Shubham Raj

A Guy in Security & related stuffs, Python Enthusiast, #moody_bug_hunter, #Gamer, #Bitcoiner and ??? I don't tweet often!

[Shubham Raj @xceptioncode]

@causalsecurity @mredulsarda123

[Shubham Raj @xceptioncode]

The password didn’t need to be cracked. The hash was enough to log in.

BusyBox runs inside millions of devices, from routers and cameras to set-top boxes, and across the Linux ecosystem.

Cipher (@causalsecurity) found 8 previously unknown vulnerabilities in it. This was one.

[Shubham Raj @xceptioncode]

@causalsecurity Cipher is our AI security engineer.

This research uncovered 8 previously unknown vulnerabilities in BusyBox, spanning authentication failures, access-control errors and memory corruption.

All 8 are fixed upstream.

Full research: https://t.co/wFGStrcc2g

[Shubham Raj @xceptioncode]

@causalsecurity The flaw affected BusyBox’s web server when configured with inline yescrypt hashes.

The actual password failed. The stored hash worked.

Anyone who obtained that configured hash could log in without cracking the password.

[Tavis Ormandy @taviso]

I always get angry replies when I say "use a password manager" is bad advice, but I stand by that! Here are some weekend thoughts about it https://t.co/tOm2LIR5E4 (tl;dr just use chrome!) 😆

[Shubham Raj @xceptioncode]

I just published Abusing FaceID augmentation feature to circumvent Apple FaceID security https://t.co/Ur1hECb5mE

[Shubham Raj @xceptioncode]

I just published United Airlines Bug Bounty and Scoring Millions of Miles https://t.co/7GZ1CpfILv

[Esben Friis-Jensen @esbenfj]

and of course also respect to the all time top 5 - @dsopas @ru94mb ng @asishinfosec and @xceptioncode. Keep up the good work

[The Hacker News @TheHackersNews]

It’s a F*cking Huge Collection: Someone uploaded dump from nearly 1,200 data breaches publically, available for anyone to download for free. https://t.co/TUn149QSwI

[Cobalt @cobalt_io]

Congrats to the Cobalt Top 5 of April! Great work! @swaroopsy @jigarsoni21 @xceptioncode @pandujar @arbingodar

[Shubham Raj @xceptioncode]

@drakefjustin Thanks for that, I will take a look. :)

[Shubham Raj @xceptioncode]

@Peerlyst Followed, let me know!

[Shubham Raj @xceptioncode]

@sasi2103 @cobalt_io Yeah - nice headphone there ;))

[Shubham Raj @xceptioncode]

Just received awesome tshirt, deck of cards and stickers from @cobalt_io

[Shubham Raj @xceptioncode]

@ChrHansen @cobalt_io Looks awesome. Just noticed i am also there :)) Ace of spades ^_^

[Shubham Raj @xceptioncode]

Read somewhere:~
Year 2050
Your Grandchild to You :
"Grandpa, you really had a whole Bitcoin when you were young? " #bitcoin @blockchain

[Cobalt @cobalt_io]

Tester of this week is the awesome @xceptioncode, who has a special relationship to his laptop http://t.co/6xnPjycA2l

[Shubham Raj @xceptioncode]

@CrowdCurity Woh! haha yeah, thanks for that ;))

[Shubham Raj @xceptioncode]

Sometime when word matters more ;)) #praise #bugReports

[Microsoft Security @msftsecurity]

@xceptioncode Congrats, Shubham! Thanks for your contributions.