Alibabas @0x_alibabas

Joined March 2022

Tweets

37
Followers

76
Following

360
Likes

1K

Alibabas @0x_alibabas

4 days ago

Just got a reward for a high vulnerability submitted on @yeswehack -- Code Injection (CWE-94). 🫡 yeswehack.com/hunters/0x-ali… #YesWeRHackers

0 0 1 45 0

Download Image

Two Seven One Three @TwoSevenOneT

2 weeks ago

#redteam Now, you can dump the #Windows password from the LSASS process with help from the past: WerFaultSecure.exe Github: 2x7EQ13/WSASS Experimental version: Windows 11 24H2 #Blueteam

13 148 621 45K 479

Download Image

Bug Bounty Village Brazil @BugBountyBr

3 weeks ago

🚨 CALL 4 PAPERS — Bug Bounty Village @ H2HC 2025 🚨 Caçou um bug insano? Tem case real ou técnica nova? Esse é seu palco! Envie sua proposta pelo form: bit.ly/4n4hXf9 #H2HC #BugBountyVillage #Call4Papers #HackerCulture

1 8 7 2K 1

Download Image

Alibabas @0x_alibabas

3 weeks ago

I've got an arbitrary file (not folder) delete bug on hand. Anyone know the latest privilege escalation techniques on Windows 24H2, since the changes around ::$INDEX_ALLOCATION?

1 0 5 571 10

Alibabas @0x_alibabas

a month ago

Yay, I was awarded a $800 bounty on @Hacker0x01! hackerone.com/0x_alibabas #TogetherWeHitHarder

0 1 64 3K 8

huli @aszx87410

2 years ago

🚀Exciting News! Introducing my latest work: Beyond XSS This series of articles aims to introduce front-end security topics, perfect for frontend devs and those intrigued by frontend security. Suitable for all skill levels from beginners to intermediates aszx87410.github.io/beyond-xss/en/

4 87 302 25K 128

Two Seven One Three @TwoSevenOneT

2 months ago

#oldnewthing Need something blue? Create the file "C:\Windows\System32\config\OSDATA" and restart Windows. You’ll get a permanent Blue Screen of Death( BSOD ). #pentester #redteam

10 82 679 59K 442

Download Image

Alibabas @0x_alibabas

2 months ago

Just got a reward for a high vulnerability submitted on @yeswehack -- Code Injection (CWE-94). #YesWeRHackers

2 2 123 3K 4

Download Image

neils @midwestneil

3 months ago

Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:

wetw0rk @wetw0rk7

3 months ago

5 45 410 276K 195

47 562 3K 318K 1K

Alibabas @0x_alibabas

3 months ago

Hey that's my vuln teamviewer.com/en/resources/t…

0 0 2 142 1

Vitor Falcão "busfactor" @busf4ctor

7 months ago

New blog post! It took me a few months to get motivated to write again, but here we are with a remarkable client-side chain I found with @xssdoctor vitorfalcao.com/posts/hacking-…

9 50 217 16K 168

Maxim Suhanov @errno_fail

7 months ago

(A new class of symlink attacks is mentioned below.) According to Microsoft (MSRC), attacks involving symlinks stored on removable drives or in file system images (like VHDX) are not vulnerabilities. If an unprivileged user manages to quickly replace a regular file... 1/7

4 44 192 19K 136

Download Image

James Forshaw @tiraniddo

2 years ago

I try an avoid this hellsite, but I did a quick dive into sudo in Windows and here are my initial findings. tiraniddo.dev/2024/02/sudo-o… The main take away is, writing Rust won't save you from logical bugs :)