@0xInfernal

🐧 Noob!

Joined May 2017
  • Tweets581
  • Following778
  • Followers96
22Media
1250 $ For 3 Stored XSS AND PII Disclosure , Let’s See How FIS Scammed Me AND Bugcrowd Covered It… medium.com/@0xAwali/1250-for… #bugbounty #bugbountytips #bugbountytip
1
2
1
14
1,733
Security researchers be like: "I got this 0day, do you want to keep it or double it and pass it to the next organisation"
2
24
1,426
til there's a jadx plugin that visualize type hierarchy for android apks. github.com/timschneeb/jadx-t…
2
48
1
197
13,878
Apple Stored XSS youtu.be/q4deMiaRc9s #bugbountywriteup #bugbountytips #bugbounty #cybersecurity #informationsecurity
3
4
Just got $50k (2*25k) for our RCE. waiting for approval to publish our writeup. cc @iamnoooob
63
40
8
1,059
“Mom, the enemies in this video game are boring.” “Did you remember to turn on pain in the Artificial Intelligence?” “No.” “Well, they’re not going to fight you very hard if they don’t fear death.” “Oh, that makes sense.”
14
164
7
791
“Stored XSS on Edmodo” by @rv0x00 link.medium.com/7cT9ac2z5W

Stored XSS on Edmodo

Hello everyone, I believe sharing is caring, and I have been learning from multiple security researchers in the Infosec community. So here…

link.medium.com
9
17
nytimes.com/interactive/2019…
2
22
6
32
I just finished Web Security Academy labs It's great learning source with free trainings + labs to test your skills: -SQL injection -XSS -OS command injection -DIR traversal Hope, we can expect more topics to come @WebSecAcademy @Burp_Suite @PortSwigger portswigger.net/web-security
2
36
164
When you look back at computer hacking and think damn it was so much easier in the past, your stagnating and become complacent, the past hacks drive the security innovations you see now - it was just as difficult back then because you didn't get how-to hack books or training.
15
27
1
121
Remote Code Execution (RCE) writeups NO 2:- ysx.me.uk/taking-note-xss-to… opsecx.com/index.php/2017/02… pluginvulnerabilities.com/20… medium.com/bugbountywriteup/… medium.com/bugbountywriteup/… contextis.com/en/blog/frag-g… ubercomp.com/posts/2014-01-1… outpost24.com/blog/from-loca… itnext.io/how-i-exploited-a-…
176
3
340
Whoa!!
This quoted post is unavailable.
Try viewing anyway · View on X
Razer "Cortex" has CEF debugger stub enabled by default allowing arbitrary remote command execution. bugs.chromium.org/p/project-…
1
30
4
72
Write your Own Virtual Machine : justinmeiners.github.io/lc3-…
7
322
8
843
New write up - "Reading ASP secrets for $17,000" - the really fun process of exploiting local file disclosure 🧐 samcurry.net/reading-asp-sec…
21
318
5
666
Here is the whole Pwn Adventure 3 game hacking playlist! We read assembler, hooked functions, developed a TCP proxy, reverse engineered the network protocol, exploited integer overflows and wrote a keygen... All of that in 20 episodes and just under 4h! youtube.com/playlist?list=PL…
1
23
3
95
“Bug Bounties and Mental Health” by Nathan medium.com/@nmalcolm/bug-bou… @NathOnSecurity
2
Replying to @TheOfficialSBI
@TheOfficialSBI Applied for INB facility on online portal but it's been more than a week and temporary ID/Password isn't working. Branch told me to wait for a week more and can't provide physical INB Kit. Pathetic service!! #SBi #onlinesbi
1
@TheOfficialSBI @RBI @ConsumrConxion
1
The hijackers injected their code in vendor libraries like modernizr and openid. blog.jse.li/posts/marvelopti…

Reversing JS Malware From marveloptics.com | Jesse Li

The injected script steals checkout form data and sends it to a Chinese-owned domain. But the attackers are really bad at programming.

blog.jse.li
Load more