Z000n Bug

Cyber security enthusiast, bug bounty hunter, I spend time reading what NASA is up to in space research too. But dont expect any tweet about Mars exploration

[Z000n Bug @z000nbug]

@engineers_feed 102

[ZecOps - A Jamf Company @ZecOps]

Meet WiFiDemon: iOS WiFi RCE 0-Day Vulnerability & a 'Zero-Click' Vulnerability That was Silently Patched https://t.co/RCmEsyOSEy

[Mobile Security @mobilesecurity_]

Gotta Catch 'Em All: Frida & jailbreak detection - anti-jailbreak, anti-Frida, anti-debug techniques used in PokemonGO 🔥
#MobileSecurity #AndroidSecurity @fridadotre @LIEF_project by @rh0main https://t.co/3RcXgktM1Y

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

10 Vulnerable Android Applications for beginners to learn Android hacking.

🧵👇

[Z000n Bug @z000nbug]

This is always a handy option, similar to Match/Replace False to True to enable any hidden menu options in the UI

[m4ll0k @m4ll0k]

Always..

[I N F O S E C C H L Ö B O 👩🏼‍💻 ✨ @InfosecChlobo]

I don’t usually do #ff #followfriday but I’d like to shout out a few of my faves this week ❤️ You have all had such an impact on me during my time in infosec so far - thank you for your friendship and guidance! ✨
@z000nbug
@zak_hax
@amysw_sec
@charlieamber94
1/2

[Z000n Bug @z000nbug]

@Dinosn "We have SSL certificates on our websites, so we are secure" - Oh the things you hear!

[bugzy @d3vilbug]

In my second blog post, I have explained how one can decrypt the AES Encrypted mobile app traffic on the fly using AES Killer and Frida.

https://t.co/9OwJ9YcsJh

#cybersecurity #infosec #informationsecurity #pentest #burpsuite #bugbounty #mobileappsecurity #frida #MobileSecurity

[Z000n Bug @z000nbug]

@TomNomNom peacocks are so majestic. I always wanted them in my front garden at one time. You are lucky !

[Z000n Bug @z000nbug]

@irsdl Chip has been planted. Now we can expect more 0h-days from you. There is no excuse :)

[Tony Redmond @12Knocksinna]

.@Office365 Last week, @Practical365 published a script to create an inventory of #AzureAD integrated apps. Here's how to conduct a review of the apps to decide why stay and which should go. I managed to remove 35% of the apps registered in my tenant!
https://t.co/6cRUxNp0Ve

[Z000n Bug @z000nbug]

@GazTheJourno Take a full copy of breached data = straight to jail

[Frank @jedisct1]

Inclavare containers, by Alibaba - A new container runtime for cloud-native confidential computing https://t.co/MguYBxAy59

[Z000n Bug @z000nbug]

[PDF] Defending against Software Supply Chain attacks, taking into consideration recent high-profile attacks in the news. What are they and how to mitigate from CISA https://t.co/A1kC0MFkT0

[Z000n Bug @z000nbug]

[PDF] Cybersecurity advisory to defend against attacks from SVR. Understand the tactics, techniques, and procedures used by online threat actors to compromise your network. Mitigations within the document to protect yourself https://t.co/zXAKHPOJwh

[Z000n Bug @z000nbug]

Microsoft has announced the end-of-support for .NET Framework v4.5.2, 4.6, and 4.6.1 on April 26, 2022, as per Microsoft. Please make sure if you are applying for CE/CE+, then the version is updated to 4.6.2

[APIsecurity.io @apisecurityio]

Want to practice your #JWT #pentesting skills? Check out this JWT Hacking Challenges lab by @onsecru. Includes the following JWT signature attacks:
* none,
* weak secret key,
* key confusion,
* key injection,
* jwks spoofing,
* kid

https://t.co/8eU7zRyLfZ

[Z000n Bug @z000nbug]

SQL Injection still exists in 2021 🤪

[Z000n Bug @z000nbug]

Unlocked Gate - A loophole that would allow an attacker to trivially craft a macOS payload to bypass Gatekeeper has been patched in a recent Bigsur update.

[Steph Hippo @stephhippo]

FYI: chrome://settings/content/notifications

"Sites can ask to send notifications" -> off