Taison Brown

[XSS Payloads @XssPayloads]

Exploring Attacks in the "Post-XSS". Excellent presentation by @lmt_swallow / @y0n3uchy
https://t.co/8j5m2weWX7

[Eduardo Vela @sirdarckcat]

https://t.co/W4tDu9pna7 for moar

[André Baptista @0xacb]

Thanks @orange_8361 for creating Why so Serials (HITCON CTF 2018), @infosec_au and @smiegles for collaboration and help, and BBAC!

[Yassine Aboukir 🐐 @Yassineaboukir]

Hardcoded consumer and secret key in an Android mobile application was fixed by AES/CBC encrypting it. However, the byte array generation function used to construct the decryption secret key was also hardcoded in the same java class 😂 #bugbountystories

[Ben Sadeghipour @NahamSec]

Found a pretty neat SSRF on @snapchat and thanks to ideas from @daeken @bbuerhaus, we were able to escalate it a bit. Technical details will be included in our talk @defcon and @BSidesLV (if it gets approved). Enjoy!

[Dirk-jan @_dirkjan]

Short blog and POC code for CVE-2019-1040 (patched last Tuesday). Combining this vulnerability with the SpoolService bug and Kerberos delegation means: any AD user to Domain Admin; RCE on unpatched hosts; possible over Forest trusts. https://t.co/OFgvn7pOrW TL;DR: GO PATCH!

[Phackt @phackt_ul]

#tool #ActiveDirectory Added a --privileged-users option to the great tool https://t.co/CuCXmcxukU by @ropnop:
Enumerate All privileged AD Users. Performs recursive lookups for nested members (avoid orphaned admin_count=1).

[Patch Friday @PatchFriday]

Software security

[👣 @_sawzeeyy]

Tool Release: Sanitizer
A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status https://t.co/nwGlYDbka6

[Fabian Yamaguchi @fabsx00]

Here are our slides for #stratadata on the progress we've made on scalable vulnerability discovery with code property graphs: multi-layered, extensible and with support for multiple programming languages: https://t.co/qbgK5PM28m

[Michael Pollmeier @[email protected] @pollmeier]

Wrote a piece: Understanding JVM soft references for great good (and building a cache)
https://t.co/Pr8Bc1434M

[Christian Wressnegger @chwress]

Also, Alwin is gonna present "TypeMiner: Recovering Types in Binary Programs using Machine Learning" at @DIMVAConf. A preprint is available here: https://t.co/DaI5fcjkVb … CC: @hgascon @mlsec

[Connected Data @Connected_Data]

Viewing Code as Property Graphs, Querying Property Graphs with Graph Databases. Can code be viewed as data, and if yes, what would it look like? What kind of data structure & database would that fit in? #graphdatabases Meetup in Berlin with @fabsx00
https://t.co/3ZLNzEOtD6

[Omar Espino • @omespino]

#Protip can somebody read your passwd file with: "/???/?at /???/????w?" ? yes.
bypass blacklisted words filter (or firewalls) via bash wildcards.

/b'i'n/c'a't /e't'c/p'a's's'w'd'
/???/?at /???/????w?

/usr/b'i'n/'n'c 2130706433 80
/???/???/n? 2130706433 80

#BugBounty #infosec

[RIVER @wugeej]

Linux for Pentester: APT Privilege Escalation

https://t.co/ZJc21G0fjQ

[Worf Email @WorfEmail]

All crew,

Again, please do not insert unknown USB drives from random planets into computer ports on the Enterprise.

Worf

[Taison Brown @Taisonbrown]

setting up my account