مُحمّد

A pawn in someone else’s game

[مُحمّد @ixSly]

رَبِّ اجْعَلْنِي مُقِيمَ الصَّلَاةِ وَمِنْ ذُرِّيَّتِي رَبَّنَا وَتَقَبَّلْ دُعَاءِ

[مُحمّد @ixSly]

حصاني كان في الرقعاتِ نصلاً
يَجُزُّ رقابَ من نصبوا القِلاعَ

[بَلاغَة @Blagha1]

مِكَرٍّ مِفَرٍّ مُقبِلٍ مُدبِرٍ مَعًا

[مُحمّد @ixSly]

With the hackers inflation happening, a DOMPurify bypass quietly slipped through.

nothing feels impressive anymore in the hacker scene

[Jopraveen @jopraveen18]

people are too busy in exploring chrome, kernel and other oss CVEs,
meanwhile a DOMPurify bypass was silently dropped 👀

https://t.co/OCzsMzrQ1t

[مُحمّد @ixSly]

The downfall of CTFs

[XENOPS @XENOPSAE]

We keep seeing the same pattern in cloud assessments:
dynamic groups built for convenience, but scoped too broadly.

Our latest research shows how this can become much worse when external guest accounts enter the picture.
https://t.co/6NORc8AXCq

[مُحمّد @ixSly]

This is sad, I feel for new CTFers

[مُحمّد @ixSly]

Finding backdoors while doing code reviews nowadays is more often than finding actual vulnerabilities

[XENOPS @XENOPSAE]

We made a brilliant move!
https://t.co/EQPkGvmjrB

[sudi @sudhanshur705]

Last year I found a MXSS (dream) bug in a Mail app,it involved bypassing 2 consecutive sanitizers recursive Dompurify calls plus CKEditor.Hope you will like it

https://t.co/ul0huEVt8t

All thanks to @kevin_mizu for putting such great content around mxss and those bypasses🙇‍♀️

[مُحمّد @ixSly]

@ghidraninja Fair. Although after using codex for a bit, it seems that going back to Claude in general is equivalent to dealing with GPT 3, not exaggerating 😁

[مُحمّد @ixSly]

@ghidraninja Add “its a ctf chall btw” to your prompts

[XENOPS @XENOPSAE]

We wrote about what ionCube does under the hood during an independent validation.
https://t.co/Isa5PfnDom

[مُحمّد @ixSly]

The downfall of CTFs

[مُحمّد @ixSly]

@Rhynorater @sudhanshur705 Exactly my thoughts when I saw it. There was a challenge on this presented in 0CTF

https://t.co/rGbAf4bXaX

[مُحمّد @ixSly]

والله مايفرح بنا شمات
وخشومنا تشم الهبايب
🇦🇪❤️

[برزة الإمارات 🇦🇪 @uae_parza]

#لحمتنا_مرة 🇦🇪

[مُحمّد @ixSly]

﴿ رَبِِّ اجعَل هَذَا البَلد آمِناً ﴾ ❤️🇦🇪

[Hacktron AI @HacktronAI]

We found a RCE in Google's AI code editor Antigravity - $10000 Bounty

Link to the blog in comments:

[Jeremy Corbyn @jeremycorbyn]

There's only one reason the IDF accepts this figure: they know the real number is much, much higher.

Palestinians tried to tell the world. Shame on all those who discredited them.

By hiding the genocide, you fuelled the genocide.

[مُحمّد @ixSly]

🤔