nopslide

InfoSec • “Pen”tester

[Luminix Labs @luminixlabs]

Protecting Your System from Ransomware: Essential Prevention Strategies https://t.co/Afltk1hJgB

[HackGit @hack_git]

CVE-2023-7028

Account Takeover via Password Reset without user interactions

A critical vulnerability in GitLab CE/EE (CVE-2023-7028) can be easily exploited by attackers to reset GitLab user account passwords.

• https://t.co/c9aeUjkqOK
• https://t.co/Ip7YeIxkha

#cve #cybersecurity #infosec #pentesting #redteam #bugbounty

[Clandestine @akaclandestine]

GitHub - machine1337/TelegramRAT: Cross Platform Telegram based RAT that communicates via telegram to evade network restrictions https://t.co/m4roD2IOMt

[Clandestine @akaclandestine]

GitHub - deepzec/Bad-Pdf: Steal Net-NTLM Hash using Bad-PDF https://t.co/EaJhYBAvom

[terjanq @terjanq]

A really cool writeup from @kevin_mizu about a bug in https://t.co/3nZMVhrLA2. It looks like the writeup has some of tricks learnt from my research! Super happy to see the real world applications of my techniques 😊 And thanks for the shout out!

https://t.co/6U6vyRSDLJ

[HackGit @hack_git]

CVE-2023-23752

Joomla! < 4.2.8 - Unauthenticated information disclosure.

https://t.co/gTecXt1lbT

#cve #exploit #cybersecurity #infosec https://t.co/DWOl3q2grb

[blueblue @piedpiper1616]

GitHub - duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC: CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator - https://t.co/ygRYy2mgTe

[pwn.ai @pwn_ai]

Can you find the token here?
10$ for first solver. 🔥💀

https://t.co/pyKG9yqpUn

[blueblue @piedpiper1616]

GitHub - CsEnox/CVE-2022-2992: Authenticated Remote Command Execution in Gitlab via GitHub import - https://t.co/NTI0mxPzSw

[Corellium @CorelliumHQ]

✅iPhone 14 Pro
✅iOS 16
✅Jailbroken

[/r/netsec @_r_netsec]

Spring4Shell: Security Analysis of the latest Java RCE '0-day' vulnerabilities https://t.co/J6FjDWqBzg

[nopslide @nopsIide]

@toni_setark1998 @KomangSuryadana kill 3 hikz

[nopslide @nopsIide]

@doctorthompson yes the same thing with polkit pkexec it has to be an old vulnerability but they bring this up now and the impact is pretty much the same.

[nopslide @nopsIide]

The lowest user "nobody" could use this simple bash script and allows anybody to overwrite data in arbitrary read-only files (CVE-2022-0847)

It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit. https://t.co/i8pO7EEHTx #infosec #CVE

[blueblue @piedpiper1616]

GitHub - manuelz120/CVE-2021-45897: PoC for CVE-2021-45897 - https://t.co/Z0jBI4dOdN

[N0t0d4y @0xJin]

Find secrets in JS files:
bash https://t.co/GSRZMxB6SD -l targets.txt -e -s -m -o outdir
ref https://t.co/0AgwupdLRd
#bugbounty #bugbountytips

[Ionut Popescu @NytroRST]

ROP Chaining: Return Oriented Programming
https://t.co/j2RcYVrDjy

[PortSwigger Research @PortSwiggerRes]

We've posted some in-depth guidance on how to make Turbo Intruder attacks go as fast as possible. If you think we're missing any tricks, let us know!

https://t.co/Mi0gsmzYRv

[nopslide @nopsIide]

@toni_setark1998 ampun suhu

[nopslide @nopsIide]

yup.. Apache 2.4.50 ✅

[nopslide @nopsIide]

@budanthara pen makan :)