KERRO

OffSec CTF (REV/PWN) @the3000org

[xyzeva @xyz3va]

how to hack discord, vercel and more with one easy trick

https://t.co/jqGWp5KDP6

[adam @theCTO]

the person who discovered the #react2shell vulnerability should get paid $1m

[0b1d1 @_0b1d1]

CloudRip Fast Cloudflare bypass scanner

Find real server IPs behind Cloudflare by scanning subdomains. Multi-threaded for speed, skips Cloudflare-owned IPs, supports custom or built-in wordlists, and exports results. Built-in rate limiting to avoid getting blocked
REPO ⤵️

[Aurélien Chalot @Defte_]

I have seen lot of stupid things lately concerning CS, EDR's and Windows drivers. I wrote a, not so bad I guess, long blog post explaining how to build a windows driver, why EDR's need them, and how EDR's work, might be helpful 🤪 https://t.co/04DKlBIcXo

[Hussein Daher @HusseiN98D]

And we're live! https://t.co/j9JEdai5FF
Google ✅
Bing ✅
Baidy ✅
DuckDuckGo ✅
Yahoo/AOL ✅
CLI Tool ✅

Take your dorking to the next level, all feedbacks are appreciated! <3
#bugbounty #infosec #dork #dorking #seo #automation

[reverseame @reverseame]

BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution https://t.co/nx2E1qzZuC

[n0s @n_zero_s]

I am thrilled to share my first two CVE assignments CVE-2023-50694 and CVE-2023-50693 for discovering HTTP request smuggling vulnerabilities in HTTPbeast and Jester, both written in Nim language.
https://t.co/ePiNCnIWpi
https://t.co/f2kwHIKuq6

[HackerAI @PentestGPT]

You can now discover subdomains with HackerGPT.

[KERRO @KERRO__]

@SuperFashi1 :o

[Saif @wr3nchsr]

I published a new blog post about how I chained two vulnerabilities I found in Huawei NetEngine AR617VW to achieve post-auth RCE
https://t.co/6d5HTKuitw

[raptor @0xdea]

Your printer is not your printer ! - Hacking Printers at Pwn2Own by @d3vc0r3

https://t.co/LDVPfTaA3Y

https://t.co/FK7pfknwR3

https://t.co/8A2HsEuaYC

[Kim Jong Un ( Parody ) @KimJongUnArabic]

We stand with Gaza

[mav @MavLevin]

Per popular demand, here are my 30 reversing tips all together in one blog post 🤩
https://t.co/4yesbejh41

[pepsipu @pepsipu]

new ctf tactic for pwners: a flexible arbitrary write -> rce primitive that doesn't rely on the linker, io objects, or malloc.

it's in how your program chooses between SSE or AVX when doing a memcpy!

https://t.co/7Caao6nzUZ

[Calle Svensson @ZetaTwo]

Like many others, I'm very excited for #37C3. It does however seem like there will be no #CTF this time. We did some brainstorming in the CTF Discord and came up with the idea of a "CCC Potluck CTF". Please read about it and potentially contribute: https://t.co/bpuMHkvIU1

[Ahmet Bilal Can 🦔 @0xabc0]

@Farenain @yates82 @vector35 api is amazing, lifting new arch is sooo simple with binary ninja. I'm currently lifting vm based obfuscation, following @samrussellnz amazing blog series https://t.co/lWCSoPJGuv

[Justin Gardner @Rhynorater]

@RahmatQurishi @zseano Google has a built in Open Redirect you can chain:
https://google[.]com/amp/s/poc.rhynorater.com