Daly @_d4ly_

Tired, old and grumpy. UK Joined September 2021

Tweets

90
Followers

498
Following

71
Likes

516

SinSinology @SinSinology

2 weeks ago

NEED YOUR HELP! My Friend/Teacher Soroush (@irsdl) Is looking for a new company to join, you know him as the .NET-God, the guy who has popped exchange, sharepoint, has maintained ysoserial_.net for years, contributed to the exploitation scene numerous times, taught all of you…

15 127 243 72K 36

Daly @_d4ly_

3 weeks ago

As someone who has to to muck in with IR, thrunting and the like... it amazes me how many times it starts with with the most clearly dodgy looking phishing email. 😭

1 0 1 142 0

Daly @_d4ly_

4 weeks ago

Couple of weeks without finding a bug and I feel like I've forgotten everything I once knew. I need some #bugbountytips and some bug bounty courses ASAP.

1 0 5 373 1

Mustafa Can İPEKÇİ @mcipekci

2 months ago

"Execute After Redirect" vulnerabilities occurs when a server fails to halt execution after issuing a redirect to the client. This can lead to serious security flaws if developers rely on redirects without implementing proper access control on the content served post-redirect. I…

2 8 58 6K 32

Daly @_d4ly_

3 months ago

Absolutely dominated by @carbonmanx this Synack Red Team recognition period. Congrats on hitting TITAN, and absolutely steam rolling the UK leaderboard! #LegendInTheMaking

1 0 5 273 0

Daly @_d4ly_

4 months ago

Own up... which of you was it? 🤣

Ryan Barnett (B0N3) @ryancbarnett

4 months ago

Own up... which of you was it? 🤣

2 2 36 9K 7

Download Image

0 0 4 248 1

drop @dropn0w

4 months ago

🎉I’m excited to announce that I’ll be presenting my talk “𝐔𝐩 𝐚𝐧𝐝 𝐃𝐨𝐰𝐧 𝐓𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞: 𝐄𝐱𝐩𝐨𝐬𝐢𝐧𝐠 𝐇𝐢𝐝𝐝𝐞𝐧 𝐃𝐚𝐭𝐚 𝐟𝐫𝐨𝐦 𝐑𝐀𝐆 𝐒𝐲𝐬𝐭𝐞𝐦𝐬” at @_leHACK_ in Paris, France at the end of June. In this talk, I’ll demonstrate a technique I discovered…

leHACK @_leHACK_

4 months ago

1 0 1 1K 0

Download Gif

0 1 8 647 3

Daly @_d4ly_

4 months ago

It's the first time I've seen triager react poorly to a researcher complaining on X with a DM. I can imagine it does get a bit upsetting after a while. An interesting situation for @Bugcrowd to deal with. If the other way round, I am sure a researcher would be penalised.

0 1 9 1K 1

Sarah Young @_sarahyo

4 months ago

Okay so this is HUGE - our amazing AI red team have open sourced their AI red team labs so you can set up your own training! aka.ms/AIRTlabs @ram_ssk

8 349 1K 57K 1K

Daly @_d4ly_

5 months ago

Very few people I respect as much as @irsdl. What an an absolute legend. Can't wait for his training to come out, will be signing up ASAP.

2 0 8 1K 1

Kuldeep Pandya @kuldeepdotexe

5 months ago

If you want to test this out, you can check: mlxss.kuldeep.io Do let me know what worked :D

2 2 5 727 0

Kuldeep Pandya @kuldeepdotexe

5 months ago

After a lot of sweat and efforts, the Barracks Corp WarZone is live. I’ve always found the worst kind of vulns in an internal portal. Just like the Social WarZone, this one also contains realistic vulns from my own reports. Hope you all love this <3

Barracks @BarracksArmy

5 months ago

1 1 10 2K 0

Download Image

0 2 9 761 0

Synack Red Team @SynackRedTeam

6 months ago

💭 It all started during an assessment of a web application. In the latest Exploits Explained, Synack Red Team member "nerrorsec" recounts the discovery of a DOM-based XSS vulnerability that was patched…and then found in another product from the same company a year later.…

0 6 15 4K 8

Synack Red Team @SynackRedTeam

6 months ago

👀 Synack Red Team member Busra (@turakbusra) walks us through her discovery of an access control violation vulnerability that led to account takeover. Follow along → hubs.ly/Q03fZ7fR0

0 14 40 4K 24

Daly @_d4ly_

6 months ago

Good start to April with the @SynackRedTeam! 💪

0 2 156 4K 13

Download Image

Daly @_d4ly_

7 months ago

It's always nice to find SQLi with @SynackRedTeam as the triage and pay out is fast. It's even better when the bounties are paid at treble what they normally are. Check out the 300% targets!

0 3 233 9K 63

Download Image

Nicolas Krassas @Dinosn

9 months ago

Exfiltrate blind remote code execution output over DNS via Burp Collaborator. github.com/0xC01DF00D/Col…

0 18 72 5K 43

Guy Goldenberg @GuyGoldenberg

9 months ago

🚨CVE ALERT! While working with Nuclei @wiz_io, I discovered CVE-2024-43405, a vulnerability that bypasses template signature verification, potentially allowing malicious code execution on machines running Nuclei 🛡️ Here’s what you need to know: 🧵

9 77 326 72K 143

Download Video

BSides Birmingham (UK) @BrumBsides

9 months ago

📢 Call for Papers! Got a great idea? We want to hear it! Check out our tips to help your talk shine—whether you're a pro or a first-timer. Submit your talk by 30th Jan 2025 and join us for the first-ever BSides Birmingham on 3/5/25 #BSidesBirmingham #CallForPapers #CyberSecurity