Mrityunjoy Biswas

Application Security Professional | Cobalt Core Lead & Pentester @cobalt_io | BugBounty Hunter @Hacker0x01 | Red Team Member (SRT) at @SynackRedTeam

[Mrityunjoy Biswas @mitunjoy11]

Thanks @Yahoo For The Bounty
you've made my day! :D
@Hacker0x01

[Cobalt @cobalt_io]

🚨#Pentester Spotlight: Mrityunjoy Biswas🚨
Discover how he turned his fascination with cybersecurity into a thriving career, earning recognition from top organizations and mastering cutting-edge tools and techniques. Check it out in our latest blog: https://t.co/0bIjtf9QKN

[The Hacker News @TheHackersNews]

🔒 New research reveals critical security risks for AI-as-a-service providers like Hugging Face. Attackers could gain access to hijack models, escalate privileges, and infiltrate CI/CD pipelines.

Details: https://t.co/e74f60mkLF

#technews #artificalintelligence

[Derin Eryilmaz @deryilz]

My first blog post! It's about CVE-2023-4369, a $10,000 bug I found in ChromeOS in July. The bug used a chrome:// URL XSS to allow Chrome extensions to execute privileged code and read/edit downloaded files without user interaction. 👀 https://t.co/jyxVEQqcXZ

[shubs @infosec_au]

Some really cool research on LLMs: https://t.co/mZF8T6amve

[Mrityunjoy Biswas @mitunjoy11]

A very useful article!

https://t.co/X86kZRjcyU

[23pds (山哥) @im23pds]

Chinese researchers Yu Chen and Yiling He recently published a study on how to brute-force almost any fingerprint-protected Android smartphone. They called the attack BrutePrint.
👇
https://t.co/X0mfgrcE8o

[0xor0ne @0xor0ne]

DJI Fly app and Mavic 3 firmware analysis and reverse engineering
Intro blog post by @nozominetworks

https://t.co/RGre2CFR4e

#dji

[shubs @infosec_au]

Last year, @Jhaddix, @bscarvell, @seanyeoh and I found a pre-auth RCE in Oracle Opera - CVE-2023-21932. This product holds the PII of every guest (including credit cards 😱). It's used by almost all of the big hotel/resort chains around the world. https://t.co/Gcb5xxJq7N - 1/4

[Mrityunjoy Biswas @mitunjoy11]

Checkout my SecurityStories at - https://t.co/jLr2rb01oZ
Thanks @harshbothra_

[Harsh Bothra @harshbothra_]

SecurityStories - 52 Weeks, 52 Stories: Story - 7

~ Networking with other professionals was a valuable resource for learning and collaboration.

Featuring Mrityunjoy Biswas (@mitunjoy11), a talented security researcher from Bangladesh. Let's know his story. 🧵

1/52

[Sam Curry @samwcyo]

Super excited to release our car hacking research discussing vulnerabilities affecting hundreds of millions of vehicles, dozens of different car companies:

https://t.co/xCHG5oLYWK

Contributors:
@_specters_ @bbuerhaus @xEHLE_ @iangcarroll, @sshell_ @infosec_au @NahamSec @rez0__

[Mrityunjoy Biswas @mitunjoy11]

Thank you Cobalt Team @cobalt_io for this amazing swag! Loved the swag pack! 💙

[Mrityunjoy Biswas @mitunjoy11]

@harshbothra_ @haksecio @ahmettgurell @h0i0m0a0n0s0h0u 💪🏻💪🏻💪🏻

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w

[Mrityunjoy Biswas @mitunjoy11]

I am glad to share that I've successfully passed the eWPT certification exam. It was a great experience and fun.

Thank you @eLearnSecurity for the great opportunity!

Verify Link: https://t.co/4SrvtjLbzr

[Mrityunjoy Biswas @mitunjoy11]

@harshbothra_ @cobalt_io @Hacker0x01 Congrats Harsh!

[Orange Tsai 🍊 @orange_8361]

Cool chain! https://t.co/e1uaZzFE0p

[Mrityunjoy Biswas @mitunjoy11]

@akita_zen Congrats buddy!

[Mrityunjoy Biswas @mitunjoy11]

Secret Scraper V1.1 (Python) by @h33tjubaer

Jbin will collect all of the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it.

https://t.co/pHSh9Y8Jtf

[Mrityunjoy Biswas @mitunjoy11]

@jon_bottarini 😂😂😂