JSLirola

#Developer #BugBounty #Security

[JSLirola @jslirola]

Conseguido otro reconocimiento público en un salón de la fama por reporte de vulnerabilidades de seguridad, esta vez en eBay.

Espero que después de este vengan muchos más.

https://t.co/3ZebKX6S6M

[JSLirola @jslirola]

@fulldividends Great initiative! I hate all kinds of wristbands because of the lack of control over personal information, but with something like this, I might consider buying one if you release the app or share it in a repository. Does it work for all MG bands or only specific models?

[Luis Madero @_Y000_]

Xss payload + oncopy + set constructor + eval

<p/oncopy=eval("Set"+".constructor"+"('ale'+'rt"+"`_Y000!_`')()")>_Y000!_

#xss #payload

[John Hammond @_JohnHammond]

YEAH! Congratulations team!! Don't forget to grab that certificate!!

[Sergio de los Santos @ssantosv]

Buscamos devops. Si estás en Málaga, mejor. #empleo
https://t.co/EESLpDYHA6

[ƒɾ4η 🇪🇦🇧🇷🇨🇱🇩🇴 @0fjrm0]

Ginp: Un peligroso troyano suplanta las ‘apps’ de siete bancos españoles en Android.

Caixabank
Bankinter
Bankia
BBVA
EVO Banco
Kutxabank
Santander.
https://t.co/jmXIRv4bqR

[Somdev Sangwan @s0md3v]

Shodan membership for $1!

It's Shodan's 10 year anniversary, grab the offer while you can.

Here: https://t.co/ta595cYeKj

[The Hacker News @TheHackersNews]

😬Oh c'mon!

Someone hacked official site of #Monero #cryptocurrency project and quietly replaced legitimate #Linux + Windows binaries available for download with malicious versions designed to steal funds 💰 from the users' wallets.

Read more: https://t.co/S7zJnNxTXf

#infosec

[JSLirola @jslirola]

@es_ncl @hackiit_ugr @CanalUGR @guardiacivil ¡Equipazo!

[Hackiit @hackiit_ugr]

Nos hemos clasificado para la fase final de la #NationalCyberleagueGC !!

Gracias @guardiacivil @es_ncl 👏🏻👏🏻

#PremiosNationalCyberLeagueGC

[The Hacker News @TheHackersNews]

CVE-2019-11043 🔥

A new RCE flaw in #PHP 7+ could allow attackers to hack sites running on #Nginx with php-fpm enabled on certain configurations—which is reportedly not uncommon.

Read Details ➤ https://t.co/coTu2lh1bK

➡️ PHP released patches
➡️ Researcher released PoC exploit

[Pentester Land @PentesterLand]

I am looking for a developer for a #blockchain project. It is rather urgent.
Please send a DM if you are interested or know someone who would be.
RT for visibility. Thanks!

[🅳🅴🅵🆂🅴🅲🅽🆂🅰🆃🆃🅰🅲🅺 @defsecnsattack]

Top 18 SQL Injection Exploitation Tools
SQLMAP
jSQL
Whitewidow
BBQSQL
DSSS — Damn Small SQLi Scanner
SQLiv
viSQL
SQLi Exploiter
NoSQLMap
jSQL Injection
AutoSQLi
Blisqy
SQL Nightmare
Blindpie
Quadcore Web SQLi Injector
Albatar
XPath
Blind SQL Bitshifting

[Florian Hansemann @CyberWarship]

HackBar plugin for Burpsuite 

#infosec #pentest #bugbounty
https://t.co/jdXdIiAvEg

[ProtAAPP - Protege las AAPP @ProtAAPP]

Si trabajas en la parte ofensiva de la seguridad, este repositorio te desborda!! https://t.co/vSMRLwf2kw

[JSLirola @jslirola]

@intigriti Recently in a private bug bounty program that belonged to the administrator account: "password" 🤦‍♂️

[/r/netsec @_r_netsec]

Understanding the full potential of sqlmap during bug bounty hunting https://t.co/9AQTcvNGfu

[Navaja Negra Conference @NavajaNegra_AB]

Ya tenéis los vídeos de las charlas de Navaja Negra 9 en formato individual. https://t.co/VAcOADltOQ #NN9ED

[JSLirola @jslirola]

Buen writeup del compañero @alvaroQ_ sobre uno de los retos del CTF de @navajanegra_ab de este año 👍

https://t.co/7s8NT52XRu

[Emad Shanab - أبو عبد الله @Alra3ees]

TotalRecon installs all the recon tools you need.

https://t.co/cxAuN7oqkU

[Emad Shanab - أبو عبد الله @Alra3ees]

Spartan: My Recon Automation.

https://t.co/5GYZkoXFrf