Marek Geleta

[Marek Geleta @marek_geleta]

I just published my first blog post - SSRF via DNS rebinding
https://t.co/bLmWPloQ9k

#BugBounty
#NETSEC
#CyberSecurity
#ssrf
#dns_rebinding

[Marek Geleta @marek_geleta]

🚨 PoC for CVE-2024-48990 Local Privilege Escalation Released 🚨

I've published a PoC for CVE-2024-48990, a local privilege escalation vulnerability in `needupdate` (pre-installed in Ubuntu Server 21.04+)

https://t.co/H4Q0FbetJd

[Marek Geleta @marek_geleta]

@intigriti https://t.co/4GSvYJDEqM to cut down 3 more chars :d

[Marek Geleta @marek_geleta]

@intigriti JS on controlled web:

https://t.co/mwhKg1JuwI='alert(document.domain)'

window.location=`http://vulnerable_.com/?<iframe/srcdoc="<a/id=debug%20href=g:eval(https://t.co/1z6D1qBoAl)><script/src=easy-eval.js></script>">`

[Marek Geleta @marek_geleta]

This is amazing!

[Kamil Vavra @vavkamil]

WordPress Plugin Update Confusion
https://t.co/KD5Ozloi9b

[Thomas Orlita @ThomasOrlita]

Overview of different vulnerabilities in Google's new web-based collaboration tool Threadit:
XSS, Clickjacking, ACL bypass, Info leak...

#BugBounty #InfoSec

https://t.co/m3dIaHsS77

[publiclyDisclosed @disclosedh1]

Kubernetes disclosed a bug submitted by @javierprovecho: https://t.co/Fizur9VpQe - Bounty: $1,000 #hackerone #bugbounty

[Jan Masarik @s14ve]

🎉 We've finally released my blog, which is now kinda redundant to an excellent Defcon talk by @matter_of_cat and @InsecureNature.

Luckily, there are a few additional bits of information there, so if you're interested in GCP Security, check it out!

https://t.co/N9mNSmIw0r

[Marek Geleta @marek_geleta]

@bugpoc_official Solved it but I can't get it to work from https://t.co/8B7vBuNSxB :/

[Marek Geleta @marek_geleta]

@h43z Solved! :D

[Osama Avvan @osamaavvan]

I just published Exploiting WebSocket [Application Wide XSS / CSRF]
https://t.co/4SR3JaoQrV

#bugbountytips #security @Bugcrowd

[Marek Geleta @marek_geleta]

Just published a new BugBounty writeup.
Go check it out!

https://t.co/6sgDqZqHGF

#bugbounty #cybersecurity #writeup

[Thomas Orlita @ThomasOrlita]

Getting all 32000 email addresses of every registered user on https://t.co/FewfIcLHkq’s Crisis Map thanks to IDOR and incremental IDs.

#BugBounty #InfoSec

https://t.co/6WFF5eLPZL

[Marek Geleta @marek_geleta]

New version of https://t.co/55IZ1ga9CX is live! AAAA, CNAME support and much more. Go check it out!
https://t.co/pSQeGG92gw

[Marek Geleta @marek_geleta]

@shodanhq Any news?

[Marek Geleta @marek_geleta]

@0ktavandi The blind ssrfs thing really depends from target to target. Sometimes you might just be able to enumerate internal ports and sometimes you can even get rce but it really depends and it's probably much harder to exploit than "classic" ssrf

[Marek Geleta @marek_geleta]

I just published my first blog post - SSRF via DNS rebinding
https://t.co/bLmWPloQ9k

#BugBounty
#NETSEC
#CyberSecurity
#ssrf
#dns_rebinding

[Marek Geleta @marek_geleta]

@LooseSecurity @KeybaseIO works pretty well https://t.co/FJUq1M1FmW

[Marek Geleta @marek_geleta]

@shodanhq Well @shodanhq.... It didn't go well 😕