@Howyahax

sec sec infosec information addict. (learner of new things)

Joined January 2017
  • Tweets289
  • Following792
  • Followers34
2Media
Physics professor discloses in 1 minute the full insight of Quantum Mechanics.
198
1,550
198
9,774
643,179
We just added the dates for our next two online cohorts: pentesterlab.gumroad.com/l/s… pentesterlab.gumroad.com/l/s…
1
8
1
27
10,432
Half of the success in source code auditing is just having the confidence and faith that you will find something. It doesn't matter what language it is or how many times it's been audited. This has proven true throughout my career. Just. Don't. Give. Up.
10
48
6
437
36,684
I'm thinking of running @PentesterLab Security Code Review Training (in English) as an in-person training in late September and October in the following cities: Porto, Madrid, Paris, Ghent and Budapest...
2
4
25
4,348
Bluesky doesn't require invites anymore bsky.social/about/blog/02-06…
2
2
589
The first public Full Stack Web Attack class for 2024 will be held in Berlin @offensive_con that covers Java & C# web attacks! Grab tickets at: offensivecon.org/trainings/2…
15
1
52
14,825
I can confirm that this is the correct analysis of the Apache struts bug I reported (CVE-2023-50164) xz.aliyun.com/t/13172 well done! 👏🏻
1
65
1
265
34,561
If you are looking for an AMAZING course for zero day hunting, I highly recommend @FlashbackPwn , @pedrib1337 ,and @RabbitPro 's course! Super technical, detailed, and amazing delivery! Hunting zero-days in embedded devices!! One of a kind course!!
1
2
10
1,228
🧐 Dive into the world of exploit development on Linux with: "Cueing up a Calculator: An Introduction to Exploit Development on Linux" by @kevin_backhouse Check it out now 👉 github.blog/2023-12-06-cuein…

Cueing up a calculator: an introduction to exploit development on Linux

Using CVE-2023-43641 as an example, I’ll explain how to develop an exploit for a memory corruption vulnerability on Linux. The exploit has to bypass several mitigations to achieve code execution.

github.blog
38
2
103
31,980
Excellent research work by Moshe Kol on exploiting a spinlock use-after-free. Android Binder (CVE-2022-20421) Paper: 0xkol.github.io/assets/files… OffensiveCon 23 slides: 0xkol.github.io/assets/files… #android #Linux #kernel #exploit
3
82
1
242
36,073
To celebrate our new channel youtube.com/@AppSecSchool! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!

AppSecSchool

Hi, welcome to our new youtube channel named AppSecSchool. Our goal with this channel is to cover the less technical aspects of Application Security, especially for people working or wanting to work...

youtube.com
60
400
4
655
46,174
How to start reviewing code? blog.pentesterlab.com/how-to…
41
1
108
17,466
research.nccgroup.com/2023/0…
2
46
2
152
23,311
Time for another giveaway! We are going to send a t-shirt and a few goodies to one person who follows @PentesterLab and retweets this tweet!! And we are going to give a 12-month voucher to someone who follows @PentesterLab and likes this tweet!!
99
672
12
1,036
58,737
The Full Stack Web Attack (Java Edition) 2-day class syllabus is up! srcincite.io/training/syllab…. Nowhere in the world can you take an online class on hacking Java applications at this level for < $1k USD. Grab your tickets here: srcincite.io/training/schedu… #FSWA #PopThyShell
1
9
3
38
19,800
Final Giveaway! This time for #Cyber Monday Make sure you check our deals: pentesterlab.com/pro We are going to send a t-shirt and a few goodies to one person who retweets this tweet!! And we are going to give a 12-month voucher to someone who likes this tweet!!

Advanced Web Hacking Labs and Security Code Review Training | PentesterLab PRO

Access advanced web hacking labs, in-depth video walkthroughs, and security code review training built around real vulnerabilities, exploitation techniques, and practical AppSec skills.

pentesterlab.com
56
602
5
1,081
I just published a blog post for the people that want to get into bug bounties. I hope it helps people that are thinking about doing bug bounties, but haven't started yet. It explains what to expect and how to deal with common problems / situations: shubs.io/so-you-want-to-get-…

So, you want to get into bug bounties?

I've been doing bug bounties for over 10 years now and over time, I have grown fonder of the life changing effects it has had for me. From job prospects, to being able to financially support those...

shubs.io
26
359
22
958
How to start reviewing code? blog.pentesterlab.com/how-to…
22
79
How to start reviewing code? blog.pentesterlab.com/how-to…
14
1
65
My @Ruxmon slides can be found here: docs.google.com/presentation…

SAML - Ruxmon Sept 2022

SAML An Introduction to SAML and its security Security Assertion Markup Language

docs.google.com
2
49
146
Load more