Adhyayan Panwar

OSCP | Security Architect @akamai | Independent Security Researcher | Gamer | Listener Of Eccentric Music

[Adhyayan Panwar @nullvoiddeath]

@hacker_content Hello, DMs are closed.

[Aditya Dixit @zombie007o]

You must have seen some mobile apps sending encrypted traffic/data in the POST body. Want to know how it can be manipulated?
I just wrote a blog about one such case where I was able to break client-side AES in an Android app using 3 chained proxies

https://t.co/eMNoJnAemd

[Adhyayan Panwar @nullvoiddeath]

@saura3h I'm suffering from something complete opposite. Iykyk.

[TCM Security @TCMSecurity]

ICMYI: Free course alert!

We've dropped a 3 hour course on beginner Python, completely free. If you want to learn to code and have zero experience, this course is for you! We hope you enjoy it and as always, please consider subscribing to our channel ❤️

https://t.co/P9lBxC2ZhI

[The Daily Swig @DailySwig]

Fancy some new garms? For the chance to win a @PortSwigger t-shirt (as modelled by our @JesscaHaworth) and a bag of Swig goodies RT this and follow us (if you haven't already)✌️

[aureliuspwns @aureliuspwns]

If your server has more than one network interface and you need to use SSH with a specific interface, you can use the flag "-b" with the network's IP as a bind address. Might allow you to pivot further.

#bugbounty #security #ssh #redteam #infosec #blueteam

[Jscrambler @Jscrambler]

Explore how public threat intelligence can help organizations achieve a stronger security posture in our new post 👇
https://t.co/raJHodJHLg

#CyberSecurity

[aureliuspwns @aureliuspwns]

@BushidoToken mentioned how threat actors wait for logs to expire before exfil. Would be interesting to see the time interval between the first breach and the first outbound connection noticed in previous attacks.

[FC Barcelona @FCBarcelona]

check araujo's pocket

[Gerard Piqué @3gerardpique]

We are back.

[FC Barcelona @FCBarcelona]

#ElClásico

[FC Barcelona @FCBarcelona]

#XaviBall wins again

[Intigriti @intigriti]

In these #BugBytes:

@forgedhallpass published a brilliant Burp extension to generate Nuclei templates, @zombie007o and @nullvoiddeath showed us how to exploit markdown for RCE via LFI, @NahamSec shared two of his last Live Recon interviews & more 🗞️👇

https://t.co/85eZoGoRXg

[Aditya Dixit @zombie007o]

Looks like @nullvoiddeath and I got featured in the Portswigger's Blog - The Daily Swig. 😄

Thanks, @SecurityCharlie for covering our research. 🙌

[Adhyayan Panwar @nullvoiddeath]

@zombie007o and I made news! Let's gooooo.

Big thanks to @SecurityCharlie for the thorough coverage!

[The Daily Swig @DailySwig]

Remote code execution vulnerability uncovered in Hashnode blogging platform

https://t.co/t9ktrYCk0C

[The Daily Swig @DailySwig]

Remote code execution vulnerability uncovered in Hashnode blogging platform

https://t.co/t9ktrYCk0C

[Aditya Dixit @zombie007o]

Wrote about a cool bug @nullvoiddeath and I found in a famous blogging platform - Hashnode.

Exploiting Markdown for RCE

https://t.co/GTZv75FjSj

#bugbounty #Pentesting #Security #infosec #hacking #tutorial

[Adhyayan Panwar @nullvoiddeath]

Take a look at how me and @zombie007o leveraged LFI in markdown parser to bypass Cloudflare protections:

https://t.co/bM8qSzYVxX

#security #infosec #cloudflare #hacking

[Shayan Sardarizadeh @Shayan86]

This video, claiming to show "Russian military paratroopers landing in Ukraine" with nearly 400,000 views, was in fact taken during Russia's Vostok 2018 military exercises.

H/T @wallaceme

[Adhyayan Panwar @nullvoiddeath]

@zombie007o