Vivek Singh

[Vivek Singh @v7nc3nz]

@shrotriyaditya7 Okay!

[Sam Stones(Hunter)👨‍💻 @SamTechwest]

This is underated but goldmine.

[Vivek Singh @v7nc3nz]

Thank you @nikhil_mitt and the @AlteredSecurity team for designing such a practical and realistic experience. Really had fun in the lab.

[Altered Security @AlteredSecurity]

Congratulations to @Mohammed035_ and @v7nc3nz for clearing our Certified by Altered Security Red Team Professional for Azure exam!
#CARTP #AlteredSecurity cc @nikhil_mitt
https://t.co/Afk4v094hg

[Sahil Choudhary @sahilsince2000]

No jailbreak. No problem. 🔓

I built a tool that bypasses iOS SSL Pinning using OpenVPN + iptables — works with Burp Suite & mitmproxy out of the box.

👇 GitHub
https://t.co/N4QyCDaXvR

#CyberSecurity #BugBounty #iOS #Pentesting

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Pre-built Jailbroken iOS 26 iPhone fully runs on VM✨

Full virtual iPhone ready-to-run jailbroken iPhone (rootless + Sileo + Filza + TrollStore vibes).

Just download, Test tweaks, exploit PoCs, and debug without touching your daily driver.😗

16 GB+ RAM recommended

[Vivek Singh @v7nc3nz]

@thedawgyg https://t.co/3ysZbyJJzt

[sysxplore @sysxplore]

Debian the big moma🐷

[Tom Dörr @tom_doerr]

Guide for hardening Linux servers

https://t.co/sp4eEBvN8e

[Harsh Tandel @H4r5h_T4nd37]

Day 19 Proxy Contract Security Tips

Verify proxy contracts use the onlyInitializing modifier instead of initializer to ensure proper initialization.
Verify selfdestruct and delegatecall in implementation contracts do not introduce vulnerabilities.
#Web3 #BlockchainSecurity #NFT

[Harsh Tandel @H4r5h_T4nd37]

Day 18
#ThreatModeling for Blockchain in #STRIDE framework

S : Spoofing compromised private keys enables an attacker to masquerade as a user and generate #Blockchain transactions on their behalf.Blockchain malware can steal private keys or modify transactions on your behalf.

[Hx01 @Hxzeroone]

Hello!
Just published a new research with ( @sml555_ , @codecancare) 🍻

Who Needs A Blind XSS?

https://t.co/bUpFj1p0Mh

#CyberSecurity #BugBounty

[Frida @fridadotre]

Frida 17.4 introduces Simmy, a new backend for Apple’s Simulators on macOS.

Spawn, attach, and instrument apps — just like on a real device.

[André Baptista @0xacb]

Just released a new recollapse version thanks to @ryancbarnett and @4ng3lhacker after their talk in @BlackHatEvents today.

What’s new?

💥Mode 6: Fuzz case folding/upper/lower

💥 Mode 7: Fuzz byte truncations

💥 Recollapse is now available to use as a python library and available on @pypi

Check it out 👇

[PortSwigger @PortSwigger]

It's nearly time... 👀

https://t.co/pIOerQPxTt

#HTTP1MustDie

[Nicolas Krassas @Dinosn]

CVE-2024-51466 (CVSS 9.0): Critical Vulnerability Found in IBM Cognos Analytics https://t.co/wjqVJiIf7K

[Daily CyberSecurity @Daily_CyberSec]

CVE-2024-51466 (CVSS 9.0): Critical Vulnerability Found in IBM Cognos Analytics

Learn about the severe vulnerabilities in IBM Cognos Analytics platform (CVE-2024-51466 and CVE-2024-40695) and how to mitigate the risks.
https://t.co/FK72QattTT

[Vivek Singh @v7nc3nz]

CVE-2024-51466, a critical Expression Language (EL) Injection in IBM Cognos Analytics (11.2.0–11.2.4 FP4, 12.0.0–12.0.4).

What it does:
Allows remote, unauthenticated attacker to perform RCE

Severity: CVSS 3.1 , 9.0 (CRITICAL)

https://t.co/JZx9bmFhAr

[JAMESWT @JAMESWT_WT]

#Booking.com lnvoice
Email with fake invoice pdf
Pdf > url> js > url > ps1
Samples #Rhadamanthys
https://t.co/sYzav2CSW1
C2
⛔️185.196.11.]201
AnyRun pdf
https://t.co/dj5t6Z7Shz
AnyRun js
https://t.co/isXsQ9hDiO

[Pulkit Ramdiya @PulkitRamdiya]

When I was still a Teenager, I thought maybe my generation will be better at handling religion, racism and gender related discussion and opinions.
I'll be 30 next year, turns out it'll take another generation to be better.
Hopefully sooner.

[Ruurtjan Pul @Ruurtjan]

I ❤️ DNS

I’ve spent 2 years full-time building https://t.co/LYem2r1nIJ.

Now, I’m teaching everything I know in this course.

[Clandestine @akaclandestine]

Tips and Tricks for Effective SQL Injection Testing using SQLMap Tamper Scripts | by Muhammad Daffa | Medium https://t.co/gJn71ROHAv