Marty Dusek (@madusec) header
Marty Dusek (@madusec) profile picture

Marty Dusek

@madusec

#cybersecurity, #infosec, #pentesting, #CTF, #bugbounty, #bugbountytips, #OSCP, #OSCE, #hackerone, #bugcrowd, #HackTheBox, #offensivesecurity, #TryHackMe

github.com/madusec
Joined January 2010
  • Tweets1.4K
  • Following4.5K
  • Followers887
113Media
Photo by Marty Dusek (@madusec)Photo by Marty Dusek (@madusec)Photo by Marty Dusek (@madusec)Photo by Marty Dusek (@madusec)
🔄 Switched from @arkadiyt's bounty-targets-data (no updates in a month & no response from owner). Created my auto updated repo for latest public #bugbounty programs via GitHub actions. github.com/Osb0rn3/bugbounty…
10
49
3
179
29,387
Ekonomická studie představená na tiskovce dne 11.4.2023 je teď volně ke stažení. Stahujte, studujte a sdílejte s vašimi poslanci a senátory. Ptejte se jich, jaký mají postoj ke krypto byznysu v ČR. ckma.cz/cs/blog Autoři: @LukasKovanda , Jan Šincl a kolektiv VŠE
Image from Česká kryptoměnová asociace - ČKMA (@CeskaCkma)
2
27
3
89
27,032
[RELEASE-UPDATE] → DSL-based advanced matcher/filter support → ASN Input support → ASNMAP integration → TLSX integration for TLS probing Changelog –– github.com/projectdiscovery/… #hackwithautomation #recon #cybersecurity
Image from ProjectDiscovery (@pdiscoveryio)
1
21
1
80
Now easily control the response data of your interactsh payload or domain on the fly as you need. More details - github.com/projectdiscovery/… GitHub Release - github.com/projectdiscovery/… #hackwithautomation #oast #security #bugbounty
Image from ProjectDiscovery (@pdiscoveryio)
4
70
1
178
Marty Dusek retweeted
CyberKnow (@Cyberknow20) profile picture
CyberKnow@Cyberknow203 Sep 2022
Someone is advertising 309gb of stolen data from #Vodafone #Italy. #cybersecurity #infosec #databreach
Image from CyberKnow (@Cyberknow20)
7
46
7
132
Run your shellcode directly from bash: dd of=/proc/$$/mem bs=1 seek=$(($(cut -d" " -f9</proc/$$/syscall))) if=<(base64 -d<<<utz+IUO+aRkSKL+t3uH+McCwqQ8F) conv=notrunc Credits to "unknown"
11
267
9
1,063
Marty Dusek retweeted
Frans Rosén (@fransrosen) profile picture
Frans Rosén@fransrosen2 Aug 2022
I was finally able to disclose one of the examples from my last blog post labs.detectify.com/2022/07/0… Here's the PoC-movie from the report to Reddit:
publiclyDisclosed (@disclosedh1) profile picturepubliclyDisclosed@disclosedh12 Aug 2022
Reddit disclosed a bug submitted by fransrosen: hackerone.com/reports/156718… - Bounty: $10,000 #hackerone #bugbounty
Image from publiclyDisclosed (@disclosedh1)
11
103
3
416
Marty Dusek retweeted
Volkis (@VolkisAU) profile picture
Volkis@VolkisAU19 Jul 2022
volkis.com.au/blog/we-were-v…

We were vulnerable - how a security company could have vulns

We had a P3 vulnerability submitted to us. How could a security company have such a vuln? Let's explore how it happen.

volkis.com.au
1
7
33
Customizable Index page along with static file hosting for frequently used online payloads for attacks such as XSS/XXE and more is now supported with self-hosted interactsh server 🎉🎉 Changelog: github.com/projectdiscovery/… #hackwithautomation #oast #appsec #security
Image from ProjectDiscovery (@pdiscoveryio)
6
48
1
171
Marty Dusek retweeted
HAHWUL (@hahwul) profile picture
HAHWUL
@hahwul27 May 2022
Oh, We can run Zest script in CLI independently without ZAP😍 github.com/zaproxy/zest/ I usually run it only in ZAP, but it can be executed alone, I think it would be better than scripting language when simple automation.
Image from HAHWUL (@hahwul)
1
7
23
Marty Dusek retweeted
张惠倩 (@momika233) profile picture
张惠倩@momika2335 May 2022
BIG-IP iControl REST vulnerability CVE-2022-1388 hxxp://ip/mgmt/shared/authn/login Shodan: http.title:"BIG-IP&reg;-+Redirect" +"Server" 🫰
11
99
2
311
WOOOOW on the 02-06 we will be with our friend @Jhaddix and @h4t3c0mput3rs talking about Recons, Bug bounty and techniques! Thank you my friend for accepting! Our conversation will be very insane! #bugbounty #recon #bugbountytips
1
4
1
14
Making a DNS bruteforcer that @sml555_ @hakluke and I worked on privately approx 3 years ago public... Code here, if you want to poke early: github.com/codingo/fastsub .. Still needs some work - will update further before I cover in a video
Image from Michael Skelton (@codingo_)
7
60
228
Marty Dusek retweeted
Jeff Foley (@jeff_foley) profile picture
Jeff Foley
@jeff_foley27 Mar 2022
The next release of @owaspamass will provide integration with @bgptools as a data source providing up-to-date information about registered autonomous system numbers and netblocks #infosec #osint #recon #redteam #assetdiscovery #attacksurface
1
6
1
32
🔥 CVE-2022-0337 (reward: $10,000 - @GoogleVRP ) - Write-up and Video 📺 System environment variables leak on Google Chrome, Microsoft Edge, and Opera. Check the thread for PoC👇 #bugbounty #CyberSecurity #itsecurity #Pentesting youtube.com/watch?v=q7OIEWta…
11
119
2
477
The hackers -- who are affiliated with an Anonymous offshoot called @theanonleaks -- told me they did it by manipulating the maritime "Automatic Identification System," which is used to track ship locations.
12
297
12
4,362
TShark & jq i5c.us/d28194
Image from SANS.edu Internet Storm Center (@sans_isc)
1
14
1
40
Marty Dusek retweeted
Kamil Vavra (@vavkamil) profile picture
Kamil Vavra@vavkamil20 Aug 2021
My @PortSwigger SWAG collection got even more extensive today :) Thank you so much; it's fantastic! #burpsuite #burpsuitecertified
Image from Kamil Vavra (@vavkamil)
6
8
1
138
Marty Dusek retweeted
Binance (@binance) profile picture
Binance
@binance27 Nov 2021
Proof of Stake (PoS) simply explained.
Image from Binance (@binance)
652
404
38
2,090
Marty Dusek retweeted
Binni Shah (@binitamshah) profile picture
Binni Shah
@binitamshah27 Nov 2021
Backdooring Rust crates for fun and profit : kerkour.com/rust-crate-backd… How to execute shellcodes from memory in Rust : kerkour.com/rust-execute-fro…
2
45
1
132
Load more