md5_salt

[md5_salt @md5_salt]

It seems Google App Engine can be used for domain fronting. https://t.co/EyoEcqr6XK

[houston @hhopk]

@md5_salt But this works.. : curl -H "Host: https://t.co/HJbIF3m0IW" https://t.co/vi4RtrHeOi | grep title :::: both on GCP

[md5_salt @md5_salt]

@hhopk Oh, because you don't have a valid https cert in the AnyCast ip. You can use AnyCast do http fronting but not https.

[md5_salt @md5_salt]

👍

[Imagemlt @Imagemlt1]

@md5_salt https://t.co/6Bqm6NRXGK
Actually without XSS we can make hackmd-desktop popup Calculator too.

[md5_salt @md5_salt]

Here are the details, hope you like it! https://t.co/BxgRDkcsmQ

[md5_salt @md5_salt]

We can get your cookie. We can pop up calculator. We use the same exploit. We will talk about attacking desktop apps @defcon . See you at Vegas! @Hearmen1 @T0m4to_

[md5_salt @md5_salt]

@mabin004 ddw

[md5_salt @md5_salt]

Cheers for the calculators!

[md5_salt @md5_salt]

Aha, ranked #1 on the list

from the bottom 👻

[Microsoft Security Response Center @msftsecresponse]

It's that time of the year! We unveiled MSRC’s 2018-2019 Most Valuable Security Researchers at Black Hat USA this morning. If you cannot make it to the Microsoft booth, check out the list in our blog. Congratulations and thank you!
https://t.co/dL1u1iuiLz

[md5_salt @md5_salt]

@D1iv3 @T0m4to_ @qwertyoruiopz @vngkv123 弹计算器了！

[md5_salt @md5_salt]

@CodeColorist dlddw

[md5_salt @md5_salt]

We can get your cookie. We can pop up calculator. We use the same exploit. We will talk about attacking desktop apps @defcon . See you at Vegas! @Hearmen1 @T0m4to_

[md5_salt @md5_salt]

@l4wio thanks! ୧( "̮ )୨✧ᐦ̤

[md5_salt @md5_salt]

@l4wio @defcon @Hearmen1 @T0m4to_ this xss not, but we use libcef's feature to exploit a note app on windows 😁

[md5_salt @md5_salt]

learned my first php disabled_functions bypass there

[Omar "Beched" Ganiev @theBeched]

We're about to shut down one of the most under-estimated resources about hacking (mostly web app and *nix kernel) -- https://t.co/n8ypz83gYS forum. Twitter folks still often reinvent stuff posted there years ago =)
Announcement: https://t.co/kiRM1UYCQc

[md5_salt @md5_salt]

@1x2Bytes @Hearmen1 @T0m4to_ 可以参考这个 https://t.co/Iac2WZ060z

[md5_salt @md5_salt]

Here is the Ghidra RCE ;) @Hearmen1 @T0m4to_ https://t.co/7zMLkjPULQ

[md5_salt @md5_salt]

@goabout21 @Hearmen1 @T0m4to_ 我先生成了一个工程，然后改的文件

[md5_salt @md5_salt]

@goabout21 @Hearmen1 @T0m4to_ 这里报的错是找不到工程，要么是打开的文件不对，要么是工程没生成好吧

[md5_salt @md5_salt]

@hi_ztz ztz ddw

[md5_salt @md5_salt]

@goabout21 @Hearmen1 @T0m4to_ 利用 XXE 漏洞发送 HTTP 请求都没成功？

[md5_salt @md5_salt]

@F_kZ_ @ronindey @Hearmen1 @T0m4to_ we use a xxe bug and some java features to perform a smb relay attack. you may like this https://t.co/MpqI61xGER