NEW BOT Телеграм, страница

The #CERT Coordination Center (CERT/CC) has released information on 33 vulnerabilities, known as AMNESIA:33, affecting multiple embedded open-source Transmission Control Protocol/Internet Protocol (#TCP/IP) stacks. A remote attacker could #exploit some of these vulnerabilities to take control of an affected system.

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01

1.98K viewsAdeL, 18:59

HackerOne

https://medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204

Medium

How I made $31500 by submitting a bug to Facebook

How did I found SSRF in Facebook — the story of my first bug bounty

2.04K viewsAmir Kiani, 21:12

HackerOne

https://github.com/EmpireProject/Empire

GitHub

GitHub - EmpireProject/Empire: Empire is a PowerShell and Python post-exploitation agent.

Empire is a PowerShell and Python post-exploitation agent. - EmpireProject/Empire

1.89K viewsAmir Kiani, 05:07

HackerOne

https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Rants%26Writeups/Hacking%20Team%20Writeup.md

GitHub

Infosec_Reference/Draft/Rants&Writeups/Hacking Team Writeup.md at master · rmusser01/Infosec_Reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version. - rmusser01/Infosec_Reference

1.93K viewsAmir Kiani, 05:20

HackerOne

https://github.com/rmusser01/Infosec_Reference/tree/master/Draft/Rants%26Writeups

GitHub

Infosec_Reference/Draft/Rants&Writeups at master · rmusser01/Infosec_Reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version. - rmusser01/Infosec_Reference

2.04K viewsAmir Kiani, 05:20

HackerOne

Hacker OPSEC
grugq.github.io
#OpSec

2.15K viewsAmir Kiani, 05:29

HackerOne

https://grugq.github.io/presentations/Keynote_The_Grugq_-_OPSEC_for_Russians.pdf

2.46K viewsAmir Kiani, 05:31

HackerOne

#threatleak

https://us-cert.cisa.gov/ncas/current-activity/2020/12/08/theft-fireeye-red-team-tools

2.74K viewsAdeL, 11:20

HackerOne

SANS Holiday Hack Challenge holidayhackchallenge.com

2.85K viewsAmir Kiani, 08:44

HackerOne

a denial of service bug worth 1000$
https://hackerone.com/reports/1018037

HackerOne

Basecamp disclosed on HackerOne: a very long name in hey.com can...

Summary :
=========
after trying to change my initial name to something long i found out that their are no limits to how long it can be , so i directly changed it to something very long {F1050497}...

2.98K viewsAmir Kiani, 01:55

HackerOne

PoC exploits for CVE-2020-17143 and CVE-2020-17141 which demonstrate the XXE bugs against Exchange Server.

- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS API

https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt

2.56K viewsAdeL, 20:30

HackerOne

2.43K viewsAmir Kiani, 20:07

HackerOne

😐

2.18K viewsAmir Kiani, 10:57

HackerOne

Forwarded from Security Analysis

CVE-2020-25695 Privilege Escalation in Postgresql - Staaldraad

https://staaldraad.github.io/post/2020-12-15-cve-2020-25695-postgresql-privesc/
#db #pe #postgresql @securation

Staaldraad

CVE-2020-25695 Privilege Escalation in Postgresql

It has been quite a year, I hope everyone is well and staying safe. This is my first and probably only post for the year, and covers a fun privilege escalation vulnerability I found in Postgresql. This affects all supported versions of Postgresql going back…