Mahesh Bheema @0xmahesh

Security Enthusiast | OSCP | OSWP | Null Hyderabad Chapter Lead Hyderabad Joined September 2010

Tweets

330
Followers

554
Following

431
Likes

231

Shodan @shodanhq

2 years ago

The $5 Membership sale is now live! The sale lasts until July 17 23:59 UTC: account.shodan.io/billing/member

130 868 2K 614K 276

NULL Hyderabad @nullhyd

2 years ago

May meet registrations are open. Register before it's too late here nullhydmay2023.eventbrite.com. Date: May 27th Venue:@ServiceNow #NullHyd @null0x00 @vhssunny1 @pavanw3b @badc0d3r @0xmahesh

1 5 13 2K 0

NULL Hyderabad @nullhyd

2 years ago

April meet registrations are open. Register before it's too late. Date: April 22 Venue: @EPAMSystems nullhydapr2023.eventbrite.com #NullHyd @null0x00 @vhssunny1 @0xmahesh @badc0d3r @pavanw3b

2 7 15 2K 0

Abhay Bhargav @abhaybhargav

2 years ago

🛠️ These are my go-to #DevSecOps tools at all stages of the DevSecOps lifecycle. These are all OSS (not paid tools) so you wont spend a $ buying them

4 8 34 4K 30

Trend Micro Research @TrendMicroRSRCH

2 years ago

In this video walkthrough, we break down the basic info of CVE-2023-23397 the zero-day, zero-touch vulnerability that was rated 9.8 on the #CVSS scale. Follow this thread as we detail the general exploitation routine of this #vulnerability. research.trendmicro.com/cve202323397

3 20 110 200K 12

Download Video

MDSec @MDSecLabs

3 years ago

We've just published a quick write up on CVE-2023-23397, which allows a remote adversary to leak NetNTLMv2 hashes: mdsec.co.uk/2023/03/exploi… by @domchell

9 415 827 302K 154

Download Image

NULL Hyderabad @nullhyd

3 years ago

#NullHyd's March registrations are open. Reserve a seat before it's too late. nullhydmar2023.eventbrite.com @0xmahesh @vhssunny1 @pavanw3b

2 6 8 2K 0

Hilarex @_hilarex

3 years ago

Automatically configure a vulnerable Active Directory network on AWS : - 6 VMs - 1 linux server with GLPI - 3 domains Perfect to share a vulnerable lab with other people #activedirectory #aws #pentest #ad #LordOfTheRings github.com/0xBallpoint/LO…

2 61 179 12K 65

Mayfly @M4yFly

3 years ago

Mindmap upgrade version 2023_02 thx to @Jenaye_fr and @DaahtK for the help. Full quality here : orange-cyberdefense.github.io/ocd-mindmaps/i…

13 153 443 34K 161

Download Image

Intigriti @intigriti

3 years ago

Learning from others is amazing, but how do you find the content you're looking for? @payloadartist solved that problem by creating the Bug Bounty Hunting Search Engine! hubs.li/Q01B0C100 #bugbounty #bugbountytips 👇

4 57 234 28K 77

Download Image

Het Mehta @hetmehtaa

3 years ago

Accidental $70,000 Google Pixel Lock Screen Bypass >bugs.xdavidhu.me/google/2022/11… Video PoC: youtu.be/dSgSnYPgzT0 #TheSecureEdge #Hacking #Google #bugbounty #cybersecurity

3 70 212 0 46

Rio @0x09AL

3 years ago

After an unhealthy amount of hours put into this, I finally managed to get RCE on Cobalt Strike. I would recommend avoiding it for a while as CVE-2022-39197 is not sufficient.

25 330 1K 0 107

Download Image

vx-underground @vxunderground

3 years ago

The individual who breached Rockstar Games states they got initial access by social engineering an employee. They are currently on 4chan sharing material and chatting. boards.4channel.org/v/thread/61249…

vx-underground @vxunderground

3 years ago

6 71 381 0 24

8 92 359 0 28

Rasta Mouse @_RastaMouse

3 years ago

[BLOG] Fun post on how to combine evilginx by @mrgretzky and BITB by @mrd0x. rastamouse.me/evilginx-meet-…

4 107 253 0 60

Nicky @Nickieyey

3 years ago

I have compiled a list of Best Cybersecurity Youtube Channels, that talk about various topics related to cybersecurity. Do check it out 👇 Here is the link to the Github repository: github.com/Nickyie/Cybers… #Pentesting #CyberSec #cyberawarness #bugbounty #infosec #bugbounty

51 580 2K 0 1K

Download Image

Pavan @pavanw3b

3 years ago

Some pics from @nullhyd July meet. Talks: News Bytes by Karan Cloud Security & S3 by @Aravind_JMA Cloud Security Zero to One by Ravi Teja Intro to Threat Hunting by @dmred1 Venue sponsor: @ServiceNow #nullHyd #InfoSec @null0x00

0 4 20 0 1

Download Image

Anton @therceman

3 years ago

Bug Bounty Hint If you have found that server is running PHP - you can try to test it for RCE vulnerability. Append following header to request: User-Agentt: zerodiumsystem("id") If PHP version is vulnerable - you will execute system("id") command on a server.