Juan

NULL Life CTF Team member

[Juan @itsecurityco]

@bef0rd & myself have exploited the Path Traversal and RCE in the latest patched version of Apache (2.4.50). We recommended to upgrade ASAP to the new version 2.4.51.

Security report: https://t.co/ni8hoaPqdc

CVE: 2021-42013

#security #apache #apache24 #0day #CVE202142013

[Nina @HeyNina101]

Stanford just did something wild. They put their entire graduate-level AI course on YouTube. No paywall, no signup. It’s the exact curriculum Stanford charges $7,570 for ❱❱❱❱ watch free now

[Juan @itsecurityco]

@R3nnix hola! ¿Qué tal? ¿estas láminas con las instrucciones están disponibles? No alcancé a tomarles foto y quería ver el material para intentar hacer los otros desafíos post eko.

[Juan @itsecurityco]

@IVANGOMEZDELEOM Viví algo muy similar años atrás, lo solucioné con una buena abogada que tenía bastante experiencia tratando temas cómo estos. Espero todo mejoré pronto 💪

[Juan @itsecurityco]

@WebSecAcademy Hi, are the client side labs working as expected? I have tested 2 of them and they don't seem to work: the first one for CSRF and the last one for CORS. The wiener account is hacked fine with my payloads but the victim account is not. Ty.

[Juan @itsecurityco]

I'm glad you were amused by the joke :). It has truly been a privilege to meet you Dr. @jordanbpeterson. Thanks for all your teachings, both from your books & psychology readings on YouTube.

[Juan @itsecurityco]

@housecor From a security point of view pre-commit can be used to prevent leakage sensitive information in your commits. For example, hardcoded credentials, PII data.

And you can’t just delete it later, because it will still be leaked in the commit historical.

[Juan @itsecurityco]

@Capitan_Alfa Y que importa si es o no… QUEMA LA CASA!

[Juan @itsecurityco]

@jordanbpeterson Hola Dr. Peterson. What to look for when choosing a university to study psychology? Thank you.

[Juan @itsecurityco]

@mazen160 But SAST tools does the same. It would be great to test with others vulnerabilities when you can’t detect them with regex and patterns. Example: IDOR.

[Kurtis Hanni @KurtisHanni]

Becoming a reader has been the most important habit I’ve developed over the last 10 years.

Here are my 13 favorite hacks to read a book a week:

[Jack Halon @jack_halon]

Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.

Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! https://t.co/bbFjOOzlOu

[Juan @itsecurityco]

@DragonJAR Qué tal funciona Docker?

[Juan @itsecurityco]

Vulnerable banking application to learn and practice OWASP A01 🎓 https://t.co/wSWmyODR0N

[Juan @itsecurityco]

@sudochmod4777 @RandoriAttack @springframework It also returns false positives for patched version of Tomcat: WebappClassLoaderBase.getResources() disabled.

8080: vulnerable
9090: patched

[Juan @itsecurityco]

Check out my latest article: Docker PoC para el CVE-2022-22965 (Spring4Shell) https://t.co/o0G1rZTgPX via @LinkedIn

[Juan @itsecurityco]

@SoyUCN Buenas, con los nuevos cambios no se puede acceder a Cavi.

[Juan @itsecurityco]

@sniferl4bs Sí, el tiempo todo lo cambia 💪

[Juan @itsecurityco]

@dark0pcodes 💯

[GitHub Security Lab @GHSecurityLab]

Congrats to the @sexy_allpacks for winning the 2021 EkoParty Advanced CTF and thanks to everyone who played!

Gracias @NullLifeTeam @ekoparty

[NULL Life CTF Team @NullLifeTeam]

Thanks for participating in the @ekoparty Advanced CTF 2021! Hope you enjoyed all the challenges and congratulations to the winners: @sexy_allpacks, SYPER de @certunlp, @rupcion. There is also a special mention to @cntr0llz and @fernetInjection! Thanks 👏! #Ekoparty #eko2021 #ctf