Independent Security Researcher | Checkmarx Sales Engineer | lover of all (most) Whiskey
Dallas
Joined September 2008
- Tweets39
- Following129
- Followers56
- Likes19
Reminder: Block your calendars for this session with @Checkmarx experts @jossefharush and @ErezYalon at @RSAConference.
Explore “The Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack” with us.
Details are here: bit.ly/38ntTHK
#CheckmarxAtRSA #RSA2022
JustinRuth retweeted
More than 280 million people suffer from depression worldwide.
Over 700 000 people die due to suicide every year. Suicide is the fourth leading cause of death in 15-29-year-olds. (WHO/2021)
If you feel depressed, alone, or lost, there is help to get. You are not alone.
JustinRuth retweeted
This is @codingo_ 's first video and comprehensive written guide. His guide to ffuf is actually more comprehensive than the ffuf readme! I can see his content becoming the ultimate reference guide for hacking/bb stuff. Follow/sub to him everywhere!
I just spent over a month crafting the ultimate guide to Fuff. It is such an incredibly powerful tool, and I bet you're not using all of the features to full advantage! Video: youtube.com/watch?v=iLFkxAmw… Written guide: codingo.io/tools/ffuf/bounty… #bugbountytips
Question for #bugbounty #BugBountyTips would you submit exposed source code (.jsx files) via the browser? Only appears on a certain page and seems like the full app.
Not seeing any keys but tons of endpoints as well as custom code and full node_modules folder.
dang today became such a better day when I realized I could use _ in SED instead of /
echo '"google.com"' | sed 's_"__g' is the same thing as echo '"google.com"' | sed 's/"//g'
substitute all double quotes with nothing.
#linuxnoob
In a pinch and need a quick SMTP server? You can use a gmail account. kinsta.com/knowledgebase/fre…
Hit 2 personal goals today on @Bugcrowd
1. Top 1000!
2. Pass 2019 earnings in 2020.
set personal goals you can celebrate, the more obtainable the better!
#BugBounty
Thanks for summarizing and sharing!
As per the vote results, here you go!
A cool XXE resulting from a SSRF found on local company website during a pentest. DMs are open, retweet and like if you love this style of PoC! 😎
#bugbounty #bugbountytip #bugbountytips #infosec
If javascript: is being filtered try some other payloads that might still work in <a href='payload'>
java%0Ascript:
java%0Dscript:
java%20script:
anything others?
#bugbounty #bugbountytips
Over the last couple of weeks I had some down time and got the itch to hit some Bug Bounty programs. Reported a couple of vulnerabilities which ultimately lead to my first payout! Thanks @Bugcrowd ! #bugbounty
Had an amazing time with the UNT Cyber Security Club talking about buffer overflows! lnkd.in/e54givk
Real presenters pop calculators instead of shells during a hacking demo. lnkd.in/dyhFry3
Still plenty of time to sign up and join us tomorrow evening at the Allstate campus for OWASP meetup! lnkd.in/emWyPBr lnkd.in/eWuAcqi
Good class on creating sophisticated password lists to run a brute force attack using cewl + JTR.
For the techies...
/s Ctss$$[0]$[123456789]$[1]$[5-8]$[!] lnkd.in/eCMjfYN
whoops... Good to know =) xitter.cf/kalilinux/status/95951…
If you don’t update Kali regularly (*cough*), then your archive-keyring package is outdated, and you’ll get key mismatches when working with our repositories. Sucks for you, but at least you can manually update the new key :
wget -q -O - archive.kali.org/archive-key… | apt-key add
<3
Demoed exploitation of CVE-2017-5638 (Struts2) at learn expo today. Went well but I wonder how others demo vulnerabi…lnkd.in/ep4usa4