Usama Arshad

Capricon |
Info-Sec Researcher | Ethical Hacker | Xam 3xPloiTeR

[sudo @rootsud0]

> fable 5

[TrendAI Zero Day Initiative @thezdi]

Boom! Thomas Bouzerar (@MajorTomSec) and Etienne Helluy-Lafont from Synacktiv (@Synacktiv) close out #Pwn2Own in style with a guest-to-host escape in VMware Workstation. If confirmed, it will put the total contest payout at over $1,000,000! #Pwn2Own

[Usama Arshad @usama0x01]

@KHIZER_JAVED47 @Bugcrowd 🔥

[daniel @hackermondev]

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips
https://t.co/8pkfFsXRWR

[Usama Arshad @usama0x01]

CTF Write-Up: Notey BlackHatMEA 2024 #BHMEA24
https://t.co/rpYsspDVq1

[Farjaal Ahmad @FarjaalAhmad]

I have recently developed a tool to identify domains and subdomains sharing identical DMARC records, potentially expanding the scope of attack surfaces.

https://t.co/soK4D702xz

[Dunicot @dunicot]

EXCITING NEWS! 📣 Our entire team is now OSCP certified 🎓As always, we stand by our reputation as the best in Penetration Testing.

Drop us a line at [phone] or email at [email protected]

#OSCP #PenetrationTesting #CyberSecurity #NetworkSecurity #InformationSecurity

[Digital Pakistan CyberSecurity Hackathon -Official @cybersecure_pk]

🎉 Team SAFE COTTAGE, 1st Runner Up at #DigitalPakistan #CybersecurityHackathon2023! 🥈💰They secure 1 Million Rupees, Intl. Training Coupons, and Sponsorships. Thanks to all contributors and the Chief Guest Dr. Umar Saif, Federal Minister IT & Telecom. 🏆🌍 #Hackathon2023

[Usama Arshad @usama0x01]

BlackHatMEA2023 warm me up challenge solution.
https://t.co/P1pgTiWKPp
#BHMEA23

[Farjaal Ahmad @FarjaalAhmad]

Insha Allah, we will participate at @Blackhatmea in Riyadh, Saudi Arabia as Team Sudoers.

Team @Xam_3xPloiTeR @megachar0x01

[Khizer Javed @KHIZER_JAVED47]

Check out the new Updated and Improved "Bug Bounty Blueprint: A Beginner's Guide." 🎯 Let me know your thoughts! 🙌 #BugBounty #bugbountytips

https://t.co/noESxloseR

[payloadartist @payloadartist]

Damn Vulnerable C Program

Contains vulnerabilities like integer overflow, UAF, OOB read, etc.

https://t.co/xRiH5M7Usq

by @hardik05

#infosec #cybersecurity #bugbounty #cybersecuritytips

[Farjaal Ahmad @FarjaalAhmad]

Winning Tastes Different 🔥
Team SafeCottage Security at Ignite - National Technology Fund with Umair Ahmed and Usama Arshad.

#SafeCottage #hackathon #digitalpakistan #vapt #cybersecurity #ignite #technology #security #team https://t.co/inC6J8wQJv

[Syed Umar Arfeen @syed__umar]

OMG 😳😳😳

[Justin Gardner @Rhynorater]

Here are a couple things I always check when looking at a web application: 🧵

[Farjaal Ahmad @FarjaalAhmad]

I can't stop laughing🤣🤣🤣

[RJ @Z3rO_C00L]

Stealth trick for Red Teaming - why worry about being caught by an MDR (i.e., Artic Wolf, FireEye, etc.) when you can kill their visibility? 🧐

ipconfig /displaydns - Find API Endpoint

echo 127.0.0.1 https://t.co/g9gwpLI2WI >> c:\windows\system32\drivers\etc\hosts

[Tzah Pahima @TzahPahima]

I was able to access thousands of companies’ passwords on #Azure and run code on their VMs.
This includes access to Microsoft’s own credentials… 💣

Here’s HOW I did it.
This is the story of #SynLapse. (1/11)

[Zain Kahn @heykahn]

The most valuable skill in a remote world:

Writing effectively.

But colleges do a terrible job of teaching us how to write for the internet.

My writing has reached over 5 million people online.

Here are 6 quick tips to upgrade your writing skills in the next 5 minutes:

[Man Yue Mo @mmolgtm]

This is probably the most complex exploit I've done so far. A UAF in Android kernel freed by kfree_rcu (introduces a delay) in a tight race + kCFI + Samsung RKP. Yet its still possible to gain arbitrary kernel RW, disable SE and root from untrusted app. https://t.co/u8iD42ZC7B