☠Labda☠

Geek, IT security, OSCP
RedTeam member
@Bugcrowd Ambassador #BugBountyTips

[☠Labda☠ @thelabda]

We’re proud to share that Hackrate is now Hungary’s first CVE Numbering Authority (CNA) under the CVE Program.

[CVE Announcements @CVEannounce]

Hackrate is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities that are discovered, validated, & coordinated through the Hackrate Ethical Hacking Platform

https://t.co/5wYOAAzlIV

#cve #cna #vulnerabilitymanagement #vulnerability @CVEnew @hackrate

[m4t @szilak44]

Call any number (even premium-rate ones) from a locked iPhone and confirm whether a number/email is saved in the contact list:
https://t.co/cfMQAUDMns
#iphone #apple #privacy

[Gareth Heyes \u2028 @garethheyes]

We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.

[Imre Ujlaki @ CodeYard 🚀 @iujlaki]

Idén is megejtjük az adománygyüjtő streamet a Boldog Gyermekkor Nevelőszülői Hálózat gyerekeinek! 💜

[☠Labda☠ @thelabda]

@h1Cubed U can simply drop the shitload amount of trackers

[☠Labda☠ @thelabda]

HackGATE: Empowering ethical hacking with visibility and control https://t.co/HK0uTv9Ei7 via @producthunt

[Hack The Box @hackthebox_eu]

One does not simply walk to the Vault ✋
But every quest is easier with the support of our allies! Thank you @Bugcrowd for being the Diamond Sponsor of #BusinessCTF24. Register now for the biggest #CTF competition for corporate teams: https://t.co/ZuS1tIys0n

[☠Labda☠ @thelabda]

@iujlaki @_prefector_ Sőt még a pw.txt-nél is jobb :D

[Mastering Burp Suite Pro @MasteringBurp]

A new @Burp_Suite extension (by @compasssecurity) looking for JWT vulns 🤖

https://t.co/CsI4LmSZAt

[☠Labda☠ @thelabda]

@noraj_rawsec @pxmme1337 +1

[☠Labda☠ @thelabda]

How do you log your penetration-test activity?
Do you use your custom tool, or some sort of third party solution?
#questionoftheday #hacking #pentest #bugbounty

[☠Labda☠ @thelabda]

lol the easter eggs :D

[☠Labda☠ @thelabda]

Wow crazy af! #BugBounty

[Harel @H4R3L]

Just published a writeup on my account takeover vulnerability in ChatGPT, using a really cool web cache deception technique. Waited a while to finally publish this, enjoy :)

https://t.co/P1vHoSzABX

[☠Labda☠ @thelabda]

@intigriti Desktop of users XD

[☠Labda☠ @thelabda]

@0daySecured TBH I'm using tools written in golang, but I wrote all my scripts in python

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

GAP is now the @Burp_Suite BApp store 🤘
Go give it a go, give some feedback, give it a rating, and go get all those links, parameters and custom wordlists!
#BugBounty

[☠Labda☠ @thelabda]

@0daySecured Security

[☠Labda☠ @thelabda]

@0xtavi @intigriti Hahaha made my day XD

[☠Labda☠ @thelabda]

Woah the new burp dashboard make me wake up without any coffee :D

[BRute Logic @BRuteLogic]

You probably know that

<Img Src=javascript:alert(1)>

Doesn't work anymore (although several lists out there have it)

But if you add

OnError=location=src

It does!

https://t.co/TuPJjCOuWg

Not so useful but who knows your next inline injection scenario?

#XSS 😎