Murat

Pentester | OSCP | eWPTXv2 | Master of Computer Science

[Murat @manfromkz]

I've found an SSRF vulnerability in the Tumbler plugin for XFCE that works by default in the latest Kali Linux, Debian XFCE, etc.
https://t.co/jI09j12raf

#xfce #kali #debian #ssrf #security #exploit #linux

[Murat @manfromkz]

I've found several vulnerabilities (CVE-2022-29938, CVE-2022-29939, CVE-2022-29940) in LibreHealth EHR 2.0.0.

Write-up:
https://t.co/O8qcwp7FLE

#security #zeroday #librehealth #exploit #poc

[Murat @manfromkz]

Details of Spring4shell were published. No patch. 2022, please, stop!

https://t.co/cViKHJ6fh4

#exploit #0day #CyberSecurity #rce #java #spring

[Murat @manfromkz]

Опять проблемы с принтерами у Microsoft. Опубликован эксплойт (не проверял) на CVE-2022–22718, который позволяет поднять права до SYSTEM и добавить нового администратора. Base score по CVSS 8.3 из 10.

https://t.co/x687FEVVgk

#exploit #microsoft

[Murat @manfromkz]

It looks like 2022 will be tough one.

#log4shell #log4j #exploit #cybersecurity #polkit #pkexec

[Murat @manfromkz]

Всем, у кого версия Moodle с 3.11 по 3.11.4, нужно срочно обновиться. В сети гуляет эксплойт, который позволяет получить доступ к базе данных (SQL-инъекция). Отмечайте IT-отделы университетов.

#moodle #security #exploit

https://t.co/ooRdBFxTWn

[Murat @manfromkz]

Мы победили в третий раз подряд на The Standoff 365!

#standoff #infosec #phdays #ctf #codeby #nitroteam

[Murat @manfromkz]

Когда я говорю, что работаю в сфере информационной безопасности, многие думают, что я охранник. Это все что вам надо знать про cybersecurity awareness в народе.

#иб #инфосек #Awareness #CyberSec #zeroday

[Murat @manfromkz]

A lot of companies in 2021 be like

#ransom #ransomware #pentest #2k21 #security

[Murat @manfromkz]

Update on https://t.co/i2Ieg9nq6r

@MITREcorp assigned CVE id - CVE-2021-34187 :)

[Murat @manfromkz]

Found an unauthenticated SQL injection in Chamilo LMS. Thanks to @chamilonoticias developers, the vuln was fixed quickly! But unfortunately @MITREcorp is ignoring me, and yet didn't assign CVE id for this :(

Details at https://t.co/zEsIe8iwzI

#research #security #chamilo #mitre

[Murat @manfromkz]

The only IT / InfoSec / *OPS open conference in Kazakhstan without advertising and vendors is coming (2 weeks left). Interesting reports from experienced specialists. Hurry up to register (at https://t.co/jIBwPDM9V0)!

#sysconf #security #cybersecurity #opensysconf #Almaty

[Murat @manfromkz]

Found an unauthenticated SQL injection in Chamilo LMS. Thanks to @chamilonoticias developers, the vuln was fixed quickly! But unfortunately @MITREcorp is ignoring me, and yet didn't assign CVE id for this :(

Details at https://t.co/zEsIe8iwzI

#research #security #chamilo #mitre

[Murat @manfromkz]

@KumarKandarp @eLearnSecurity What's good in this certification, that whole things related to the WEB only! But, if you are new on cybersecurity, I recommend you to start with eJPT.

[Murat @manfromkz]

Now I am an eWPTX2!
The exam was exciting! Thanks to @eLearnSecurity for the opportunity to test my knowledge under extreme conditions!

#elearnsecurity #ewptx

[Murat @manfromkz]

@Captain33011 @offsectraining Hi! Just buy VIP account at @hackthebox_eu before buying OSCP course. Solve 1-2 machines per day. Then, after 8-12 months, you can buy OSCP course. Also google "OSCP mindmap" and "OSCP cheat sheet". Hope I helped you :)

[Murat @manfromkz]

Received my certificate :-)
Thanks to @offsectraining for such breathtaking challenge!

#tryharder #cryharder #oscp

[Murat @manfromkz]

Вторая часть статьи о победе на The Standoff 2020

https://t.co/xm2SKkFVr2

[Murat @manfromkz]

CVE-2020-29139, CVE-2020-29140, CVE-2020-29142, CVE-2020-29143.
Found multiple SQL injections in OpenEMR 6.0.0-dev, 5.0.2(5).

https://t.co/QOykd6ib30
https://t.co/MynuszhGEl
https://t.co/lE48BqcpjK
https://t.co/IghSZgeBtB

Thanks to @OpenEMR for the quick response and fixes!

[Murat @manfromkz]

My old review about PHP backdoors

https://t.co/R2uQBm8jcr

[Murat @manfromkz]

Wrote a short note on Yii2 CRUD safety

https://t.co/57mjZIm8nG