Vladica Savic

Senior full-stack software developer. EE and IT Security as a hobby. OSWE, OSCP, OSWP, eCPPTv2, eMAPT, PNPT certified; Dreamer; Enthusiast; Innovator;

[Milan Jovanović @mjovanovictech]

I've been using Clean Architecture for 5 years and counting.

Here's why I think it's amazing. 👇

Clean architecture isn't revolutionary.

But it is opinionated about how to structure your code.

It's just another form of layered architecture.

[ReconOne @ReconOne_bk]

Subdomain Enumeration is a critical phase in the BugBounty game

Subfinder (from @pdiscoveryio) is one of the best tool for subdomain enumeration

Here are 6 steps to master this great tool 👇🧵

#recontips #bugbountytips #bugbounty #pentesting #AttackSurfaceManagement

[hAPI_hacker @hAPI_hacker]

Hacking APIs Book Giveaway sponsored by https://t.co/6QOfGi8FzB! We are giving away 10 print books.

One entry per:
♥️ Like 🔁 RT

👑Bonus entry to anyone who follows @apisec_ai. Ends in 48 hours!

[mr.d0x @mrd0x]

Bypass Defender AV static detection:

If you name a malicious file DumpStack.log Defender doesn't scan it.

[Patrik Grobshäuser @ITSecurityguard]

Here are some ideas for potential attack surfaces for Log4J:

in your robots.txt 😏
in your dns records (txt...)
in your email headers
in your usernames
in your passwords
in your headers
in your e-mail addresses
in your files
in your SSL Certificates
in your EXIF

#log4j

[Scott Helme @Scott_Helme]

We already have our first 0-day on Mars and we’ve not even set foot there yet 🤦‍♂️

[Elliot @ElliotKillick]

Need to go under the radar downloading #mimikatz (and other suspect payloads)? Then newly discovered #lolbin "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. It's like a new certutil.exe but absolutely unheard of by any antivirus software!

[Vladica Savic @vsavic]

Happy to announce that I have joined the @SynackRedTeam and their platform <3

[Vladica Savic @vsavic]

Get Burp Suite certified for free...  | Blog
https://t.co/g5aaW0kumV

[BleepingComputer @BleepinComputer]

A flaw in the Microsoft Windows Platform Binary Table (WPBT) could be exploited in easy attacks to install rootkits on all Windows computers shipped since 2012 - @serghei

https://t.co/Et9Q9C7LEQ

[ippsec @ippsec]

This is an amazing blog post on setting up a demo Azure Sentinal lab to collect OMIGod logs. Great information about his approach to looking into the exploit.

[Vladica Savic @vsavic]

@TCMSecurity @thecybermentor @TCMSecurity new logo looks awesome! 😻

[Vladica Savic @vsavic]

The #OWASPTopTen2021 is out https://t.co/7qzfOKdJ1r #OWASP #CyberSecurity

[Vladica Savic @vsavic]

@JulianRunnels @thecybermentor @TCMSecurity Congratulations

[Bartosz Adamczewski @badamczewski01]

I made a page with (almost) all of my infographics:

There are over 150 infographics.

Enjoy, Please RT and make sure to credit the author if you plan on using them. 🙂

https://t.co/rwNdjCE8sS

#programming #dotnet #csharp #golang #rust

[SpiderFoot @spiderfoot]

Imagine there was an #OSINT/#recon tool that was free, integrated with (nearly) every data source, capable of gathering and analyzing:

- IP addresses
- CIDR ranges
- (Sub)domains
- ASNs
- Email addresses
- Phone numbers
- Usernames
- People's names
- Bitcoin addresses

THREAD🧵

[Florian Hansemann @CyberWarship]

Active-Directory-Exploitation-Cheat-Sheet

This repository contains a general methodology in the Active Directory environmen

#redteam #infosec #pentest
https://t.co/d0OzLkJpKo

[Vladica Savic @vsavic]

Got my #PNPT certification today https://t.co/kb0yj8sNhs Thank you to @thecybermentor and @TCMSecurity it was a really nice course and exam!

[Deepak Gupta @dip_ak]

Programming is Thinking, Not Typing.
.
.
#programming #coding #css #html #codingquote #programminglanguage #programmingquotes #programmingislife #java #javascript #developer #softwaredeveloper #software #technology