Mutlu Dönmez

pentester

[Mutlu Dönmez @mutluexe]

Sorular güzeldi emeği geçen herkese teşekkürler. -Hex2Text

[BUSİBER Boğaziçi Üniv. YBS Siber Güvenlik Merkezi @BUsiber]

TBD-@BUsiber #sibergüvenlik #CTF yarışması sonunda ilk beş takım listesi ve ilk 10 takım arasındaki mücadele grafikte verilmiştir. Tüm ekiplere katılımları için teşekkürler. Sonuçlar değerlendirilip ödül alan katılımcılar ile temasa geçilecektir. @UniBogazici @tbdmerkez

[batcain @batcain_]

Malware analyst and reverse engineer with 5 years of experience, available for new opportunities. I specialize in breaking down malware, reverse engineering, and threat hunting. Hit me up if you're hiring.

[sh4d0wless @sh4d0wlesss]

I completed all free Android labs on @MobileHackLab !
Here all of my writeups:
💀 Strings -> https://t.co/yeFOgOtuay
💀 Document Viewer -> https://t.co/tB0ySCcIt9
💀 Config Editor -> https://t.co/1TZKuZgOSA
💀 Postboard -> https://t.co/vCvRGyfIdq
💀 Food Store -> (1/2)

[Nuri Çilengir @ncilengir]

ZDAY 👀
Don't forget to follow @pentestblog for a new blog post soon!

[Will @BushidoToken]

⚠ Patch CVE-2023-3519 - Unauthenticated RCE in Citrix ADC and Citrix Gateway

Citrix: "Exploits of CVE-2023-3519 on unmitigated appliances have been observed" 🔥

https://t.co/jFtSuXe7PV

[PRODAFT @PRODAFT]

🚨NEW REPORT ALERT🚨

Our PTI team certainly did not hesitate! Again, we bring you a new report on one of the most prominent exploit kits - the so-called RIG exploit kit. 💣💥

As of today, you can download the report on our website here -->
https://t.co/IGUDTYvVch

[Horizon3 Attack Team @Horizon3Attack]

CVE-2022-39952, announced today, allows for unauthenticated RCE against #Fortinet FortiNAC as the root user. Blog post and POC to be released soon.

See Fortinet's PSIRT: https://t.co/sBsrs8Wxqb

[PRODAFT @PRODAFT]

PRODAFT stands in #solidarity with all those who have been affected by the earthquakes. 💔

#Türkiye

[PRODAFT | Türkiye @PRODAFT_TR]

Afetzedeleri hedef alan her türlü dolandırıcılık ve zorbalık teşebbüsü ile ilgili olarak [email protected] adresine e-posta gönderebilirsiniz. Araştırıp, doğrulayarak, kolluk kuvvetlerimize iletiyor olacağız.

[PRODAFT @PRODAFT]

🚨 NEW REPORT ALERT

FIN7 UNVEILED: A deep dive into notorious cybercrime gang

The big day is finally here! 🎊After months of tireless research and analyses, we can present you with the most insightful information: an extensive report on the notorious #cybercrime gang #FIN7.

[Datadog, Inc. @datadoghq]

Today, #OpenSSL released a patch for two vulnerabilities, CVE-2022-3602 and CVE-2022-3786. Our Security Labs team published a technical blog to help customers and the community understand the impact of CVE-2022-3602, with a PoC crash to boot! https://t.co/kC8X2zwwTe

[PRODAFT @PRODAFT]

We've been ruining the surprise of cybercriminals for the past 10 years! Pop the champagne; #PRODAFT just turned 𝐓𝐄𝐍! 🍾

A big thank you to our team, clients, partners, and advisors who made this journey possible and contribute to the success of PRODAFT every day. 🙌

[PRODAFT @PRODAFT]

#TA505 has carried out mass #phishing and targeted campaigns on at least 8160 targets 🎯, using a software control panel called #TeslaGun.

Read our latest in-depth analysis to find previously unreported information on ServHelper campaigns and samples. 👉https://t.co/gLMw1fYfs3

[Mehmet INCE @mdisec]

📢📢📢Update your Roxy-WI asap now! 📢📢📢

CVSS : 10.0 🔥

Our beloved researcher @ncilengir from @PRODAFT found an authentication bypass and multiple RCEs.

Here is the @pentestblog technical write-up👇

https://t.co/O2iriYRJXM

PS: Metasploit module merged to the master 😇

[numan turle @numanturle]

Microsoft Teams — Cross Site Scripting (XSS) Bypass CSP

https://t.co/wZHUof10r2

[Pentest.blog @pentestblog]

Advisory Alert | GLPI Project Remote Code Execution ! Update your GLPI asap 📢

Our beloved vulnerability researcher @der3ctus has released a write-up 🎉🤘

https://t.co/IrhGfac6rl

[Nicolas Krassas @Dinosn]

CVE-2022-32212: Node.js arbitrary code execution vulnerability https://t.co/BrqCjahVjz

[Mustafa Akgül Özgür Yazılım Kampı @OzgurYazKampi]

Penguenler Bolu'ya geri dönüyor!
Detaylar çok yakında!

#oyk2022 #lkdtr

[Arka Kapı Dergi @arkakapidergi]

Arka Kapı Dergi'nin 13. ve son sayısı yayımlandı.

* Hem de tüm okurlar için ücretsiz! 😍
* Hem de #PentesterLab hediyesi ile sizlerle! 🥳

Kıymetli okurlarımızın bilhassa abonelerimizin editör yazısını gözden kaçırmamasını rica ederiz:
🔗 https://t.co/i0kGtkcJAL

#SiberGuvenlik

[Rapid7 @rapid7]

On 6/2, Atlassian published a security advisory for CVE-2022-26134, a critical unauthenticated remote code execution vulnerability in Confluence Server and Confluence Data Center. See mitigation guidance⤵️. We'll update this blog as more info is available. https://t.co/Jz3SORvO8x

[PT SWARM @ptswarm]

🎁 PoC for a Post-Auth SQL-Injection (CVE-2022-0757) in Nexpose Vulnerability Scanner <= 6.6.128

Default port: 3780
Default username: nxadmin
Affected handler: /data/asset/filterAssets

Full Request ⤵️