@jmp2esp

I like hacking and beer.

dnl-trpp.github.io
Joined December 2019
  • Tweets118
  • Following314
  • Followers21
1Media
🎉🎉
RSTLess group@RSTLessGroup18 Jul 2024
🎉Congrats to @jmp2esp for having his Master's thesis accepted at the @NG_AI_Safety workshop! 📎∇τ: Gradient-based and Task-Agnostic machine Unlearning arxiv.org/pdf/2403.14339 Joint work with researchers from @RSTLessGroup @caesar_one_ @mariasofiabuc @fabreetseo @gtolomei
1
48
Daniel Trippa retweeted
Intigriti
@intigriti27 Jun 2023
Our second winner is @jmp2esp 🎊 If you stumble into some interesting rabbit holes, include them in your writeup! 🐇 Read it here 👇 dnl-trpp.github.io/June-XSS-…
1
1
5
1,110
I found an Arbitrary File Read through a Pdf Export functionality! Read about it on my blog: dnl-trpp.github.io/Roadmap-t…
84
Came across an amazing AD pentest cheat sheet from @orangecyberdef Link for full resolution: orange-cyberdefense.github.i…
12
229
4
814
Daniel Trippa retweeted
Justin Gardner
@Rhynorater27 Oct 2022
4. How do all the pieces of authentication work? Is the application using cookies? Auth tokens in the headers? Both? Where do these values appear? I often use the Burp Plugin RequestMinimizer to help identify which pieces of the request are actually essential.
1
3
51
Daniel Trippa retweeted
Jack Halon@jack_halon22 Oct 2022
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field. Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! jhalon.github.io/chrome-brow…

Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals

Web browsers, our extensive gateway to the internet. Browsers today play a vital role in modern organizations as more and more software applications are delivered to users via a web browser in the...

jhalon.github.io
16
461
13
1,468
What font do you use for your terminal? Send screenshots!
21
6
85
Daniel Trippa retweeted
🔻 MSZ_MGS 🔻@MSZ_MGS27 Sep 2022
New vaild report on H1 got closed few hours ago... By CTurt. * Please avoid annoying him.
3
11
1
95
Daniel Trippa retweeted
Joran Honig
@joranhonig22 Jun 2022
There are some extremely successful bounty hunters in web3. However, nobody tells you how they do it. Until now. Here is how you can become a bug bounty millionaire. 🧵👇
46
343
18
1,284
Daniel Trippa retweeted
tmp.0ut@tmpout22 Feb 2022
We are pleased to announce tmp.0ut Volume 2 tmpout.sh/2/
table of contents of tmp.0ut volume 2 linked above

ALT table of contents of tmp.0ut volume 2 linked above

16
560
29
1,568
This tiny little fella is a Mifare Classic RFID chip, roughly one millimeter across. The label on the die is F8001WA.
5
20
2
116
If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it. BugBountyHunting.com #cybersecurity #bugbountytips #infosec #100DaysOfCode
69
1,165
35
2,187
Daniel Trippa retweeted
PortSwigger
@PortSwigger8 Oct 2021
🎵 If you're having cert issues I feel bad for ya son, I got $99 problems but the bill ain't one...🎵 All you have to do is pass the Burp Suite cert exam before 15th Dec and we'll refund you your $99 exam fee. #burpsuitecertified #99problems
6
35
3
110
PHRACK #70 is out! Enjoy the magazine. #KeepHacking phrack.org/issues/70/1.html
4
141
1
349
Daniel Trippa retweeted
devansh ⚡️@0xAsm0d3us15 Sep 2021
My notes (actually a checklist ✅) for getting into Blockchain Security, a thread 🧵
24
332
13
829
Join me in ~20min for a new video premiere hacking an Ethereum smart contract! In 2019 I recorded myself for over 11h playing the Real World CTF solving an Ethereum challenge and I cut it down to over 2:30h. youtube.com/watch?v=P8LXLoTU…
8
32
1
301
15 Websites You Won’t Believe Exist For Developers & Designers. 🤯↓. 🤯↓. 🤯↓.
78
1,029
53
3,190
Hey @PortSwigger , @PortSwiggerRes. While solving one of you labs, I found that some of the Error Condition Based Sql injection payloads suggested in you cheat sheet aren't working as intended. I wrote about it here: blog.danieltrippa.it/researc…
2
Because of PostgreSQL Planning and Optimization, Blind-Error Based Sql-Injection payloads like this: SELECT CASE WHEN (YOUR-CONDITION-HERE) THEN cast(1/0 as text) ELSE NULL END won’t work (They will always trigger an error, not depending on the condition).
1
1
I solved using something like this SELECT CASE WHEN (YOUR-CONDITION-HERE) THEN cast(Version() as numeric) ELSE NULL END Also, I only tested for the latest versions of postgreSQL
Load more