SecJS @SecJS

Security Researcher Israel Joined September 2024

Tweets

16
Followers

5
Following

322
Likes

258

‌Renwa @RenwaX23

2 months ago

New Blog Post: Disclosing "PermissionJacking," a Safari bug that lets websites trick you into giving camera, mic, gps... access. After a lengthy back-and-forth, Apple's decision is that this is not a security issue, I disagree. Includes new attack vector github.com/RenwaX23/X/blo…

4 18 118 9K 64

Download Video

𝘻𝘰𝘪𝘥𝘴𝘦𝘤 @z0idsec

2 months ago

I hope everyone is having an amazing day :) I see a lot of interest in our new platform wayhack.sh which is great! Can I please kindly request everyone who is interested in trying out the platform to DM us over at: ✍️x.com/wayhacksh

4 4 32 3K 19

Assetnote @assetnote

2 months ago

Sometimes, SQL injection is still possible, even when prepared statements are being used. Our researcher @hash_kitten has written up a blog post about a novel technique for SQL Injection in PDO’s prepared statements: slcyber.io/assetnote-secu…

1 79 290 12K 183

8kSec @8kSec

3 months ago

In security, people talk about complex hacks in theory, but where can you legally practice them? We got tired of the gap between theory and practice. So, we built the practice ground ourselves, the same way we learned. Our free, hands-on CTF labs for Android, iOS & ARM hacking…

0 9 32 1K 16

Download Video

skull @brutecat

4 months ago

Leaking the phone number of any Google user brutecat.com/articles/leaki…

124 171 914 62K 615

Philippe Harewood @phwd_

3 months ago

Facebook page admin and email disclosure philippeharewood.com/page-admin-and…

3 25 168 13K 107

Intigriti @intigriti

4 months ago

Want to master client-side bugs? 😎 Check out this extensive GitHub repository with tens of different resources curated by @zomasec! 🔗 github.com/zomasec/client…

3 101 365 18K 388

Download Image

ϻг_ϻε @steventseeley

4 months ago

This is really nice research! karmainsecurity.com/dont-call-that…

0 21 106 9K 62

Nicolas Krassas @Dinosn

11 months ago

Attacking APIs using JSON Injection danaepp.com/attacking-apis…

0 23 60 4K 35

Gareth Heyes \u2028 @garethheyes

11 months ago

"Digging for XSS Gold: Unearthing Browser Quirks with Shazzer" is now live on YouTube! Discover powerful techniques to hunt XSS vulnerabilities with Shazzer. Watch now and start exploring browser quirks like a pro! youtube.com/watch?v=mLzxwm…