Sysdum

Synack Red Team | Coder | Bug Bounty Hunter Interested in desktops, tabletops, all kinds of tops really.

[André Baptista @0xacb]

WontFix can be an RCE Goldmine

SOAPwn by @chudyPB

#5 in PortSwigger Web Hacking Techniques of 2025

Microsoft’s refusal to patch HttpWebClientProtocol invalid casting makes any .NET app using ServiceDescriptionImporter permanently vulnerable to arbitrary file write via malicious WSDLs.

Blog link 👇
https://t.co/WmTlxocI1x

[pyn3rd @pyn3rd]

#CVE-2025-55182: RSC RCE — It functions as an in-memory webshell backdoor, offering a significantly more covert foothold. Please verify this again on your own endpoint.

[Sysdum @systemDumb]

@infosec_au You're a beast dude 😎

[Nicolas Krassas @Dinosn]

Critical strike: China's hacking training grounds (PART 1) https://t.co/28pf5h7cyB

[Soroush Dalili @irsdl]

Using @Burp_Suite and a website playing a new trick on you?
This happens but no fear (most of the times)!

The screenshot here shows a Java TLS limit. Recent JDKs added jdk.tls.maxHandshakeMessageSize (default 32768 bytes)

Use "-Djdk.tls.maxHandshakeMessageSize=65536" to solve this. Add this to the end of the ".vmoptions" file if you have it installed.

#BurpSuite #BugBountyTip

[Sysdum @systemDumb]

@mcipekci The GOAT himself 👑

[Thrones Updates @ThronesUpdates]

Voting for a President in America be like

"choose one"

[Sysdum @systemDumb]

@pwnEIP I want a foil version of this card. Also emotional damage OP 😂

[Sysdum @systemDumb]

@Chrollo_l33t @NinjaParanoid I'm in this tweet and I don't like it

[Sysdum @systemDumb]

Additionally, I've run into WAFs blocking or blacklisting any more than 1 directory up (e.g ../../). These paths weren't blocked. Another Java-ish payload is the popular Tomcat/nginx normalization bypass /..;/. I see it mostly present in Java apps

[Sysdum @systemDumb]

If you think you've found a path traversal, instead of throwing /etc/passwd and similar paths, check if the app is java-based using Wappalyzer. I've scored a few bounties by trying the following:

?file=../WEB-INF/web.xml
?file=../META-INF/MANIFEST.MF
#bugbountytips #BugBounty

[Sysdum @systemDumb]

@ozgur_bbh Great write-up!

[Sysdum @systemDumb]

@SSgtRomaine @JackRhysider If you read the article, you would know the author is using it ironically.

[Sysdum @systemDumb]

@intigriti Telerik, it's the gift that keeps on giving

[Sysdum @systemDumb]

@hack1or0 @adrielsec Impact is that the victim is sent a link for a known website and it redirects you to an attacker's site that is mocked up to look like the legitimate site. They can then perform a watering hole attack to ideally obtain the victim's plaintext credentials.

[Sysdum @systemDumb]

@NahamSec When nobody is buying MSF pro so you get into the legal business

[adragos @adragos_]

Finished in 1st place at the Red Team CTF @ #DEFCON 31. @RedTeamVillage_

Started off playing the event solo, but I was joined in the finals by my fellow teammates from Team Europe, @sijsu and @s3np41k1r1t0 to get the win.

Thank you ThreatSims and @hackthebox_eu for the event!

[RedTeamVillage @RedTeamVillage_]

🚨 Attention 🚨

We’re asking everyone that was at the RTV CTF today in Cesar’s Forum to CHECK their swag bags. Unfortunately, someone walked away with one belonging to one of one of our volunteers. It is vital that we locate it as it contains his ID etc.

DM us if located! 🙏🏾

[Sysdum @systemDumb]

@S1n1st3rSecuri1 Thanks for bearing with me while I fixed some things! 😅😅

[RedTeamVillage @RedTeamVillage_]

🙌🏼 Thank you to @flipper_net for adding to our epic RTV CTF prizes!

#defcon