WhiteHat 🇻🇳

[Alexandrio @alexbindrei]

Question for Full-time hackers:

What made you leave your job and decide to do full-time bb hunting? Do you regret it? Were you scared at first?

#bugbounty

[shubs @infosec_au]

The security research team at @assetnote discovered several critical vulnerabilities in Sitecore (again). Some can be exploited pre-authentication. My favourite issue abuses the Server.Execute to bypass IIS controls (auth bypass): https://t.co/1crrglUHir

[Nuclei by ProjectDiscovery @pdnuclei]

Want to write complex exploits quickly? 🤔

⚛️ Nuclei allows you to create multi-step requests without programming knowledge! 🤯

Check out this step-by-step breakdown of the Nuclei template for CVE-2020-8193 👇

#Nuclei101 #hackwithautomation #bugbounty

https://t.co/ewfOBQ2xK3

[Hussein Daher @HusseiN98D]

Bug of the day: SSRF via Proxying
GET http://localhost:22 HTTP/1.1 Host: target
Connection: close

Response:
SSH-2.0-OpenSSH_7.4Protocol mismatch.

#bugbounty

[WhiteHat 🇻🇳 @xbabywolf]

@Firelauncher_ @Trung1306 @phandung002 Greate gift for stepners !😍

[Firelauncher 🇱🇧 🇳🇱 🇦🇪 @Firelauncher_]

10 tshirts to be giving away for our stepners in #vietnam.
Follow me, @Trung1306 & @phandung002.
Like, retweet and comment below for a chance to get this tshirt delivered to you after tet holidays.
Vietnam only for now. Cheers all

[shubs @infosec_au]

I just published a blog post for the people that want to get into bug bounties. I hope it helps people that are thinking about doing bug bounties, but haven't started yet. It explains what to expect and how to deal with common problems / situations: https://t.co/V9CKTpJzPT

[TrendAI Zero Day Initiative @thezdi]

Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend - @chudyPB provides the details of CVE-2022-41040 and -41082. These were the #Exchange bugs used in active attacks and recently patched. https://t.co/vEG63C2jKo

[shay @shaybt12]

found *.blob.core.windows.net ?

just add : ?comp=list

https://*.blob.core.windows.net/FOLDERNAME?comp=list

#bugbountytips

[WhiteHat 🇻🇳 @xbabywolf]

@1ZRR4H @GossiTheDog I tested double encode before MS public latest mitigation and confirmed it cannot access to powershell in backend with valid credential.

[Janggggg @testanull]

https://t.co/9jOgrzvRMi

[WhiteHat 🇻🇳 @xbabywolf]

@GossiTheDog

[WhiteHat 🇻🇳 @xbabywolf]

05/10/2022 Update
New mitigation update for encoding bypass Microsoft Exchange exploit CVE-2022-41040, CVE-2022-41082
Use {UrlDecode:{REQUEST_URI}} instead of {REQUEST_URI}
https://t.co/gfsG4LLT1d

[WhiteHat 🇻🇳 @xbabywolf]

@honoki @GossiTheDog @testanull We figure out another way to bypass mitigation, detail coming soon.

[WhiteHat 🇻🇳 @xbabywolf]

Microsoft Exchange mitigations bypass CVE-2022-41040, CVE-2022-41082
Credit to @testanull
https://t.co/gyGASVwBWd