Indonesian Coder ®

Indonesian Coder

[Hacking Articles @hackinarticles]

Python in Networking

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #cybersecuritytips

[Gwendal Le Coguic @gwendallecoguic]

More than 100 tools added last week on https://t.co/VNW5mB3cu4
Thanks to the contributors, we will make it big!
#bugbountytools

[Sexcurity | Make love, not war! @s3xcur1ty]

Effectively Obtaining .ipa Files for iOS Pentesting from the App Store - @petruknisme

https://t.co/1OcgEyPPYC

#InfoSec #CyberSecurity #Security #iOS #ipa #MacOS #Pentest #BugHunting

[Md Ismail Šojal 🕷️ @0x0SojalSec]

CVE-2022-36804
1.find open repo
cat hosts | httpx -follow-redirects -title -path /repos?visibility=public -match-string "repository-container" -threads 9500
2. check if it vulnerable in response
''is not a valid ref and may not be"
3. hack it :)
credit by :@notdls

#bugbountytip

[Cyber Detective💙💛 @cyb_detective]

https://t.co/5sPf74H9NG

A large collection of different Google Dorks lists: gaming, carding, shopping, crypto, admin panels, sql-dorks and many others.

Contributor @anonymansz81 🇮🇩

#cybersecurity #pentest

[Hack The Box @hackthebox_eu]

The doctor's in! 💉
Ready to learn how to exploit #NoSQL injection vulnerabilities in @MongoDB?
Start your learning with the brand new [Tier III] Module on #HTBAcademy: https://t.co/bgnt6iCSUU
#HackTheBox #CyberSecurity #Hacking #InfoSec #MongoDB

[Indonesian Coder ® @indonesiancoder]

High Order Side-Channel Security for Elliptic-Curve Implementations. 🫰🏽

[Jas502n @jas502n]

#CVE-2022-39197 Cobalt Strike RCE =< 4.7

use codeql to search exploit chain from the database compiled by openjdk and cobaltstrike4.5 db

org.apache.batik.swing.JSVGCanvas#setURI
org.apache.batik.bridge.BaseScriptingEnvironment#loadScript

[Petrus Viet @VietPetrus]

I have successfully reproduced CVE-2022-43781 causing RCE on Bitbucket server.

Ref: https://t.co/6zwUokvK0a

[b1ack0wl @b1ack0wl]

I've finally completed part 1 (of 2) of my analysis and exploitation of an uninitialized pointer vulnerability affecting certain TP-LINK routers. I hope you all enjoy ♥️

https://t.co/1EWJzNuSun

[Joseph Thacker @rez0__]

Yo, another fun #bugbounty use-case for #chatgpt

[sw33tLie @sw33tLie]

jq doesn't scare me anymore. OpenAI can make rules for it. #bugbounty

[Indonesian Coder ® @indonesiancoder]

Beberapa Kerentanan telah ditemukan pada aplikasi Airtel Android.

Sc: https://t.co/hfrht4p2Vp

[payloadartist @payloadartist]

Tired of writing long pentest reports?

Try ChatGPT 🤯

#Pentesting #infosec #cybersecurity #bugbounty

[Indonesian Coder ® @indonesiancoder]

Critical RCE Vulnerability Affecting Quarkus Java Framework. CVE-2022-4116 (CVSS score: 9.8)

Quarkus dikembangkan oleh Red Hat, adalah proyek opensource yang digunakan untuk membuat aplikasi Java dalam lingkungan yang terkontainer dan tanpa server.

[Youstin @iustinBB]

I'm excited to release the first version of a context-discovery tool I've been working on. https://t.co/4d7IEAvk7z - Chameleon can automatically detect the technologies running on a host and adapt to a calibrated wordlist.
https://t.co/VIMWwvmDxm

[sw33tLie @sw33tLie]

Has anyone ever compared gau/waybackurls vs https://t.co/4d2zjzbY6P? #bugbounty @hacker_

[Indonesian Coder ® @indonesiancoder]

Bug RCE kritikal di aplikasi keyboard Android dengan 2 juta unduhan.

- CVE-2022-45477
- CVE-2022-45478
- CVE-2022-45479
- CVE-2022-45480
- CVE-2022-45481
- CVE-2022-45482
- CVE-2022-45483

[VulDB 🛡 @vuldb]

[Exploit] Some new exploits were added for CVE-2022-44038, CVE-2022-44037 and CVE-2022-43326 https://t.co/9vWamz8qNB #exploit #exploits #poc

[Sam Curry @samwcyo]

More car hacking!

Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car.

Here's how we found it, and how it works: