Currently working on Lups AI | Founding Engineer | Founded: @Carnagebot @MinterSuite
Dubái, Emiratos Árabes Unidos
Joined July 2015
- Tweets591
- Following254
- Followers992
- Likes313
Alex retweeted
Honestly what a time. And it's crazy to me that reselling is still profitable to this day... Still remember the days when we were using open source PHP scripts to generate Adidas ATC links...
This scene has taught me more than any master degree or corporate job possibly could. We were building and iterating faster than the engineering teams of the brands we were botting and the companies responsible for their infrastructure - at a fraction of the team size.
Nothing will beat the rush of deploying a last minute update to thousands of users or being the only bot hitting a drop.
The sheer amount of ingenuity required from devs of this community to find ways to beat the competition and get the slightest edge was just crazy and led to some insane finds from bypasses to undocumented APIs to admin tokens... the list goes on.
And to see some great talent go on to build even greater things is just amazing. I'm not surprised in the slightest way.
Alex retweeted
Easy $400K+ success by Minter Suite with Zereborn
We cleared 20% + of this drop ALONE 💎
Like & RT for a free 1 SOL giveaway. Ends in 24 hours ⏰
Alex retweeted
Ok fam. I’m giving away TWO free tickets to my course which takes place in two/three weeks.
All you have to do to win is like, retweet this tweet, and reply with “tbhmlive.com!”
I’ll pick winners next week!
If you haven’t seen my course, check out the link!
Alex retweeted
thanks! i use my own tool for JS monitoring :-)
check out @alex_vec blog post about monitoring JS files alexvec.github.io/posts/moni…
Alex retweeted
Answering my web #AppSec interview question from the other day!
Question 55: What is formula injection and how might it be exploited?
Formula injection, also known as "CSV Injection" occurs when an attacker can insert Excel-like formula (e.g. =1+1) into an application's CSV export functionality. Since most CSV files are opened in an Excel-like program, the formula will execute instead of displaying the raw data.
This can be exploited by including a malicious formula which executes OS commands, for example the following which opens notepad.exe:
=cmd|'/C notepad'!A1
Other exploits can include data exfiltration via clickable links or DNS lookups.
Formula injection is a relatively controversial vulnerability, since the actual exploitation takes place entirely on the victim's computer, and not within their browser (like XSS). In addition, multiple warning popups generally appear when a user opens a document containing executable payloads, and the user must "willingly" enable their functionality.
#InfoSec #Cybersecurity #BugBounty #Hacking
Alex retweeted
Retweeting for anyone that missed this gem 🚀
LinWinPwn - Active Directory Vulnerability Scanner
-
Scan with the help of impacket, bloodhound, crackmapexec, ldapdomaindump, lsassy, smbmap, kerbrute, adidnsdump, and more.
-
Repo: github.com/lefayjey/linWinPw…
-
-
#CyberSecurity #infosec #CTF #windows #AD #bugbountytips
ALT linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks. The script uses a number of tools and serves as wrapper of them. Tools include: impacket, bloodhound, crackmapexec, ldapdomaindump, lsassy, smbmap, kerbrute, adidnsdump, certipy, silenthound, and others. linWinPwn is particularly useful when you have access to an Active Directory environment for a limited time only, and you wish to automate the enumeration process and collect evidence efficiently. In addition, linWinPwn can replace the use of enumeration tools on Windows in the aim of reducing the number of created artifacts (e.g., PowerShell commands, Windows Events, created files on disk), and bypassing certain Anti-Virus or EDRs. This can be achieved by performing remote dynamic port forwarding through the creation of an SSH tunnel from the Windows host (e.g., VDI machine or workstation or laptop) to a remote Linux machine (e.g., Pentest laptop or VPS), and running linWinPwn
Alex retweeted
🚨🚨🚨 Our biggest update is now available for all Banzai users. To celebrate the release and our success from last month, we will be hosting a limited public restock.
Join us on Sunday 5th to celebrate with us! 🔜
Alex retweeted
20 3DS opened at the same time sadly emptied Slt Takers CC in Seconds 🤭
@Carnagebot just shredded again
@NexosProxies @kochclub_xyz
All for @CookingBoysACO
Alex retweeted
@Carnagebot does bits! again! thanks @DevJohnDoe crazy work!
C: @Venom_Cooks @Success_Venom
P: @VenomSupply (crazy working Resis for Akaimi)
OC: @VenomSupply (for faster Captcha solving)
Slts Member are happy!
Want some too? -> ✉
Alex retweeted
Thank you @Carnagebot , @CarnageSuccess , @MannyReseller and @DevJohnDoe for your excellent work! This bot does not get the credit it deserves.
Alex retweeted
@nikelondon @Nike how do you feel about @OffspringShoes smashing all these boxes to ‘prevent reselling’ ?
Alex retweeted
Constant Cookout with @Carnagebot
Shoutout to @DevJohnDoe @wenameless & the other staff members, wouldn't be possible without you guys💜
Much more success through my drop ship addresses 📦
Date Joined : Oct 2020📅
Total Profit so far : £15,000+ 💸
Success Photo below 👨🍳
Alex retweeted
Carnage Cookout💸 @Carnagebot
Date joined - 22/04/21 (Less than 2 months) Also first bot.
Total profit made so far : 7/8k Estimate ;)🚀
Success flex pic 👇👇👇
