Sektor (@Debug_sec) header
Sektor (@Debug_sec) profile picture

Sektor

@Debug_sec

it takes a little bit of insanity to succeed

Joined January 2023
  • Tweets7.5K
  • Following1.5K
  • Followers709
Replying to @commando_skiipz
some companies are still behind
Image from Sektor (@Debug_sec)
1
19
i think for now, if you can hide your php version, you might be safe, till the fix comes out, i don't know, i'm just guessing.
Image from Sektor (@Debug_sec)
2
686
hmm
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 21
i just built a python that can help anyone test on domains to see if there are vulnerable to this php vuln and so far, i got one target vulnerable to it, i just had to test for just few domains, all for educational purposes.
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
6
2,833
i just built a python that can help anyone test on domains to see if there are vulnerable to this php vuln and so far, i got one target vulnerable to it, i just had to test for just few domains, all for educational purposes.
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
4
1
1
33
12,575
Replying to @Debug_sec @IntCyberDigest
I had to also confirm from ChatGPT, I’ll love to share the exploit with a well known white hat hacker for more validation
Image from Sektor (@Debug_sec)
352
Replying to @IntCyberDigest
I don’t, but I think I was able to produce the exploit, I’m still doubting it
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
2
4,611
The END.
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 21
This is a proof that i ran on a local environment
Image from Sektor (@Debug_sec)
2
1
18
17,366
This is a proof that i ran on a local environment
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 21
i haven't tested the exploit on any organisations and i won't do so, but i was able to create it and also testing it on a local environment and it worked.
Image from Sektor (@Debug_sec)
1
9
21,322
i haven't tested the exploit on any organisations and i won't do so, but i was able to create it and also testing it on a local environment and it worked.
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 21
i think i did it @Zaddyzaddy
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
6
6,682
i think i did it @Zaddyzaddy
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 21
sending more screenshots
2
1
8
7,370
Replying to @Zaddyzaddy
@Zaddyzaddy I made some changes to your prompt, then I changed models and I was able to create the exploit
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
4
714
Replying to @BensonDynasty_
@BensonDynasty_ can you see that the agent did so, @r007User see your RCE
Image from Sektor (@Debug_sec)
Sektor (@Debug_sec) profile pictureSektor@Debug_secOct 20
Register with role=seller via mass assignment (PWN-021) 2. Login → OTP sent to PwnMail inbox 3. Read OTP via mailbox IDOR /mail/:token (PWN-004, no auth required) 4. Verify OTP → seller session established 5. POST /register-seller to set isSeller=true 6. Hit the SSTI endpoint
2
1
1
8
1,048
hello @r007User , nice one i had fun, i'll drop other vulns soon.
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
2
1
5
375
Done and Dusted.
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
11
322
Level 5 has a very tricky stuff, first of all, to solve it despite using the right prompts, you have to logout first, because while being logged into your account, you must have tried so many prompts that didn't worked and if you still tried the right one, it won't work.
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
1
4
395
english version too didn't work on level 3
Image from Sektor (@Debug_sec)
Image from Sektor (@Debug_sec)
1
78
Load more