hacker at @hadriansecurity. volunteer at @divdnl. developer. foss lover. getting rid of nano since 2010
Netherlands
Joined October 2021
- Tweets142
- Following204
- Followers80
- Likes295
wired.com/story/tmobile-data…
It's been well over 20 days to say a single f... word on the hackerone report I have with them.
@Hacker0x01, @TMobile when can I publicly disclose?
Pepijn retweeted
Zero to Hero: The process of reversing and exploiting complex vulnerabilities! xitter.cf/i/broadcasts/1rmxPkRrM…
Pepijn retweeted
Here is why NetNTLMv1 should be disabled in prod networks ASAP. Besides cracking the hash back to NTLM (and then forging Silver Tickets) is straightforward, there is also a lesser known but immediate relay attack path by removing the MIC and doing RBCD abuse. Demo in screenshots.
Pepijn retweeted
We are excited to announce our friend @corg_e will be the new manager of vx-underground merchandise.
In the following days (or weeks?) we will have a new e-commerce domain.
tl;dr kawaii merchandise, or something
Pepijn retweeted
I have like 50 RCE bugs on this BB target. But EVERY time I have submitted a bug to this company it's a dup.
So I'm conditioned to not submit them.
I think bug bounties are creating some type of bystander effect...
Pepijn retweeted
January 22, 2023 — AS21859 — ZEN-ECN [US] — leaked 1348 prefixes creating 1349 conflicts with 44 ASNs in 8 countries. Propagation: 100%. Duration: 1 hour 20 minutes.
Pepijn retweeted
It’s like I always say: “These sequence diagrams aren’t going to animate themselves!”
CVE-2021-1732 (win32k kernel type confusion -> OOB-R/W)
(Based on ti.dbappsecurity.com.cn/blog…)
Pepijn retweeted
SANS (free) Workshop – NTLM Relaying 101: How Internal Pentesters Compromise Domains by @Jean_Maes_1994
This workshop requires a large local LAB (40+ GB zip file download).
sans.org/webcasts/sans-works…
#infosec #pentesting #sans
Pepijn retweeted
New blog post on a recent collab with @UsmanMansha420 where I bypassed Akamai WAF to get RCE on a Java application with Spring EL injection. Spent some time writing about the process of constructing the custom payload. Hope you enjoy! h1pmnh.github.io/post/writeu…
Pepijn retweeted
Fortinet heeft een kwetsbaarheid verholpen in FortiOS SSL-VPN. De kans/schade van de kwetsbaarheid met kenmerk CVE-2022-42475 beoordelen wij als high/high. Er is reeds beperkt actief misbruik waargenomen. Lees het beveiligingsadvies hier: ncsc.nl/actueel/advisory?id=…
Pepijn retweeted
Often people read write ups and because they don’t understand them they assume that the writer must be very fucking smart, maybe it just wasn’t written well. On the flip side when something is written well and people understand, they fail to recognise the value of the author.
Pepijn retweeted
Voorstel, als een overheidsorganisatie zijn ligging niet op orde heeft.
Stil leggen, tot dat het wel in orde is.
security.nl/posting/776952/V…
