan: http.title:"ConnectWise ScreenConnect"
📰Refer to https://t.co/6ZKXt4sTNy
#ConnectWise #hunterhow #infosec #infosecurity #Infosys #Vulnerability

[HHHHarshil @hhhharshil]

@Rhynorater @ctbbpodcast 👀

[HHHHarshil @hhhharshil]

@0xr0BIT @zeropointsecltd @_RastaMouse @xct_de @k0zmer @vulnlab_eu @Pzz02 Congrats!

[Ru Campbell @rucam365]

Entra ID Protection (previously Identity Protection) could have stopped many incidents I’ve worked before they even started. But there are gotchas and misconceptions that can catch you out.

Check out my five of these, and share any others you’ve got! https://t.co/YwWwH3TnCl

[s1zz @s1zzzz]

Discovered and exploited an arbitrary file delete vulnerability that lead to SYSTEM level privileges.

Thanks to the goat @filip_dragovic.

[HHHHarshil @hhhharshil]

@Gonski47 VENVS

[HHHHarshil @hhhharshil]

@BadAt_Computers Goated

[HHHHarshil @hhhharshil]

@bxmbn Great read! Love the use of wayback machine to hunt for endpoints.