Check out Nika, a new Java code review tool by my friend @rootaux. It automates pipeline scans using taint analysis, powered by Astrail (a Joern fork) with Andersen’s algorithm to precisely add data-flow edges between nodes
#bugbounty#appsec#hackerone
https://t.co/Cqca5I51FK
@atlys very poor experience. I applied for Singapore visa and was promised I'll get it by 10. But the application is yet to be submitted l, I was promised it will be submitted by yesterday but nope it wasn't. The customer support is non-existent, won't recommend #atlys to anyone.
Send()-ing Myself Belated Christmas Gifts - GitHub's Environment Variables & GHES Shell
https://t.co/g9d3kOA04o
Read about how one of our talented researchers, @Creastery , found it, exploited it and reported it in a fast and professional manner:
Introducing a new tool for #PHP filters attacks, #wrapwrap: an algorithm to add an arbitrary prefix and suffix to a PHP resource, improving the exploitation of file read and #SSRF vulnerabilities.
https://t.co/iP3DpFBEmx
Chelsea Manning is now being fined $1000 a day for refusing to testify against Assange and WikiLeaks. If she does not testify, she will be fined nearly half a million dollars over the course of the grand jury.
https://t.co/X51GmHBUQH