NEW BOT Телеграм, страница - 412659286

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

https://hide01.ir

ＨｉｄｅＺｅｒｏＯｎｅ

مرجع دانلود دوره های تست نفوذ و امنیت

3.65K viewsMmD, 16:12

4.28K viewsAmir Kiani, 17:28

Forwarded from Security Analysis

CVE-2021-42321POC.py

⭕️PoC of MS Exchange RCE via mspaint.exe

@securation

3.75K viewsAdel, 12:52

https://certitude.consulting/blog/en/invisible-backdoor/

3.62K viewsAmir Kiani, 17:46

http://blog.howdays.kr/index.php/2021/11/26/virtualbox-6-1-18-0-day/

3.49K viewsAdel, 08:35

https://hackerone.com/reports/1363672

Shopify disclosed on HackerOne: Bypass a fix for report #708013

## Summary:
`customerAccessTokenCreate` mutation in the Storefront API does not correctly throttle login attempts. An issue in similar report https://hackerone.com/reports/708013 was already fixed,...

2.82K viewsAmir Kiani, 17:53

https://youtu.be/EwEABCBI3-g

HackTheBox Cyber Santa CTF 2021 - Naughty or Nice - Web Challenge - Day5

Video walk-through for the Web Challenge called "Naughty or Nice" from Day 5 of the HTB "Cyber Santa is Coming to Town" Capture The Flag event that was going on from December 1st to December 5th 2021.
#hackthebox #CTF #SANTA #santa #cyber #web #challenges…

3.1K viewsAdel, 07:02

https://twitter.com/1rpwn/status/1469240466071859213

sudo grep -r '${jndi:ldap://' /var/log sudo egrep -i -r '\$\{jndi:(ldap[s]?|rmi)://' /var/log #log4j #log_4jrce #RCE #apache

2.83K viewsAdel, 09:40

patched code

https://github.com/apache/logging-log4j2/pull/608/files/5f81dd218aab36bf1c6a7410c88c29594bb1a0e7#diff-271353c1076e53f6893261e4420de27d34588bfd782806b5c66a3465c43b7f51

Restrict LDAP access via JNDI by rgoers · Pull Request #608 · apache/logging-log4j2

Restricts access to LDAP via JNDI.

3.07K viewsAdel, 09:46

https://twitter.com/80vul/status/1470272820571963392

[Bad news] Ransomware has landed on #log4j2 RCE

2.89K viewsAdel, 12:48

https://jfrog.com/blog/tensorflow-python-code-injection-more-eval-woes/

TensorFlow Python Code Injection: More eval() Woes

Background JFrog security research team (formerly Vdoo) has recently disclosed a code injection issue in one of the utilities shipped with TensorFlow, a popular Machine Learning platform that’s widely used in the industry. The issue has been assigned to CVE…

2.97K viewsAdel, 07:43

3.39K viewsMmD, 19:28

https://github.com/icyguider/DumpNParse

GitHub - icyguider/DumpNParse: A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0. - icyguider/DumpNParse

3.18K viewsAdel, 08:03

In this video, would like to showcase another challenge from Snyk capture the flag event that was going on from October 5th to October 7th of 2021. My video showcase #premieres at 9:00 PM IRST (12 PM EST)

https://youtu.be/xCdqK84bngg

Steganography Challenges (2/4)

This is the second episode of the Steganography challenges video series.In this video I would like to showcase another challenge from SNYK capture the flag e...

2.78K viewsAdel, 11:09

https://github.com/wishihab/Android-RATList

GitHub - wishihab/Android-RATList: Android - Remote Access Trojan List

Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.

2.93K viewsMmD, 00:34

https://twitter.com/1rpwn/status/1474699501575327745

Microsoft fixes the vulnerability. did not give an Bounty Anything that is discovered next time, i will sell to ZDI/Black Market @msftsecresponse @msftsecurity

3.04K viewsAdel, 11:15

3.34K viewsAdel, edited 16:26

Fuzzing101 with LibAFL - Part III: Fuzzing tcpdump https://epi052.gitlab.io/notes-to-self/blog/2021-11-20-fuzzing-101-with-libafl-part-3/

epi052.gitlab.io

Fuzzing101 with LibAFL - Part III: Fuzzing tcpdump -

Part 3 of a series covering fuzzer development using LibAFL

3.37K viewsAdel, 11:04

2.52K viewsAmir Kiani, 02:23

Forwarded from Security Analysis

⭕️ PHP 7.3-8.1 disable_functions bypass using string concatenation

PHP 7.3-8.1 disable_functions bypass [concat_function]This exploit uses a bug in a function that handles string concatenation.
A statement such as $a.$b might result in memory corruption if certain conditions are met.
The bugreport provides a very thorough analysis of the vulnerability.
The PoC was tested on various php builds for Debian/Ubuntu/CentOS/FreeBSD with cli/fpm/apache2 server APIs and found to work reliably.

https://github.com/mm0r1/exploits/tree/master/php-concat-bypass
#PHP #bypass #disable_functions
@securation

2.29K viewsAdel, 14:43

2.28K viewsAmir Kiani, 05:55