@z000nbug

Cyber security enthusiast, bug bounty hunter, I spend time reading what NASA is up to in space research too. But dont expect any tweet about Mars exploration

 UK
Joined February 2010
  • Tweets297
  • Following860
  • Followers187
8Media
Meet WiFiDemon: iOS WiFi RCE 0-Day Vulnerability & a 'Zero-Click' Vulnerability That was Silently Patched blog.zecops.com/research/mee…
15
228
13
532
Gotta Catch 'Em All: Frida & jailbreak detection - anti-jailbreak, anti-Frida, anti-debug techniques used in PokemonGO 🔥 #MobileSecurity #AndroidSecurity @fridadotre @LIEF_project by @rh0main romainthomas.fr/post/21-07-p…

Gotta Catch 'Em All: Frida & jailbreak detection | Romain Thomas

This blog post analyzes the Frida and Jailbreak detection in PokemonGO for iOS.

romainthomas.fr
24
1
62
10 Vulnerable Android Applications for beginners to learn Android hacking. 🧵👇
28
739
22
1,830
This is always a handy option, similar to Match/Replace False to True to enable any hidden menu options in the UI
m4ll0k@m4ll0k9 Jul 2021
Always..
1
I don’t usually do #ff #followfriday but I’d like to shout out a few of my faves this week ❤️ You have all had such an impact on me during my time in infosec so far - thank you for your friendship and guidance! ✨ @z000nbug @zak_hax @amysw_sec @charlieamber94 1/2
2
3
9
Z000n Bug retweeted
bugzy@d3vilbug30 Apr 2021
In my second blog post, I have explained how one can decrypt the AES Encrypted mobile app traffic on the fly using AES Killer and Frida. n00b.sh/posts/aes-killer-mob… #cybersecurity #infosec #informationsecurity #pentest #burpsuite #bugbounty #mobileappsecurity #frida #MobileSecurity
5
81
3
218
.@Office365 Last week, @Practical365 published a script to create an inventory of #AzureAD integrated apps. Here's how to conduct a review of the apps to decide why stay and which should go. I managed to remove 35% of the apps registered in my tenant! office365itpros.com/2021/04/…
1
22
1
56
Z000n Bug retweeted
Frank
@jedisct127 Apr 2021
Inclavare containers, by Alibaba - A new container runtime for cloud-native confidential computing inclavare-containers.io/en/ – at Antibes, France
5
16
[PDF] Defending against Software Supply Chain attacks, taking into consideration recent high-profile attacks in the news. What are they and how to mitigate from CISA bit.ly/3xpYZpP
[PDF] Cybersecurity advisory to defend against attacks from SVR. Understand the tactics, techniques, and procedures used by online threat actors to compromise your network. Mitigations within the document to protect yourself bit.ly/3u8wsmV
Microsoft has announced the end-of-support for .NET Framework v4.5.2, 4.6, and 4.6.1 on April 26, 2022, as per Microsoft. Please make sure if you are applying for CE/CE+, then the version is updated to 4.6.2
Want to practice your #JWT #pentesting skills? Check out this JWT Hacking Challenges lab by @onsecru. Includes the following JWT signature attacks: * none, * weak secret key, * key confusion, * key injection, * jwks spoofing, * kid github.com/onsecru/jwt-hacki…

GitHub - onsecru/jwt-hacking-challenges: APIs to practise diverse techniques to hack JWT Signatures

APIs to practise diverse techniques to hack JWT Signatures - onsecru/jwt-hacking-challenges

github.com
1
33
76
SQL Injection still exists in 2021 🤪
1
Unlocked Gate - A loophole that would allow an attacker to trivially craft a macOS payload to bypass Gatekeeper has been patched in a recent Bigsur update.
FYI: chrome://settings/content/notifications "Sites can ask to send notifications" -> off
129
4,809
501
21,940
Remote code execution in HomeBrew - buff.ly/2Pjw2Ld #homebrew #securityincident
Here we go again....Privilege escalation vulnerability in Windows RPC protocol. Mitigation steps in this blog considering no patch update from Microsoft yet bit.ly/3tU3M0P
Hacking GraphQL for fun and profit - Part 1 buff.ly/3xsyvUD and Part -2 buff.ly/2PoxUlV #graphql #CyberSecurity #Pentesting
1
Free Cyber Security training for School Staff from NCSC. Please take advantage of this buff.ly/3xhHCHG
Z000n Bug retweeted
MSP@TweetsbyMSP5 Jul 2018
Well done to our customer @defendzaltd on becoming part of the CREST membership - a great demonstration of the team's professionalism and expert knowledge in #cybersecurity. Congrats! xitter.cf/defendzaltd/status/101…
1
1
Load more