r3s1n @ResinSec

ethical hacker, student, coder. working on many projects i’ll never finish. my kung fu is stronger than yours New York, USA Joined October 2021

Tweets

68
Followers

20
Following

152
Likes

1K

r3s1n @ResinSec

3 years ago

Do you remember when you joined X? I do! #MyXAnniversary

0 0 0 9 0

View Details

r3s1n @ResinSec

4 years ago

Working on researching AD/windows exploitation. Lots of things to learn!

0 0 0 24 0

View Details

Amazing story🥲: A guy from our Discord found a poor cat in the garden. The cat had an animal RFID tag implant (FDX-B 134kHz), so he scanned it with Flipper, found the cat's owner via the local animal ID database, and they were reunited Turned out that 🐈 was missing for 2 years!

81 923 7K 0 220

View Details

r3s1n @ResinSec

4 years ago

Do you remember when you joined Twitter? I do! #MyTwitterAnniversary

0 0 0 0 0

View Details

Nihad @navilla_eth

5 years ago

How bypass HTML to Reflected XSS I using KNOXSS payload to bypass it KNOXSS Payload👇👇 "--!><Svg/Onload=confirm`cookie`>"

4 71 240 0 76

View Details

Ilios Labs @IliosLabs

5 years ago

After 6 months of hard work... Monad is finally going to be launched in its open beta phase!!! It will be available at **beta.monad.ilioslabs.dev**. Twitter: x.com/IliosLabs ProductHunt: producthunt.com/posts/monad Discord: discord.gg/b8ugMm7nvc #Monad #launchday

0 2 4 0 0

View Details

Brandon Rossi @0xConda

5 years ago

Here's a mind map I made to help you with Linux privilege escalation

13 265 1K 0 311

View Details

David Colombo @cyber_colombo

5 years ago

So, I now have full remote control of over 20 Tesla’s in 10 countries and there seems to be no way to find the owners and report it to them…

302 946 6K 0 373

View Details

Ilios Labs @IliosLabs

5 years ago

Monad is on ProductHunt! Check it out at producthunt.com/posts/monad and make sure to upvote + share the link so we can get a great launch on the 23rd!

0 1 1 0 0

View Details

r3s1n @ResinSec

5 years ago

Just wanted to let you all know, @IliosLabs is working on a new project called Monad, which lets you share your own code snippets with a really intuitive tagging system. I'd definitely suggest checking them out when it releases! #infosec #bugbountytips

0 2 2 0 0

View Details

Ilios Labs @IliosLabs

5 years ago

Shoutout to @ResinSec for hacking Monad and alerting us to many vulnerabilities!

0 1 3 0 0

View Details

SwiftOnSecurity @SwiftOnSecurity

5 years ago

1 64 541 0 9

View Details

𝐑𝐀𝐢𝐡𝐚𝐧 @zapstiko

5 years ago

Nginx Path Traversal @403Timeout httpx -l url.txt -path "///////../../../../../../etc/passwd" -status-code -mc 200 -ms 'root:' #bugbountytips #infosec

12 441 1K 0 305

View Details

The Tor Project @torproject

5 years ago

Privacy is a human right.

49 772 4K 0 28

View Details

Roberto Nunes @0x_Akoko

5 years ago

If the main endpoint is forbidden we can also check for the backup file. /blog/wp-config.php => 403 Forbidden /blog/wp-config.php.bkp => 200 OK #bugbountytips #bugbounty #infosec

5 106 305 0 74

View Details

mr.d0x @mrd0x

5 years ago

Bypass Defender AV static detection: If you name a malicious file DumpStack.log Defender doesn't scan it.

37 977 3K 0 384

View Details

Youstin @iustinBB

5 years ago

Cache Poisoning at Scale: Identifying and Exploiting over 70 Cache Poisoning Vulnerabilities youst.in/posts/cache-po…

24 619 1K 0 632

View Details

r3s1n @ResinSec

5 years ago

@rootxyash Biggest security risk to most WordPress sites is plugins/themes. Fingerprint the versions being used and try to see if a CVE exists. If so, how easy would it be to make a PoC? Is there an existing exploit on github/exploit-db?

0 0 5 0 0

View Details

r3s1n @ResinSec

5 years ago

@rootxyash Most of the time SSRF via xmlrpc.php will be closed as N/A or informational. Usually cited on the basis that HTTP and DNS requests aren't valid vulnerabilities unless you could exfiltrate information, which you can't do here

3 0 9 0 0

View Details

Prof. Feynman @ProfFeynman

5 years ago

You are under no obligation to remain the same person you were a year ago, a month ago, or even a day ago. You are here to create yourself, continuously.