cyber security enthusiastic / coding optimization problem solver ( competitive programmer )
Joined October 2021
- Tweets383
- Following1.3K
- Followers152
- Likes5.5K
Pinned Tweet
Today I'm happy to register my first #0day in kerio Webmail Server Which allowed me to steal admin credintials and doing any action in that server like adding new administrator, delete an admin,...
Details and write-up will be published soon:)
ุงูุญู
ุฏููู
#0days #cve #BugBounty
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
ูุฐุงุฑุฉ ุฃูุฑูุจุง :
ุฅุฐุง ุญุฑูุช ุนูู
ุฅุณุฑุงุฆูู ูุฃูุช ุชุนุงุฏู ุงูุณุงู
ูุฉ
ูุฅุฐุง ุญุฑูุช ุนูู
ุงูุดูุงุฐ ูุฃูุช ุชุนุงูู ู
ู ุฑููุงุจ ุงูู
ุซููุฉ
ุฅุฐุง ุญุฑูุชู ูุชุงุจุงู ู
ุณู
ูู
ุงู ูุฃูุชู ุถุฏ ุงูุชุนุฏุฏูุฉ
ูุฅุฐุง ุญุฑูุชู ุงููุฑุขู ุงููุฑูู
ูุฃูุชู ุชูุนุจูุฑ ุนู ุฑุฃูู
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
ู
ู ุฃู
ู ุงูุนููุจุฉ ุฃุณุงุก ุงูุฃุฏุจ.
#ุงูุณููุฏ
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
ุงูููู
ุตูู ุนูู ู
ุญู
ุฏ ูุนูู ุขู ู
ุญู
ุฏ ูู
ุง ุตููุช ุนูู ุฅุจุฑุงููู
ูุนูู ุขู ุฅุจุฑุงููู
ูู ุงูุนุงูู
ูู ุฅูู ุญู
ูุฏู ู
ุฌูุฏ ุ ู ุจุงุฑู ุนูู ู
ุญู
ุฏ ู ุนูู ุขู ู
ุญู
ุฏ ูู
ุง ุจุงุฑูุช ุนูู ุฅุจุฑุงููู
ูุนูู ุขู ุฅุจุฑุงููู
ูู ุงูุนุงูู
ูู ุฅูู ุญู
ูุฏู ู
ุฌูุฏ.
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
The 16-year-old Palestinian child, Jana Zakarneh, was shot dead by lsraeli forces in Jenin during a military raid.
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
ุฑุณุงูุฉ ุญุตุฑูุฉ ู
ู ุณูู ุงูุฏูู ู
ุญู
ุฏ ุฅููุงู
ู
#ูุดุฌุน_ุงูู
ุบุฑุจ_ูููุชู_ููุฑุณูู
other uncommen message eventlistners that maybe vulnerable to cross window communication vulns ( like DomXSS , ...) :
addEventListener('messageerror', (event) => { });
onmessageerror = (event) => { };
- Resource :developer.mozilla.org/en-US/โฆ
#bugbountytip #xss
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
if they did this as a refusing the gov, then it's Ok, but wait, this is exactly what west trying to do from ages, Iran is an Islamic state, Women and their Hijab is a part of the Islam core, and they will destroy this core from inside, what a great chance! which country next?
This Post is from an account that no longer exists. Learn more
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
Good write up about how to use google dorking effectively
medium.com/@krishArse/friendโฆ
#bugbounty #bugbountytips
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
Prototype Pollution!!!!!, a less talked about bug with a greater impact.
Read my new blog "Prototype Pollution 101".
payatu.com/blog/akshat.singhโฆ
MouhannadlrX | ๐ก๏ธู
ูููููุฏ retweeted
The file photo shows Israeli forces arresting a Palestinian minor.
The Prisoners Affairs Commission says Israeli military forces have severely beaten two Palestinian minors in detention after brutally arresting them in the occupied West Bank and East al-Quds.
#IsraeliTerrorism
servers sometimes response with html attributes values between single quotes , but the html parser will always convert it to double quotes , so ...
if you inspect the page and saw your payload between double quotes and payloads with double quotes it's encoded , check page source code you may find sever reflect the payload between single quotes and the single didn't encoded
#bugbountytip #xss
If you got this error message when you pass urls to burp scanner "some of the specified URls to scan are out of scope" , even you sure that all urls in scope , so I was wrote simple script to solve this issue:
The cause of this issue when is when url hostname not ending with slash(/), like :
https://hostname?qs
instead of
https://hostname/?qs
That's seems that burp check hostname between double slashs and the first next slash :)
I hope @PortSwigger will solve it in the next version