ibrahim khorwat

netpysec

[ibrahim khorwat @ibrasec01]

@rez0__ the owner of the system forgot to make his entire VPS publically accessible (No ACL)

[ibrahim khorwat @ibrasec01]

@rez0__ Back in 2018, I remember investigated Monerominer script consuming a large amount of resources on a VPS. I followed a series of ps aux and pgrep commands to identify the script's name and location. At that time, the VPS was running SSH and a web application built with Node.js.

[ibrahim khorwat @ibrasec01]

@IntCyberDigest Yikes!

[ibrahim khorwat @ibrasec01]

@Modam3r5 وجعت قلوبنا يا مراد

[ibrahim khorwat @ibrasec01]

@valgrindctf @hackthebox_eu Congrats 🎊
You crushed it! can you share which AI model did you use during this journey

[ibrahim khorwat @ibrasec01]

@bri8trose @grok بعيدا عن التحيز لأي من طرفي الجدال... هل يوجد أي تقرير علمي دقيق يؤكد خطورة الموجات الصادرة من أبراج ال 5G

[ibrahim khorwat @ibrasec01]

@xssdoctor @Jhaddix 😍Awesome!... Any BlackFridays ?

[ibrahim khorwat @ibrasec01]

@linkersec @noperator Definitely worth spending some time on it

[ibrahim khorwat @ibrasec01]

Just discovered the Chrome’s built-in Task Manager
Shift + Esc

[ibrahim khorwat @ibrasec01]

@LiveOverflow انتقاد منطقي

[ibrahim khorwat @ibrasec01]

@alsaaa24 لا أحد في مأمن من هجمات القراصنة... الأمن السيبراني لا يعترف بالاستثناءات

[ibrahim khorwat @ibrasec01]

@Fxmmf ما شاء الله تبارك الله،
هل إعادة المحاولة مجّانية ؟

[ibrahim khorwat @ibrasec01]

Had an amazing time solving the Mobile App CTF challenge by https://t.co/Ir3YH9wRix at BlackHat MEA!🚀
Big thanks to @JordiVenta for organizing this fantastic experience.
Build38 specializes in securing mobile code against reverse engineering & tampering.
https://t.co/vx7xuy2fAU

[ibrahim khorwat @ibrasec01]

Truly enjoyed @FilipiPires session at #BlackHatMEA on 'Horusec: Keeping Your Code Safe During the Development Path' A valuable discussion on integrating security into the development lifecycle!"

[ibrahim khorwat @ibrasec01]

Just discovered a mobile app using OpenAI for customer support with its API key exposed in a config file! 😬 Double-checked via Colab, and it's confirmed.

How do you secure your AI integrations? Share your experience!
#CyberSecurity #AI

[ibrahim khorwat @ibrasec01]

سبحان الله وبحمده
وادي أولاد شكر - زليتن - ليبيا
انتعش وصار مروجا خضراء
#Libya

[SinSinology @SinSinology]

🔥💀 Here is the "Real" writeup and exploit for the
pre-auth deserialization RCE I reported to Ivanti
CVE-2024-29847
Apparently, folks at horizon3 tried to write about my bug before me but they did it wrong
https://t.co/Df8lIDYNRH

[ibrahim khorwat @ibrasec01]

@Synacktiv In

[ibrahim khorwat @ibrasec01]

@Synacktiv .