n1nja007

[Positive Security @positive_sec]

The popular Ruby library "Ransack" can be abused to exfiltrate sensitive data via character by character brute-force.
We compromised multiple applications this way and found hundreds more that could be vulnerable.
https://t.co/95mOmCnyCh

[Positive Security @positive_sec]

We leverage indirect prompt injection to trick Auto-GPT (GPT-4) into executing arbitrary code and discovered vulnerabilities that allow escaping its sandboxed execution environment.
https://t.co/mDSdss3xyn

[shubs @infosec_au]

This is some of the best JavaScript analysis research I've read in a long time. Highly recommend reading and trying out the lab at https://t.co/LYcaAcW9Dm

[Adnan Khan @adnanthekhan]

This is by far the most interesting vulnerability I’ve found - a critical misconfiguration in GitHub’s runner images repository! Here is the full detailed write up:

https://t.co/25BxESuIj4

[PortSwigger Research @PortSwiggerRes]

Nominations are now open for the top 10 new web hacking techniques of 2023! Check out the nominations so far, and make your own here -> https://t.co/1fCiFhQXOH

[Awesome Google VRP Writeups @gvrp_writeups]

New Google VRP writeup "Identity-Aware Proxy Misconfiguration- Google Cloud Vulnerability" for a bounty of $2,337 by @LogicalHunter:
https://t.co/gCNj7EOrqu

[PortSwigger Research @PortSwiggerRes]

Find that one weird endpoint, with Bambdas (by @albinowax & @garethheyes) ->
https://t.co/43cMBBs1zM

[LuemmelSec @theluemmel]

I can finally release my work on Amazon Cognito Ratelimit Bypassing as the fix is now globally deployed.

https://t.co/SGzqjyI9ea

Huge shoutout to James Kettle who discovered this attack vector and made the info public.

Let me know what you think in the comments.

[Unit 42 @Unit42_Intel]

Second-stage attacks in #Kubernetes are possible when the default configuration of system pods is exploited. This article walks through two issues in #K8s system pods that allow #PrivilegeEscalation. #GCP2023047 https://t.co/tvg6DzQssY

[shubs @infosec_au]

Really love this WAF bypass technique documented and found by @irsdl in 2017: https://t.co/60UhDDwKh6 - still super effective today!

[Nick Frichette @Frichette_n]

AWS recently added data event logging for SNS. This was a problem because I used sns:Publish to do a cloud version of "whoami" without logging to CloudTrail (which GetCallerIdentity does). I've updated Hacking the Cloud with a new method! Happy Hacking!
https://t.co/7NtbKGCE3e

[shubs @infosec_au]

For a few months, @samwcyo, @bbuerhaus, @rhyselsmore and I focused on hacking EPP servers / ccTLD zones.

We're disclosing our work today on the hackcompute blog: https://t.co/AlE6OtPC4M

Our efforts in this space led to the ability to control the DNS zones of the following ccTLDs: .ai, .bj, .bw, .ci, .gl, .ke, .kn, .lb, .ly, .mr, .ms, .mz, .ng, .pyc, .rw, .so, .ss, .td, .zm.

[Kévin GERVOT (Mizu) @kevin_mizu]

I'm glad to finally present my research about "Abusing Client-Side Desync on Werkzeug" at @sstic 2023 📜

Research paper is available here: https://t.co/aziDunBHkJ
Slides are available here: https://t.co/9lhUB69GKX

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Top Hacking Youtube Channels 💯 by: @hetmehtaa

- https://t.co/6sqUJa7tFJ
@stokfredrik

- https://t.co/vSRvIam7WB
@Hacker0x01

- https://t.co/IlIpZUaa69
@HackerSploit

- https://t.co/vJx8lA0iD0
@davidbombal

- https://t.co/gBg2Jv9DAy
@theXSSrat

#infosec #cybersec

[AI Will @FinanceYF5]

斯坦福大学今年提供免费在线课程。

无需教科书或费用。

以下是您不想错过的 10 门免费课程：

[Bug Bounty Reports Explained @gregxsunday]

In this amazing interview with @Rhynorater , we are talking about his hunting methodology, his favourite tools but we also discuss some problematic factors for full-time hunters like dealing with unreliable income and more🔥 Enjoy the full interview: https://t.co/5nW2RnzeQ4

[Cos(余弦)😶‍🌫️ @evilcos]

既然有朋友问如何入门 Web3 安全（尤其是智能合约安全），我简单列点当下觉得还不错的资源吧。牢记下：这玩意，最重要的是实战，是需要你一天到晚长期在这个领域积累，才可能有些成就。另外，兴趣一定是最大的驱动力，三天打鱼两天撒网，那不叫兴趣，那叫自欺欺人...

[shubs @infosec_au]

Spent some time using https://t.co/r5tt3N2zxl today. It's pretty good. Make sure your Python env matches the runtime Python env, besides that everything works out of the box. Thanks @fyoorer for your work on this! Httpx on 150k subdomains in about 3-4 minutes.

[Critical Thinking - Bug Bounty Podcast @ctbbpodcast]

. @securinti dropped a great bug last episode.

It all started with a page that was missing X-Frame-Options and simply returned the user's password in plaintext(passwd manager).

Using some crafty framing and CSS magic, Inti was able to isolate each character of the password...

[Justin Gardner @Rhynorater]

You've heard of SSRF.
You've heard of IDOR.
But have you heard of SSRDOR?
😅 Me neither. But Secondary Context bugs are pretty much the combo of the two.

*Rolls up sleeves* Allow me to explain...