thehackerish @thehackerish

Husband,Ethical Hacker,OSCP,CRTP,CRTE,CRTO... 🔴YouTube: https://t.co/f43ti2FFIj academy.thehackerish.com 0.0.0.0/0 Joined January 2013

Tweets

944
Followers

4K
Following

100
Likes

1K

thehackerish @thehackerish

2 years ago

This #BlackFriday, I am giving away my course "Hack like a white hat" for the first 1k students on Udemy. Available until 29th. Enroll, learn, and don't forget to leave a feedback! Enjoy: udemy.com/course/hack-li…

6 2 17 3K 3

thehackerish @thehackerish

2 years ago

Next week I will be in NYC. What places do you recommend for food? I heard fast food is a must try. Leave me your replies

1 0 3 727 0

thehackerish @thehackerish

2 years ago

Interesting...

0 1 2 695 0

thehackerish @thehackerish

2 years ago

🕵️‍♂️Love a good CTF with a twist?👀Dive into this video where I leverage log poisoning, unveiling the dark secret of a notorious corporation.🕵️‍♀️📽️ #CTF #LogPoisoning #MustWatch youtu.be/DwI76dOtgjk

1 1 4 443 1

Yassine Aboukir 🐐 @Yassineaboukir

2 years ago

extremely saddened by the tragic and deadly 6.9 magnitude earthquake that hit home in Morocco 🇲🇦 the death toll has already surpassed 2,000 (at time of writing) with more than 1400 injured. my sincere condolences and prayers to all the people and families victims of this…

14 7 99 13K 0

Download Image

Vincent Yiu @vysecurity

2 years ago

DevTunnels, blue are going to begin searching for DevTunnels.ms. Get ready ahead of time and use domains like: global.rel.tunnels.api.visualstudio\.com tunnels-prod-rel-tm.trafficmanager\.net *.app\.github.dev syonsecurity.com/post/devtunnel…

6 89 263 35K 112

thehackerish @thehackerish

2 years ago

I always had a background voice that some hacker will deface my apps when I was a developer. It was my main motivation to learn web hacking. Today, I am sharing how it's done so you secure yours. #webdevelopment #ethicalhacking youtu.be/FvpZkEHpF8g

1 1 5 578 1

Download Image

MDSec @MDSecLabs

2 years ago

In our latest post, @breakfix details how we were able to publish a malicious VSCode extension to the marketplace and leverage it for initial access during a red team mdsec.co.uk/2023/08/levera… vimeo.com/853281700?shar…

7 137 304 71K 79

vx-underground @vxunderground

2 years ago

We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/t5/microsoft-3…

68 677 2K 262K 233

thehackerish @thehackerish

2 years ago

Found an accessible SMTP server without authentication during an engagement. What do you think I did? 🤔

1 1 1 338 0

Download Gif

thehackerish @thehackerish

2 years ago

I never wanted having an Instagram account, and when I did, I will NEVER want to create one..

1 0 1 659 0

Download Image

thehackerish @thehackerish

2 years ago

I invest days prepping #redteam pretexts and scenarios, only to find that the customer's email policy blocks new domains🤦‍♂️ @Flangvik @domchell what's your strategy for maintaining a good domain reputation to use for upcoming engagements? Or just switch to social media?

7 7 39 11K 24

thehackerish @thehackerish

2 years ago

I think I just found a Cloudflare #XSS bypass, and customer trusted the WAF. The app was using jquery, so I leveraged it to get and run my own script. And the WAF saw nothing.

1 1 1 2K 1

thehackerish @thehackerish

2 years ago

#Pentesting guys out there, I have a GET param that gets injected into a HTTP call. I have path traversal and can only control the path of the backend API, not the hostname. I have direct access to the API, so fuzzing the API is irrelevant. Any exploitation ideas? RT for reach