psytester @psytester1

testing》ethical hacking》vulnerability》cve 🧱 don't ask me for malicious actions https://t.co/GRCRjgwQjd psytester.github.io Joined April 2020

Tweets

165
Followers

42
Following

5
Likes

9

psytester @psytester1

2 months ago

Lessons learned 😊 If users encounter a class global variable as a singleton when logging in... In a race condition this gonna grills the session management. Which SAST would identify this vulnerability while coding?

0 0 0 56 0

Download Gif

psytester @psytester1

2 months ago

Linux bash script creates variable by VAR=`eval echo ${USERINPUT}` where user controlled input is used What will happen? 😍

0 0 0 251 0

psytester @psytester1

4 months ago

Does it make sense to publish a CVE ID already requested in 2021 or 2022 for a vulnerability fixed in 2025? Yes it took that time.... and in meantime it's duplicated by vendor with own CVE-2024-...

0 0 0 229 0

psytester @psytester1

11 months ago

Information disclosure or Splunk feature(?) to fingerprint OS patch level psytester.github.io/SPLUNK_fingerp…

0 0 1 69 0

psytester @psytester1

11 months ago

I published a found Remote Code Execution in Entersekt Transakt secure gateway psytester.github.io/Entersekt_tran…

0 0 0 52 1

psytester @psytester1

12 months ago

I read "The MV3 Escape Artists" from @getsquarex about chrome extensions and thought "SquareX"? There was something! yes "DoubleX"! Is square the double of the double?🤭 No, I saw @AuroreFass talk at RuhrSec22 with her paper & slides aurore54f.github.io/publications/ The circle closes.

0 0 2 71 0

psytester @psytester1

a year ago

I need a break and will verify it once more, but it looks like I have found a #LFI in actual @splunk version (9.1.5) 😍 Yes, I'm still pissed off with experience about Splunk's GTC enforcement.... But I'm a professional and know what to do

0 0 0 93 0

Download Gif

psytester @psytester1

a year ago

Splunk Windows Path Traversal CVE-2024-36991 not only works on "/modules/messaging/" endpoint in vulnerable versions. All module names are usable, "/modules/nav/" and "/modules/paginator/" are working as well. Fully unauthenticated access according to its CVSS score. 👍

0 0 0 104 0

psytester @psytester1

a year ago

Do you know this? Pissed off about issues meets dissatisfaction about not being able to exploit a known RCE vulnerability. This becomes a boost for me. The adrenaline kicks because a completely different RCE has been achieved as PoC exploit. The day is saved ❤️

0 0 0 60 0

psytester @psytester1

a year ago

Huge thank you to c53elyas from @cure53berlin for the detailed writeup of ReportLab CVE. (Un)fortunately vulnerable version in older #SPLUNK releases can't be exploited. They use own internal safeToColor() wrapper which calls colors.HexColor() and stucks at line val=int(val,b)