MrCyberSec @_MrCyberSec

Whoever youtube.com/@MrCyberSec Somewhere Joined August 2012

Tweets

323
Followers

114
Following

415
Likes

345

Ambionics Security @ambionics

10 months ago

We're proud to announce LIGHTYEAR, a tool that let you dump files, blind, in PHP, based on a new algorithm. ambionics.io/blog/lightyear…

0 94 248 28K 128

MrCyberSec @_MrCyberSec

a year ago

ВЗЛАМЫВАЕМ "Гипнолуч" | TINKOFF CTF 2024 | EASY WEB youtu.be/ERzbaKZ-A2A?si… через @YouTube

0 0 1 735 0

MrCyberSec @_MrCyberSec

a year ago

Решаем "Тред Ариадны" | TINKOFF CTF 2024 youtu.be/PFmkWJ_IWS0?si… через @YouTube

0 0 2 353 0

MrCyberSec @_MrCyberSec

a year ago

Прохождение #Linux-машины INTENTIONS.HTB, сложного уровня | #HackTheBox ... youtu.be/vBC65np3854?si… через @YouTube

0 0 3 264 0

MrCyberSec @_MrCyberSec

2 years ago

Привет друзья, подготовил и записал прохождение #Linux-машины DRIVE.HTB, сложного уровня | #HackTheBox | КАК... youtu.be/25YdlvODZeI?si… через @YouTube

1 0 5 356 0

MrCyberSec @_MrCyberSec

2 years ago

Is there a way to find out if application is running PHP version < 8? - phpinfo is NOT available - Errors are suppressed #php #bugbounty #hackers #hunters #cve

0 0 0 387 0

The easiest way to find a max-impact desync vulnerability in 2024: 1. Create a novel desync technique 2. Add it to a tool like HTTP Request Smuggler 3. Scan a bunch of systems and see what sticks. The only tricky step is #1 and there's a new tool to help with this 1/2

2 84 373 36K 256

slonser @slonser_

2 years ago

A writeup analysis of a simple logical vulnerability at @googlechrome for which @GoogleVRP paid me $16,000. Link: blog.slonser.info/posts/cve-2023… P.S. I have very few subscribers, so I am grateful for every repost #0day #Chrome #GoogleVRP #CVE

4 158 546 50K 256

ProjectDiscovery @pdiscoveryio

2 years ago

🚨 Explore the CVE jungle with ProjectDiscovery's cvemap! 🌐🛡️ A powerful tool integrating KEV, EPSS, POCs, and more data, for a comprehensive threat analysis. Stay on top of cybersecurity challenges with #cvemap! #CyberSecurity #HackWithAutomation blog.projectdiscovery.io/announcing-cve…

2 72 270 26K 101

MrCyberSec @_MrCyberSec

2 years ago

Прохожу задание UNDER CONSTRUCTION на Google CTF 2023 youtu.be/7ichp49Xk18?si… через @YouTube

0 0 1 217 0

MrCyberSec @_MrCyberSec

2 years ago

Yay, I was awarded a $100 bounty on @Hacker0x01! hackerone.com/mads3c #TogetherWeHitHarder

0 0 2 199 0

MrCyberSec @_MrCyberSec

2 years ago

Was avoiding BB for too long. Let’s go! Yay, I was awarded a $250 bounty on @Hacker0x01! hackerone.com/mads3c #TogetherWeHitHarder

0 0 2 182 0

sagitz @sagitz_

2 years ago

We found two 0-day vulnerabilities in @ubuntu kernel and it all started by reading descriptions of old CVEs 📖 Thread about the discovery of #GameOverlay 🧵👇🏼

14 443 2K 365K 482

Download Image

Gareth Heyes \u2028 @garethheyes

2 years ago

Universal MXSS. Works in all browsers and is likely to bypass lots of filters because title is both an SVG and HTML tag. Briefly checked DOM Purify and it looked okay.

9 94 417 53K 225

Download Image

MrCyberSec @_MrCyberSec

2 years ago

Check out my latest article: [Write-Up] HackTheBox: Visual linkedin.com/pulse/write-up… via @LinkedIn

0 0 0 133 0

Alex Xu @alexxubyte

2 years ago

What happens when you type a URL into a browser? The method to download the high-resolution PDF is available at the end. Let’s look at the process step by step. Step 1: The user enters a URL (bytebytego .com) into the browser and hits Enter. The first thing we need to do is to…

44 979 4K 930K 3K

Download Video

MrCyberSec @_MrCyberSec

2 years ago

I'm officially certified! Hurrah! #burpsuitecertified

0 0 1 114 0

Corben Leo @hacker_

2 years ago

I've made $500k+ from SSRF vulnerabilities. Here are my tricks:

84 1K 4K 430K 5K

Download Image

Sergey Toshin @_bagipro

2 years ago

[1/4] If you have an Android app that you really want to reverse, but all constants are obfuscated, this advice may save tons of time

15 181 890 141K 830

Download Image

Wiz @wiz_io

2 years ago

🚨 BREAKING: History written with just 9 lines of code! We've discovered #PyLoose, the FIRST documented Python-based fileless attack targeting cloud workloads. See the power of 9 lines of Python code below 👇🏽