me2nuk

Korea University Sejong Campus, CTF Web Player, KITRI BOB 11th, @TeamH4C__

[me2nuk @me2nuk]

@ngnicky 들어보면 문제에 힌트도 많이 제공하고, 내부망으로 하는거라 AI 쓰더라도 핸드폰 사진 찍어가면서 하지 않았을까 싶네요. 난이도도 일반인이 풀 수 있는 정도였다고 합니다 (IT, 정보보안팀 제외)

[non aesthetic things @PicturesFoIder]

the art of noticing

[Plain @0xp1ain]

This is a new web hacking research team that I am currently lead. Our team is publicly recruiting new researchers to join our activities!

If you are interested in participating, please click the link below for more detailed information!

https://t.co/wMk4gcV4qI

[Oliver Sild @OliverSild]

In December, @patchstackapp got rejected as a sponsor from WordCamp Europe. We've sponsored both #WCEU24 and #WCUS24 and never had an issue. We at first didn't even get an explanation to why this decision was made, but today we finally received the official statement that we don't contribute enough, and once "significant contribution have been established" they are happy to re-evaluate our eligibility to sponsor WordPress events (so it's not just about WCEU).

Quick 🧵 about @patchstackapp contributions to the WordPress project.

[Lupin @0xLupin]

With Snorlhax we just received a $50,500 bounty for a Software Supply Chain attack 🔥

We've of course asked to start a coordinated disclosure process to be able to write an article about this super cool attack vector !!!

We have so many articles pending 😉

[JS0N Haddix @Jhaddix]

Ooh I like this game!

In a similiar "regex github" style...

SSRF:

/file_get_contents\(.*\$_GET|curl_exec\(.*\$_GET/

/(subprocess|exec|spawn|system).*chrome.*--headless/

WIP

[Haifei Li @HaifeiLi]

Interesting! I didn't know @morphisec found a bypass of our #MonikerLink bug (CVE-2024-21413) on Outlook (https://t.co/vkO4yA5sYX), resulting in CVE-2024-38021 patched in July.

https://t.co/JkQJ9WIjeR

[me2nuk @me2nuk]

@ainsetin 귀엽네?😋

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚀 $1000 due to improper input validation leading to CPDoS.

🧾 Credit : Santika Kusnul Hakim

Tips: just add one of below under Host (header)
1) ":1
2) \:1
3) ?:1
which are not including in RFC7320's rule.

💥If the response like 400 Bad Request or 403 Forbidden, but below of it appears X-Cache: HIT or X-Cacheable: YES, it means possible to cache poisoning to DOS.

[Will Gates @WllGates]

url/?f=etc/passwd ==> 403
encode etc/passwd as base64

url/?f=L2V0Yy9wYXNzd2Q= ==> 200

credit: @HackingTeam777

#BugBounty

[N$🌟 @__nav1n_]

Successfully done with early morning hunt - A directory traversal bug in a private Intigrity program.

Payload: /****/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd
#BugBounty

[Brut 🇮🇳 @wtf_yodhha]

🚨Don't forget to add this on your wordlists!

#bugbounty #bugbountytips

[N$🌟 @__nav1n_]

This is the quickest RCE I've ever gotten.

The app has a popup for multi-selection fields. I intercepted the request, expecting XSS or SQLi, but found that the parameter **_session_name= can be exploited to get an #RCE as a surprise.

Payload: `&**='.print((`id`)).'` #BugBounty

[Sanyogg Shelar ✨ @sanyog]

"Excited for this cool security session at #WCAsia! Join MinUk Kim and SHEN YI TING as they share valuable insights on WordPress security. Don't miss out on this knowledge-sharing opportunity! #WordPress #Security" @me2nuk

[Тsфdiиg @tsoding]

Rust has the weirdest Boolean type among all the languages I've tried. (And I've tried a lot of languages). Who tf thought it was a good idea to call it Result<(), ()>? How does that make any sense?

[ch @chybeta]

CVE-2023-46747 request smuggling to RCE

[Daniel Lee @dylayed]

구글 안드로이드팀 내부에서 사용하고 있는 Rust 강의가 오픈소스 되었다!

"Rust in Android", "Bare-metal Rust", "Concurrency-in-Rust" 세가지 수업으로 구성되어있는데, 신기하게도 한글어로 번역이 이미 되어있다!

[Jayesh Madnani @Jayesh25]

🕵️‍♂️Here's another secret no one will tell you about: A Simple WAF Bypass for Stored XSS that has earned me $$$$💰 so far!

Stored XSS issues can fetch you rewards ranging from $500 to $7500, depending on the program.

WAFs can pose significant challenges when hunting for Stored XSS vulnerabilities, but this simple trick can help you bypass them. By adding 'Content-Encoding: any_random_text' to the request header, you can deceive some WAFs, allowing your payload to slip through undetected. Enjoy the hunt! #bugbounty #securityTips #ethicalhacking #WAFBypass #hackerOne #bugcrowd #bugbountytips

[Chris Ohk @utilforever]

9월부터 진행할 Rust로 컴파일러 만들기 강의 저장소입니다.
https://t.co/iO5wG8Ayf6

[Renwa @RenwaX23]

@intigriti The SVG-use one doesn't require user interaction

<svg><use href="data:image/svg+xml,<svg id='x' xmlns='https://t.co/E3MV1DNEkj'><image href='1' onerror='alert(1)' /></svg>#x" />