David

Founder slashsec Red Teaming GmbH | Hacker | Bug Hunter | #Synack Red Team Member | OSCP | Privacy Enthusiast | Blogger

[David @slashcrypto]

Apple Screen Time Passcode Bruteforce. Great writeup, read this if you're a kid who wants to spend more time on the iPhone.
https://t.co/SgyeGHHzy1

[Christoph Falta 🇺🇦 @cfalta]

Für alle Fans der österreichischen Sprache - made my day 🤣 ⁦@0xntrm⁩ https://t.co/oFrFhiEwl2

[David @slashcrypto]

https://t.co/2sjpiee2ez

[David @slashcrypto]

@NahamSec maybe this helps? :D

[David @slashcrypto]

@b0rk @BetterUptime works great

[Christoph Falta 🇺🇦 @cfalta]

New major version of PowerShellArmoury is here :)
cc @slashcrypto
https://t.co/E6nLtYbYiP

[stiefel @stiefel40k]

My very first CVEs ^^

[David @slashcrypto]

Liebe @Stadt_Wien , warum darf ich denn bei https://t.co/ThNkORCdjY keine Sonderzeichen und auch keine Umlaute für mein Passwort verwenden? #Security #meinwien #notsosecure #donotdiscriminatepasswords

[David @slashcrypto]

@AronMolnar2 @fh_stpoelten Thanks for sharing!

[Aron Molnar @AronMolnar2]

@slashcrypto presented a great tool collection about #recon for #bugbounty hunters at the #ITSecX conference of @fh_stpoelten
https://t.co/GI3tCvZggl

[Christoph Falta 🇺🇦 @cfalta]

New blog post - After the storm - how to move on with NTLM
https://t.co/KZwwHrC6Bm

[David @slashcrypto]

If you have not already subscribed to @AronMolnar2's #securityguide newsletter, you should do it right now! You are not only missing out on great content, you also miss his wonderful oldschool pen & paper sketches. Read the latest post and subscribe! https://t.co/ERhrquB0y4

[Christoph Falta 🇺🇦 @cfalta]

Since I kind of lost track of the vulnerabilities this month, I made a list ^^
https://t.co/E0NWwdTKOs

[David @slashcrypto]

@cfalta Very nice feature :)

[Christoph Falta 🇺🇦 @cfalta]

Introducing "shuffle" - a small helper for PSArmoury to facilitate code obfuscation :-) cc: @slashcrypto
https://t.co/c6NX94ppY5

[Michael Skelton @codingo_]

Bug Bounty advice to avoid:

- you're being told to hunt DMARC/SPF
- you're being told to hunt clickjacking
- you're being told to use nuclei, but not how to build templates

Sources stating these are giving bad advice if money is the goal, learning to hack properly is key.

[Signal @signalapp]

*checks calendar. pours coffee.* Today’s a great day to switch to privacy.

[Christoph Falta 🇺🇦 @cfalta]

I open-sourced my introductory class on Active Directory security including slides, lab environment and exercises. https://t.co/vRPCsTpKgb
Maybe it's useful for someone :-)

[Signal @signalapp]

Our latest blog post explores vulnerabilities and possible Apple copyright violations in Cellebrite's software:

"Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer from an app's perspective"

https://t.co/DKgGejPu62

[David @slashcrypto]

New (Guest) Blogpost - Persis High-Level Human Resource Software HTML-injection (CVE-2020-35753)
https://t.co/kbSbvh8KsS
#infosec #Hacking #XSS #ITsecurity