Omair 🇵🇸 @w3bd3vil

Fuzzing Browsers and Offensive Security. #FreePalestine 🇵🇸 krashconsulting.com Hyderabad, India Joined July 2009

Tweets

3K
Followers

7K
Following

277
Likes

1K

Stephanie Hegarty BBC News @stephhegarty

a month ago

Shot in the head and chest. We investigated the killing of two-year-old Layan and six-year-old Mira. We also found many more cases of children shot in the head and chest in Gaza, from the beginning of the war right up until last month. bbc.co.uk/news/videos/cj…

550 4K 7K 336K 592

Omair 🇵🇸 @w3bd3vil

2 months ago

Pwnie Awards should only be for exploits, not something that only 5 eyes bought an exploit for. If the award is public the exploit should too.

0 0 3 410 0

Haifei Li @HaifeiLi

3 months ago

Details published research.checkpoint.com/2025/stealth-f…. To summarize: the "WorkingDirectory" problem within .url files. Oh, .url files, my old friend (I previously discovered another .url/IE 0day itw last year).. My thoughts/opinion: no organization should allow any inbound .url files in…

0 28 103 15K 46

Omair 🇵🇸 @w3bd3vil

3 months ago

Eid Mubarak 💔

0 0 2 274 0

Download Image

Ministry of Information and Broadcasting @MIB_India

4 months ago

In sensitive times like these, it is necessary to be wary of disinformation being spread on social media. Always verify any piece of news, image, or video before you forward. If you come across suspicious or misleading content, report it to @PIBFactCheck #FactCheck…

89 2K 3K 342K 153

Download Image

Linda Mamoun @mamoun_linda

4 months ago

Israel has not allowed a single ounce of food to reach 2.3 million people in eight weeks.

100 1K 2K 701K 82

Download Image

nick.eth @nicksdjohnson

5 months ago

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:

1K 6K 36K 5.7M 17K

Download Image

Al Jazeera Investigations @AJIunit

11 months ago

We expected to have to dedicate considerable resources to identify the soldiers featured in the photos and videos. What we found was that, for the most part, soldiers posted material in their own names on publicly accessible platforms.

619 15K 25K 1.6M 3K

Download Video

Omair 🇵🇸 @w3bd3vil

11 months ago

This was an easy Domain Admin on watchguard installations for internal PT, at least at one client. Setup ntlmrelayx and wait for watchguard to find your machine.

Nicolas Krassas @Dinosn

11 months ago

This was an easy Domain Admin on watchguard installations for internal PT, at least at one client. Setup ntlmrelayx and wait for watchguard to find your machine.

0 2 13 3K 4

0 0 3 506 0

Omair 🇵🇸 @w3bd3vil

a year ago

Chillin’ in q8

0 0 5 310 0

Download Image

Omair 🇵🇸 @w3bd3vil

a year ago

I like how github has evolved. This person is running his stealer through github commits/malicious repos. github.com/Rabchin/proxy-…

0 1 2 520 0

Omair 🇵🇸 @w3bd3vil

a year ago

This happened with me, while I was on an onsite assessment. I panicked, but eventually it worked out. Now I plan to pause updates, till the internet tests it out for me.

BleepingComputer @BleepinComputer

a year ago

This happened with me, while I was on an onsite assessment. I panicked, but eventually it worked out. Now I plan to pause updates, till the internet tests it out for me.

24 215 438 114K 113

0 0 2 456 0

Halvar Flake @halvarflake

a year ago

Writing good windows rootkits is hard. Always has been. Remember that some teams have development continuity all the way back to 2003-2005. And they push updates. But even great teams sometimes ship bugs. Fascinating to see that grounding 3 major airlines only means 10% off ...

9 32 176 18K 17

Omair 🇵🇸 @w3bd3vil

a year ago

Strangle the Falcon!

0 0 2 308 0

Omair 🇵🇸 @w3bd3vil

a year ago

You have TrendMicro, SentinelOne and Defender on every machine. But I only read web.config files.

0 0 1 374 0

[email protected] @0xdea

a year ago

Qualys does it again! #regreSSHion: #RCE in #OpenSSH's server, on glibc-based #Linux systems (CVE-2024-6387) qualys.com/2024/07/01/cve…

1 46 128 17K 26

BSides Singapore @BSidesSG

a year ago

Less than 3 weeks to close our call for paper. bsidessg.org/call-for-paper

0 8 10 2K 0

张惠倩 @momika233

a year ago

CVE-2024-4577 PHP CGI Argument Injection github.com/11whoami99/CVE…

1 45 163 13K 84

Omair 🇵🇸 @w3bd3vil

a year ago

It's fascinating to see that you need to a build a narrative of cyber espionage, circulate videos of oppression, Israeli prime minister's video etc. all at once to try and ban TikTok in US. We just do it! Not sure which is worse.