p4w

Founder & Co-CEO @SoterITSecurity | CTF player @beerpwn
team

[p4w @p4w16]

Here https://t.co/sbaKcMsxDd you can read my writeup for Sploosh web challenge! Thanks @pb_ctf @Corb3nik #ctf

[p4w @p4w16]

Here you can read more about the CVE-2022-48253, Directory Traversal on Nostromo Web Server (nhttpd) https://t.co/8jiJfFX7y7

[p4w @p4w16]

I recenlty discovered a new vulnerability (Directory Traversal) on Nostromo Web Server (nhttpd): https://t.co/NMa8zsVZmd
Stay tuned for the article that will give you more details about the research!

[Mandiant (part of Google Cloud) @Mandiant]

Google completed its acquisition of Mandiant today. We’re excited to get started on our shared mission to create a comprehensive and best-in-class cyber security solution for customers and partners. Read more here: https://t.co/JpkOHify14

[Soter IT Security @SoterITSecurity]

Congratulation to
@SimoneDorje and @p4w16 to have passed the #eCDFP exam by @eLearnSecurity!

[Soter IT Security @SoterITSecurity]

In Soter we never stop learning, here there are some our certifications earned by @eLearnSecurity and @offsectraining courses. New certifications will arrive soon, stay tuned! #CyberSecMonth #ThinkB4UClick

[theMiddle @AndreaTheMiddle]

id=1'+OR+1=1-- # blocked ⛔️
id=1\n'+OR+1=1-- # allowed ✅

My last article about #Python re.match() misusage that leads to Input Validation Bypass: https://t.co/u2DGLbqJ14 #websec #BugBounty #bugbountytips @Secjuice

[Soter IT Security @SoterITSecurity]

Soter IT Security today and tomorrow will be at Italian Tech Week of the group @GEDIspa in Turin, if you are here come to talk with us! #ITW #OGR #CyberSecurity @bytevsbyt3 @0n4me

[Fabio Carretto @bytevsbyt3]

me and @0n4me for @SoterITSecurity today at Italian Tech Week! Many good speakers #ITW #OGR #CyberSecurity

[Tushar Verma 🇮🇳 @e11i0t_4lders0n]

Exploiting GraphQL
https://t.co/hyxeqD5jKs

[Daniele Scanu @sk4pwn]

Today I've played with the CVE-2019-2215, an Android kernel vulnerability that abuse an user after free in the binder driver. Very fun! If you would try it I suggest to read the blog post of Google Project Zero written by @maddiestone https://t.co/Mw1yCxevPv

[Daniele Scanu @sk4pwn]

We have also a customized boot animation in our @SoterITSecurity devices #Android #CyberSecurity #infosec

[Soter IT Security @SoterITSecurity]

Good monday! Our security team has found a new security issue marked with the CVE-2021-23405 on Pimcore CMS! Update now with the last version to stay safe! For further details check out the Snyk page #cybersecuty #InformationSecurity #Hacks #StaySafe https://t.co/510zVu4odG

[CVE @CVEnew]

CVE-2021-23405 This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class. https://t.co/F446JRP5zC

[Soter IT Security @SoterITSecurity]

Grazie ad @HackInBo per averci dato la possibilità di partecipare come sponsor!
Ci vediamo Sabato 29 maggio all'edizione Spring 2021 lab edition! Non mancate! 💻 #Security #CyberSecurity

⬇️
https://t.co/HHcsgAlbfd

[Robin @D4mianWayne]

CyberApocalypseCTF was good one, especially for beginners so I made write-ups for all the pwn challenges so maybe, someone can learn. :D

https://t.co/jk4kUp6aPP

[Soter IT Security @SoterITSecurity]

While searching for vulnerabilities..🖌️💻

[p4w @p4w16]

Here https://t.co/s9zP3qW0E0 you can read my writeup for "Localization is hard" web challenge, thanks @AeroCTF.

[ippsec @ippsec]

@chapavoler @1nclud3 Bash automatically processes variables prior to running commands. So the workflow is:
1. Send command
2. Filter examines command
3. Command is good, pass to bash
4. Bash expands variables
5. Bash sends to system()

[🇵🇸 1nclud3 🇵🇸 @1nclud3]

- Execute bash commands without spaces with two methods:
1- {ping,-c,1,127.0.0.1}
2- ping${IFS}-c${IFS}1${IFS}127.0.0.1

- terminal will translate ${IFS} into a space

Thanks @ippsec

[Fabio Carretto @bytevsbyt3]

I passed the OSCP. Thank you for the awesome and challenging adventure @offsectraining #OSCP #pwk #cybersecurity #hacking