Epictetus @_3P1C

Bug Bounty Hunter | Occasional CTF Player | https://t.co/sYrWhq6I9T /proc/self/cwd Joined April 2019

Tweets

452
Followers

108
Following

601
Likes

1K

Jeremy Blackthorne @0xJeremy

3 years ago

From a VR student today on our ROP chain lessons. I'm dying 😂: "This week's been like"

19 636 2K 0 204

Download Video

I found some permission issues when hacking Apple CloudKit. I wrote about three of them @detectify labs, one where I accidentally deleted all shared Apple Shortcuts. labs.detectify.com/2021/09/13/hac…

17 188 748 0 83

Download Image

John Hammond @_JohnHammond

4 years ago

18 44 378 0 40

Alisa Esage Шевченко @alisaesage

4 years ago

Starting to release my own Awesome Exploits ⭐️ collection of security research links: workflowy.com/s/awesome-expl… Part 1/n: Virtualization with Oracle VirtualBox and Microsoft Hyper-V

1 43 214 0 47

kmkz @kmkz_security

4 years ago

Do you remember the #ios14 FS bug in wifid and the excellent paper from @ZecOps that provided some exploitation ideas? Our trainee @o1mate1 worked on it as well and provide a complete and full analysis on it + bonus ;) ictexpertsluxembourg.lu/technical-corn…

0 46 102 0 19

Rémi GASCOU (Podalirius) @podalirius_

4 years ago

[thread]👇Here is 54 context-free payloads for accessing the os module in Mako templates when you have a Server Side Template Injection. Any of these paths allows access to the os module directly! podalirius.net/en/articles/py…

3 9 32 0 3

Evren @evrnyalcin

4 years ago

I have just released my new tool, JsPanda, helps you hunt for prototype pollution vulnerability. #appsec #bugbountytips

RedSection Labs @redsection_labs

4 years ago

I have just released my new tool, JsPanda, helps you hunt for prototype pollution vulnerability. #appsec #bugbountytips

0 4 12 0 2

Download Gif

1 6 30 0 5

PT SWARM @ptswarm

4 years ago

🙈🙉🙊Citrix has removed the acknowledgement of our researcher Mikhail Klyuchnikov who discovered and reported CVE-2019-19781 - the Citrix ADC RCE! @citrix we will be pleased to hear your response. Current: support.citrix.com/article/CTX267… Mar 2021: web.archive.org/web/2021032109…

22 99 255 0 11

Download Image

Paulos Yibelo @PaulosYibelo

4 years ago

Parameter Pollution: PHP internally uses parse_str() to parse parameters so it sees the char "[" & "_" as the same. PHP by default will use the last param as valid. In cases PHP is running on backend but front end validates the param, we can smuggle fake params to php. #BugBounty

8 226 776 0 150

Download Image

Pomme @pxmme1337

4 years ago

#bugbounty #idor

7 47 343 0 3

Download Image

Olivier Beg @smiegles

4 years ago

1 1 23 0 0

Download Image

Bhavuk Jain @bhavukjain1

4 years ago

First Video 👨‍💻 How to bypass Jailbreak detection using Hopper Disassembler in iOS apps Link: youtu.be/fW8ZleDki4U

8 112 404 0 86

Download Image

RyotaK @ryotkak

4 years ago

I published an article about remote code execution in cdnjs that could allow tampering of 12.7% of all websites on the internet. blog.ryotak.me/post/cdnjs-rem…

15 296 679 0 112

Orange Tsai 🍊 @orange_8361

4 years ago

It looks like Microsoft finally fixed all my Exchange vulnerabilities (including Pwn2Own bugs) ! Here is a small spoiler - You can't imagine how amazing it is when I found Exchange still suffered from Padding Oracle Attack 😻 - blackhat.com/us-21/briefing… #BHUSA #DEFCON

10 167 752 0 34

Sergey Bobrov @Black2Fan

4 years ago

PayPal CSP Bypass <script type="application/x-component" data-component=paypal-checkout> alert(document.domain) </script> <script src="//www.paypalobjects.com/api/checkout.4.0.75.js"> </script>

11 157 662 0 125

tmp.0ut @tmpout

4 years ago

We are pleased to announce tmp.0ut Vol. 1 tmpout.sh/1/

28 699 2K 0 290

Download Image

Robert Chen @NotDeGhost

4 years ago

Finally got around to doing a write-up: Breaking GitHub Private Pages for $35k This was my first and biggest bounty. Found with @ginkoid on @Hacker0x01 :) #togetherwehitharder robertchen.cc/blog/2021/04/0…

12 380 1K 0 206

‌Renwa @RenwaX23

4 years ago

CTF's these days Unsolvable crypto challenge Guess the flag location Review C code for web chall Buy Amazon s3 bucket to solve a challenge Release hints after solve Author increases his sleep to 20 hours a day in the ctf Use old chrome version and get pwned by 1-day 8 misc 1 web