Maxpnl retweeted
Un nostro membro, @Maxpnl2, racconta di come ha trovato una falla di sicurezza abbastanza grave nell’applicazione Desktop Telematico della @Agenzia_Entrate. fibonhack.github.io/2021/des…
Maxpnl retweeted
No books as far as I know. But @lucacarettoni and others have done a great job collecting info at github.com/doyensec/awesome-….
Maxpnl retweeted
Done with subdomain enumeration? here is how you can get more assets related to your target from the SSL certificates of found subdomains using #httpx
#hackwithautomation #assetdiscovery #recon #subdomains #bugbountytips
Maxpnl retweeted
The original title of my SSRF research was "How I made 70k$ in 3 months". After some negative feedback, I switched to "SSRF considered harmful". And now @veorq hates me ☹️
Maxpnl retweeted
If you’ve enjoyed my CTFs and haven’t yet tried my other challenges please take a look at CTFchallenge.co.uk ( @CTFchallenge ) . There’s currently 9 challenges with 64 flags to find. Each challenge is built like a full size business full of real world vulnerabilities.
Maxpnl retweeted
Chip-based payment cards are supposed to make it infeasible for skimmers or malware to clone your card when you pay for something by dipping the chip vs. swiping the stripe. But recent breaches at U.S. merchants suggest much may depend on where you bank. krebsonsecurity.com/2020/07/…
Maxpnl retweeted
🇬🇧 Together with a few awesome Youtuber (@LockPickingLwyr , @thelocklab , @LockNoob1 , #TallanPick), are giving away a Summer Sale ZIEH-FIX® Elektro - Pick III!
gleam.io/423YJ/ziehfix-elekt…
valid until: 30.07.2020
#giveaway #win #wendt #ziehfix #locksmith #lockpicking #pickgun
Maxpnl retweeted
Reverse Engineering Firmware (in Mice) :
Part 1 : Analyzing the USB Controller's Firmware : 8051enthusiast.github.io/202…
2 : Decrypting the Optical Sensor Firmware : 8051enthusiast.github.io/202…
3 : Streaming Video from the Mouse : 8051enthusiast.github.io/202… credits @8051Enthusiast
Maxpnl retweeted
JSshell : A JavaScript reverse shell for exploiting XSS remotely or finding blind XSS (Unix & Windows OS) : github.com/shelld3v/JSshell
(Inspired from JShell: Get a JavaScript Shell with XSS : github.com/s0md3v/JShell by @s0md3v
(which uses the method demonstrated by @brutelogic ))
Maxpnl retweeted
Watch me attempt to explain HTTP Request Smuggling in 3 minutes, in a collaboration with @Hacker0x01: hackerone.com/bug-break-eng
Maxpnl retweeted
I spent a lot of time working on this but I think it is done for now.
Today I am releasing my pentesting template that I use in Joplin. It contains a lot of my notes that I used in the PWK and on current engagements. You can find it on my Github here: github.com/tjnull/TJ-JPT
Maxpnl retweeted
Well it is live... Basic post answering some of the frequent questions I get asked in DM's daily. More posts to come shortly
blog.oath.ninja/basic-bug-bo…
#bugbounty #bugbountytip
#bugbountytips #infosec
Maxpnl retweeted
🔥Find OpenRedirect Vulnerabilities in Bulk !
OpenRedireX : An Asynchronous Fuzzer for testing Openredirect issues
Initially @nullpxl and I coded this for the output produced by ParamSpider + GF ,
Now releasing it as a standalone repository !
Github : github.com/devanshbatham/Ope…
Maxpnl retweeted
Advanced Javascript injections : Amazon XSS to full account takeover
medium.com/@adam.adreleve/ad… #bugbounty #bugbountytip #tbbhunter
Maxpnl retweeted
DC502 meeting will be at 7PM Wednesday night reachable at meet.jit.si/DC502 guest speaker @mwlauthor author of SNMP Mastery (some call it The Networknomicon) see you there!
amazon.com/dp/1642350370/ref…
Maxpnl retweeted
I've found a nice bug in @gitlab and blogged about the details:
about.gitlab.com/blog/2020/0…
#langsec #parserdifferentials
Maxpnl retweeted
c-sharp-memory-injection : A set of scripts that demonstrate how to perform memory injection in C# : github.com/pwndizzle/c-sharp…
Changeling : It can allow you to build dynamic payloads without having to constantly recompile : github.com/coffeegist/change…
Demo : github.com/coffeegist/change…
Maxpnl retweeted
Slides for "Attacking Secondary Contexts in Web Applications" - docs.google.com/presentation…
Maxpnl retweeted
Buffer Overflows Made Easy (8 parts video series by @thecybermentor ) : youtube.com/watch?v=qSnPayW6…
1. Spiking
2. Fuzzing
3. Finding the Offset
4. Overwriting the EIP
5. Finding Bad Characters
6. Finding the Right Module
7. Generating Shellcode
8. Root!
