If you miss Twitter back in pre-2010 days when it was just full of geeks sharing cool stuff, then get on Mastodon.
https://t.co/CugRleATGd is where I'll be now
๐
@sampilgrim this guy who rides a penny farthing says he wouldn't know how to pop a wheelie on it. https://t.co/By5AaCf83W I figured if anyone could manual one, you could. Make it happen! ๐
@Burp_Suite I'm sure the Intruder payload type "Runtime file" used to read the file for each request so you could use it to store an access token to refer to, but it seems like now it keeps the same value for the whole attack?
@Burp_Suite Yes, but in the past I've used it to take the value from the file per request and have another process writing to that file, e.g. the current datetime and it would be correct at the time of the request. Talking probably v1.5 or so though ๐
Popular document storage solution, ONLYOFFICE, affected by multiple vulnerabilities. Our latest post by @strawp shows how to exploit this for unauthenticated remote code execution.
https://t.co/qlbJLlIC4X
@nationaltrust@wbiggs I've had this working in Google Play/Wallet for years but it's only in the last year that staff have refused to scan it because "security" despite the fact that the physical cards have no security features ๐คทโโ๏ธ
Popular document storage solution, ONLYOFFICE, affected by multiple vulnerabilities. Our latest post by @strawp shows how to exploit this for unauthenticated remote code execution.
https://t.co/qlbJLlIC4X
congrats to every Twitter employee who commits their entire venv/ for avoiding the layoffs. Elon needs allstars like you who can push 200k lines of code in a single merge.