gweeperx (@gweeperx) header
gweeperx (@gweeperx) profile picture

gweeperx

@gweeperx

Wanna Be Security Researcher | Mediocre Red Teamer | PenTester My Ass | Sarcastic Bastard | Sacrilegious | Foulmouthed | Tainted | G00n | Boggy | One More Clown

 Greece
Joined August 2013
  • Tweets1.4K
  • Following911
  • Followers1.1K
154Media
Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)Photo by gweeperx (@gweeperx)
gweeperx retweeted
gweeperx (@gweeperx) profile picture
gweeperx@gweeperx17 Mar 2024
The domains listed below are available for purchase: - sex.zip - defence.zip If you're interested, please reach out to me for further details. Thanks, #Domains #domainsforsale
1
211
I have been having issues with #GPT4 all day @OpenAI not responding to any prompt. Since 9am Chicago time this morning, has anyone else been having this issue with #ChatGPT #OpenAI #OpenAIChatGPT at this rate I will never solve 4+5
Image from t2sssxxas (@mindofgrover)
1
2
7
462
#BlackFriday explained.
Image from steveyp (@stevenparnell75)
16
147
8
902
My favorite bug among the vulnerabilities I presented today! 😆 The original intent was to compare the password. However, the developer copy-and-pasted the code but forgot to replace the variable name. That leads to the Authentication Bypass on IIS.
Image from Orange Tsai 🍊 (@orange_8361)
46
501
45
2,552
gweeperx retweeted
v4ensics (@v4ensics) profile picture
v4ensics@v4ensics6 Jun 2022
#Phishing site targeting @winbank was just spotted. The initial link contained in the phishing e-mail is h[t]tps://gmmusic.com.br/IN. Link redirects the potential victim to h[t]tps://tpdsdofuturo.com/piraeusbank/auth/login
Image from v4ensics (@v4ensics)
3
4
Confirmed! Masato Kinugawa demonstrated a 3-bug chain of injection, misconfiguration and sandbox escape on Microsoft Teams to earn $150K and 15 Master of Pwn points.
Image from TrendAI Zero Day Initiative (@thezdi)
1
25
5
130
Awesome research!
Emil Lerner (@emil_lerner) profile pictureEmil Lerner@emil_lerner31 Jan 2022
I just posted a write-up on how I leaked uninitialized memory (e.g., other users' HTTP requests/responses) from Fastly using a bug in the H2O webserver. Also, there you can learn a fraction of how HTTP/3 + QUIC works) medium.com/@emil.lerner/leak…
A story of leaking uninitialized memory from Fastly

A story of leaking uninitialized memory from Fastly

The post go through a QUIC (HTTP/3) implementation bug in the H2O webserver. The bug is interesting as it affected Fastly, a well-known…

medium.com
1
29
1
165
Giveaway time! I will send 3 copies of my hacking workshop done at @THREAT_CON. That's +12 hours of content 🔥 ✅ Like 🔁 RT the post ✅ Follow 👉🏿 Giveaway ends at reaching 20k Followers 🌟
Image from Hussein Daher (@HusseiN98D)
130
636
7
924
gweeperx retweeted
mr.d0x (@mrd0x) profile picture
mr.d0x
@mrd0x17 Nov 2021
Here I bypassed Defender AV by making: .eyb files as .exe .faq files as .dll I'm sure this can work on other security solutions and for many other blacklisted techniques. (1/2)
Image from mr.d0x (@mrd0x)
25
489
22
1,487
gweeperx retweeted
mr.d0x (@mrd0x) profile picture
mr.d0x
@mrd0x16 Nov 2021
If you rename procdump.exe to dump64.exe and place it in the "C:\Program Files (x86)\Microsoft Visual Studio\*" folder, you can bypass Defender and dump LSASS.
Image from mr.d0x (@mrd0x)
46
1,097
64
3,243
#PROTIP: Was playing with an $EDR lately which I got access via a friend. So, this $EDR was actually pretty good at hooking several NTAPI/syscalls. Most of all it was hooking ntdll's NtCreateFile which is mostly used to re-map the .text section of ntdll to disable hooks (1/3)
6
51
133
Made a .NET DCOM lateral movement tool which is currently able to bypass MS Defender and is "diskless" intended for use with Cobalt Strike. gitlab.com/theepicpowner/dco… #redteam #csharp #PenTest #cobaltstrike
dGgzM3AxY3Awd24zcg== / DCOM_AV_EXEC · GitLab

dGgzM3AxY3Awd24zcg== / DCOM_AV_EXEC · GitLab

GitLab.com

gitlab.com
47
1
87
gweeperx retweeted
ً (@hypervis0r) profile picture
ً@hypervis0r18 Sep 2021
Guys I’m 2000 dollars in debt I need a job
5
15
47
All researchers have heard of Google Dorks, but much less well known are the dorks for #Github, #Shodan, #DuckDuckGo, #Bing, #VirusTotal... Here is my small collection with links to a list of dorks for various search tools. github.com/cipher387/Dorks-c… #osint
Image from Cyber Detective💙💛 (@cyb_detective)
14
506
14
1,220
gweeperx retweeted
Vulmon (@vulmoncom) profile picture
Vulmon@vulmoncom13 Sep 2021
Google released 9 high severity Chrome vulnerabilities 2 of them have exploits in the wild: vulmon.com/vulnerabilitydeta… vulmon.com/vulnerabilitydeta… CVE-2021-30632 CVE-2021-30633 #Vulmon #CyberSecurity #InfoSec
CVE-2021-30632 Out of bounds write in V8 in Google Chrome…

CVE-2021-30632 Out of bounds write in V8 in Google Chrome…

Out of bounds write in V8 in Google Chrome before 93.0.4577.82 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

vulmon.com
10
26
I guess this is a new level of effort intezer.com/blog/malware-ana…
6
16
1
68
Yo, web hackers. Looking for a leg up in finding unplundered attack surface? Check out my new free and open source HTTP parameter name wordlist that is 20x bigger than anything around! github.com/the-xentropy/saml… Have fun breaking stuff. ;D #bugbountytip #bugbountytip #Hacking
GitHub - the-xentropy/samlists: Free, libre, effective, and data-driven wordlists for all!

GitHub - the-xentropy/samlists: Free, libre, effective, and data-driven wordlists for all!

Free, libre, effective, and data-driven wordlists for all! - the-xentropy/samlists

github.com
1
44
136
gweeperx retweeted
Coder (@_puncoder) profile picture
Coder@_puncoder31 Jul 2021
Don't waste your precious free time by sleeping on weekends. Sleep in business meetings, you will be actually paid for it.
2
19
3
66
Ever wanted to exploit Windows 10 with CVE-2021-31956? Obsessive about kernel memory layouts? research.nccgroup.com/2021/0… is now up focusing on exploit reliability, stability and detection! #windows
NCC Group Research & Technology (@NCCGroupInfosec) profile pictureNCC Group Research & Technology@NCCGroupInfosec17 Aug 2021
Blog: CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) - Part 2 - including thoughts on detection by @alexjplaskett research.nccgroup.com/2021/0…
Image from NCC Group Research & Technology (@NCCGroupInfosec)
8
107
3
260
EasyWSL turns Linux docker images into a Windows 10 WSL distro bleepingcomputer.com/news/mi…
5
8
Load more