cvebase @cvebase

Joined September 2020

Tweets

242
Followers

780
Following

444
Likes

654

Zellic @zellic_io

3 years ago

New blog post! An overview of the important changes Proof-of-Stake will bring to Ethereum post-merge, and what developers should be aware of to secure their smart contracts. Read it here: blog.zellic.io/2022/07/07/eth…

0 10 27 0 5

Joona @joohoi

4 years ago

ffuf v1.4.0 has been released! This is a release with a ton of bugfixes and few major new features from community contributors. And a new mascot! It's now official. A short description of the fixes and changes follows in a 🧵 below.

6 93 345 0 31

Download Image

scanfactory_io @scanfactory_io

4 years ago

#BugBounty #Recon #Dataset contains recon data for public bug bounty programs. github.com/ARPSyndicate/b… #BugBountytips #infosec

0 40 87 0 38

Julien | MrTuxracer 🇪🇺 @MrTuxracer

4 years ago

So here's the first CVE of my #BugBounty collection: It's an unauth XSS affecting SAP Knowledge Warehouse aka CVE-2021-42063. The bug itself isn't super thrilling, but the advisory tells you why I'll no longer disclose #security vulns to SAP. seclists.org/fulldisclosure… (1/2)

5 28 160 0 37

Somdev Sangwan @s0md3v

4 years ago

smap - Shodan meets Nmap😎🤙 Right now this setup: - scans 5 hosts/second - gives vulnerability + service data (cpe+protocol+name) - can mimic nmap as shown in the video

13 100 426 0 127

Download Video

Ostorlab @OstorlabSec

4 years ago

If you have ever wished you could run your Nmap, nuclei, OpenVAS and Tsunami from a single command and access all the results in a single place. You should check this new open-source tool. blog.ostorlab.co/ostorlab-open-… #OpenSource #CyberSecurity

0 12 13 0 4

Min Jang @skensita

4 years ago

Now, you can see the Hall of Fame of the Samsung Mobile Security Rewards Program. security.samsungmobile.com/hallOfFameInfo…

0 5 21 0 2

Trickest @trick3st

4 years ago

Releasing our latest project, CVEs! A constantly updated collection of 𝘢𝘭𝘮𝘰𝘴𝘵 every publicly available CVE PoC. 👉 Browse, find a PoC, and test away! 👉 Search for a specific product. 👉 Watch the repo to be notified when new PoCs go public! github.com/trickest/cve

3 82 228 0 69

Ming Chow @0xmchow

4 years ago

If anyone wants practice with packet analysis, here’s a lab I give to my Security class each semester. Includes a real PCAP from @defcon #PcapsOrItDidntHappen github.com/tuftsdev/Defen…

11 176 599 0 230

Emil Lerner @emil_lerner

4 years ago

I just posted a write-up on how I leaked uninitialized memory (e.g., other users' HTTP requests/responses) from Fastly using a bug in the H2O webserver. Also, there you can learn a fraction of how HTTP/3 + QUIC works) medium.com/@emil.lerner/l…

14 267 810 0 194

Nicolas Krassas @Dinosn

4 years ago

Infosec chap: I found a way to hijack your web accounts, turn on your webcam from Safari – and Apple gave me $100k go.theregister.com/feed/www.there…

3 21 123 0 32

Fabio Viggiani @fabio_viggiani

4 years ago

You're a better hacker if you know how to build the thing you're trying to hack. Create labs, install stuff, configure it, breake it from the inside. Then apply that knowledge when attacking from the outside. You'll see clear flaws once you really know how it works.

7 99 582 0 43

cvebase @cvebase

4 years ago

Bought this course and it’s a steal at $50… This is a full-transparency walkthrough of how @HusseiN98D approaches his bug bounty targets and packed with practical tips. Get it while the sale is still live!

Hussein Daher @HusseiN98D

4 years ago

39 88 389 0 143

Download Image

0 1 8 0 0

shubs @infosec_au

4 years ago

Our team took apart Solarwinds Web Help Desk to discover some serious issues (hardcoded credentials, arbitrary HQL evaluation) - CVE-2021-35232 - we explain the discovery and exploitation process in our blog post: blog.assetnote.io/2022/01/23/sol…

3 61 197 0 38

Insomni'hack @1ns0mn1h4ck

4 years ago

Registration for Insomni'hack 2022 online TEASER is now OPEN: teaser.insomnihack.ch/accounts/regis… Teaser will run for 24 hours, starting Jan. 29th @ 12:00 UTC. #INS22 #CTF

1 26 30 0 0

cvebase @cvebase

4 years ago

Just received this handy CTF cheatsheet/book by @bishopfox @AndyDoering "Pocket Guide for Friendly Remote Admins". Thanks!

0 1 10 0 1

Download Image

thaddeus e. grugq @thegrugq

4 years ago

I made another video. This time a run down on cyber, cyberwar, and cyber war. Is cyberwar war? And what is “war” anyway? All these are addressed in the video. Enjoy! youtube.com/watch?v=hLu1Fn…

9 46 147 0 58

Rene Freingruber @ReneFreingruber

4 years ago

Today I'm releasing my JavaScript/v8 Fuzzer JS Raider. I developed the fuzzer for my master thesis and later improved the code for the "Fuzzilli Research Grant Program". You can find the source code, results and my key learnings in my blog post at: apt29a.blogspot.com/2022/01/fuzzin…

5 149 384 0 61

shubs @infosec_au

4 years ago

A few months ago, we discovered a post-auth SSRF in VMWare Workspace One Access - CVE-2021-22056 - which allowed you to steal an admin JWT via CSRF or request arbitrary URLs. Check out our blog post! blog.assetnote.io/2022/01/17/wor…

0 56 159 0 34

erbbysam ㋬ @erbbysam

4 years ago

New blog post: Why I broke your subdomain recon pipeline last night (or why tls.bufferover.run is moving from free to free*) blog.erbbysam.com/index.php/2022…