gorillaz @g0rx_gorillaz

Joined February 2015

Tweets

174
Followers

44
Following

602
Likes

843

10-K Diver @10kdiver

5 years ago

1/ Get a cup of coffee. In this thread, I'll walk you through the basics of leverage -- in our personal lives and in the companies we invest in.

268 2K 11K 0 6K

Download Image

The CVE-2019-18935 is a severe insecure deserialization vulnerability affecting #Telerik UI. Understand its impact + learn to safely patch your software in this post from @noperator: hubs.ly/H0mf7L-0 (With thanks to @mwulftange + @bao7uo)

2 61 136 0 20

Download Image

Jas502n @jas502n

6 years ago

CVE-2019-15107 Webmin RCE github.com/jas502n/CVE-20…

0 17 29 0 3

Download Image

Paul Taylor @bao7uo

6 years ago

Updated Telerik exploit github.com/bao7uo/RAU_cry… after @mwulftange great article on @codewhitesec blog. Also updated to work with latest versions in case of custom keys discovery. Thanks to @irsdl @gingeleski for feature inspiration. Props to @straight_blast @pwntester @olekmirosh

1 19 38 0 7

ghostlulz @ghostlulz1337

6 years ago

With new technologies come new vulnerabilities. Are you checking for graphQL API endpoints, if not your really missing out on a lot of fun. More info on my blog: medium.com/@ghostlulzhack… #bugbountytip #bugbountytips #infosec #OSINT #bugbounty #redteam #dfir #pentest #graphql

2 132 255 0 56

uɐpʇou@ ✸ @notdan

6 years ago

LEAKED: nginx 1.x PoC on-liner. Null-byte RCE overflow in nginx BLT/Stream curl -gsS victim.server.here/../../../%00/n…\<'protocol:TCP' -O 0x0238f06a#PLToffset |sh; nc /dev/tcp/localhost

Alisa Esage Шевченко @alisaesage

6 years ago

LEAKED: nginx 1.x PoC on-liner. Null-byte RCE overflow in nginx BLT/Stream curl -gsS victim.server.here/../../../%00/n…\<'protocol:TCP' -O 0x0238f06a#PLToffset |sh; nc /dev/tcp/localhost

13 298 564 0 9

49 522 1K 0 110

Anondran @AnondranCrypto

6 years ago

This aged so fucking well huh?

10 19 182 0 0

Download Image

Alvaro Muñoz @pwntester

7 years ago

1) github.com/0xACB/viewgen by @0xacb and 2) github.com/Illuminopi/RCE… by @jared_mclaren You can still use mine if app uses viewStateUserKey (CSRF) github.com/pwntester/View… Also @irsdl will soon release a ysoserial.net plugin supporting this and more. Stay tuned! (2/2)

0 26 65 0 5

André Baptista @0xacb

7 years ago

Just released viewgen, a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys or web.config files. All algorithms supported. TL;DR: Got a web.config file or LFI on ASP.NET? Pop a shell! github.com/0xACB/viewgen

11 353 859 0 87

Badcode @yigeban

7 years ago

Ruby on Rails From Arbitrary File Reading To Remote Code Execution Vulne... youtu.be/K5FdAVVeeb8

1 4 5 0 0

heige @80vul

7 years ago

Zimbra from XXE to RCE with Pocsuite3 youtu.be/QEMOQE_omg8

2 25 45 0 4

gorillaz @g0rx_gorillaz

7 years ago

I Stand with #EGGBOY

0 0 0 0 0

Alice @AAcidland

7 years ago

Devil's kiss

6 75 192 0 0

Download Gif

Chris Kubecka 🇵🇷🇨🇿🇳🇱 🇺🇦 secevangelism bsky @SecEvangelism

7 years ago

😂😂😂 found the DM @officialmcafee threated to sue me last year stating he has plenty of money for lawyers, 100 million, but his latest statement to the press after fleeing the US on possible tax charges, he's broke with a negatve income 🤔

12 21 112 0 1

Download Image

Bitstamp by Robinhood @Bitstamp

7 years ago

DID YOU KNOW: Hacking #Bitcoin with a 51% attack would require spending around $5.5M per day on electricity (if the cost of electricity is $0.05 per kWh). This is just the energy cost, the necessary equipment would cost billions. #WednesdayWisdom 💡

94 531 1K 0 12

Download Gif

Dan Bilzerian @DanBilzerian

7 years ago

Thailand

415 6K 32K 0 710

Download Video

Soroush Dalili @irsdl

7 years ago

Blog post on XOML deserialization has been updated with a working SharePoint RCE (using CVE-2018-8421): nccgroup.trust/uk/our-researc… @NCCGroupInfosec @pwntester