Ello' luv!
South Africa
Joined January 2019
- Tweets176
- Following237
- Followers80
- Likes656
Add the .gitignore entries from ironpeak.be/blog/leaking-sec… to your URL fuzzing wordlist. Let the bounties rain! #bugbountytips
We had a blast hosting the North Gauteng Science Fair CTF. blog.darkforge.io/ctf/ngsf/2…
Moopinger retweeted
It's easy to bash vulnerabilities with logos but... I couldn't resist, say hello to http1mustdie.com :)
Moopinger retweeted
Join me on the @offby1security channel for a stream with the amazing @albinowax on August 15th @ 11AM PT on "Novel HTTP/1 Request Smuggling/Desync Attacks!" Be sure to turn on alerts for the channel on YouTube...
youtube.com/watch?v=B7p8dIB7…
Moopinger retweeted
The upcoming "HTTP/1 must die" @WebSecAcademy lab is no longer impossible! This is good news because I'm planning to attempt to live-stream solving it...
Moopinger retweeted
This week’s Disclosed. #BugBounty
Beta invite for Hai, the AI security agent for hackers. RCE on Netflix. New tools for XSS, subdomain monitoring, and HTTP smuggling. Plus: SSTI, IDN homographs, and more.
Highlights below 🧵
Moopinger retweeted
🌀 𝗦𝗺𝘂𝗴𝗴𝗹𝗲𝗙𝘂𝘇𝘇 - A modular HTTP request smuggling fuzzer built for deep desync exploration.
👉 github.com/moopinger/smuggle…
Perfect for testing reverse proxies, finding obscure smuggling vectors, and pushing fuzzing boundaries.
#CyberSecurity #RedTeam #BugBounty
Moopinger retweeted
Wrote a Burp Suite Pro extension that uses AI-powered features to replace values in HTTP requests.
Useful for guessing data formats based on parameter or header names. For example, for requests from Swagger / OpenAPI or those generated by my tool BFScan.
github.com/BlackFan/Burp-Ai-…
Excited to share our latest blog post, where we dive into attacking CEFSharp-based thick clients and introduce CefEnum, our new tool for enumerating and analyzing these applications. Check it out to learn more about securing .NET thick clients: blog.darkforge.io/cef/cefsha…
Moopinger retweeted
"Parser Differentials: When Interpretation Becomes a Vulnerability" by @joernchen !
I have launched a new web CTF. Amazon gift-card for first to solve, and swag draw amongst successful submissions. site: hackcentral.darkfor.ge/ Code: github.com/darkforge-labs/ct…
Moopinger retweeted
I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓↓↓
