ØxＯＰＯＳɆＣ
@OPOSEC
More than breaking through challenges, it is all about sharing the knowledge.
You might like
🌞 Summertime calls for relaxation, quality moments with loved ones, and a break from the daily grind. But wait! Get ready for our classic #SummerChallenge, packed with thrilling Web, Crypto, Miscs, and Trivia quests that will keep you hooked! Have fun at sc23.0d.al.
Another edition of 'Hardware Fault Injection, MacGyver style' A great way to spend a morning in Porto, having fun creating magic smoke, surrounded by the @OPOSEC community. Thanks for inviting me @simps0n, what a great community you guys have going on there!
Unpatched NodeJS Prototype Pollution in express-fileupload. blog.p6.is/Real-World-JS-… Related: qiita.com/shellyln/items… #MustSee #337 (2020)
qiita.com
JavaScriptのプロトタイプ汚染攻撃対策は難しい - Qiita
先日、私のプロジェクトで脆弱性関連のissueが投稿されたので対策を行いました。 指摘内容は主に「プロトタイプ汚染攻撃」でした。自分では対策を行っていたつもりだったのですが、様々な穴がありました。 プロトタイプ汚染攻撃可能な脆弱性は成功すると他の機能や脆弱性との組み合わせに...
A story of leaking uninitialized memory from Fastly (CVE-2021–43848). link.medium.com/BzrVrAKGhnb #Security #416 (2022)
The Stanford Geospatial Network Model of the Roman World. orbis.stanford.edu #Fun #284 (2019)
The Art of Packet Crafting with Scapy. scapy.disruptivelabs.in #Hack #332 (2020)
Beating an old PHP source code protector. adepts.of0x.cc/decrypt-nu-cod… #Security #473 (2023)
NetCAT network-based cache attack on the processor’s cache (CVE-2019-11184). vusec.net/projects/netca… #Security #291 (2019)
vusec.net
NetCAT - vusec
NetCAT shows that network-based cache side-channel attacks are a realistic threat. Cache attacks have been traditionally used to leak sensitive data on a local setting (e.g., from an attacker-contr...
Don't use VPN services. gist.github.com/joepie91/5a990… #Security #100 (2016)
Ropchain - Primer and Attack. kvakil.me/posts/ropchain/ #Security #236 (2018)
Burp Extension Python Tutorial. laconicwolf.com/2018/04/13/bur… #Hack #237 (2018)
A tool for checking if MFA is enabled on multiple Microsoft Services. github.com/dafthack/MFASw… Blog: bit.ly/34kymFj (+) #Hack #346 (2020)
![OPOSEC's tweet card. Beau Bullock // Overview On offensive engagements, such as penetration tests and red team assessments, I have been seeing inconsistencies in how MFA is applied to the various Microsoft services. […]](https://pbs.twimg.com/card_img/1991875858500337665/2x4dOaMP?format=jpg&name=orig)
United States Trends
- 1. #GMMTV2026 2.26M posts
- 2. Good Tuesday 27.7K posts
- 3. MILKLOVE BORN TO SHINE 377K posts
- 4. #tuesdayvibe 1,975 posts
- 5. WILLIAMEST MAGIC VIBES 53.4K posts
- 6. Chelsea 216K posts
- 7. MAGIC VIBES WITH JIMMYSEA 54.9K posts
- 8. #JoongDunk 83.8K posts
- 9. Mark Kelly 212K posts
- 10. Barcelona 163K posts
- 11. Alan Dershowitz 3,199 posts
- 12. TOP CALL 9,684 posts
- 13. #ONEPIECE1167 8,306 posts
- 14. Jim Croce N/A
- 15. Barca 85.2K posts
- 16. AI Alert 8,412 posts
- 17. Unforgiven 1,193 posts
- 18. Moe Odum N/A
- 19. Maddow 14.8K posts
- 20. Benedict Arnold 7,434 posts
You might like
-
André Baptista
@0xacb -
reverseame
@reverseame -
Flashback Team
@FlashbackPwn -
Swissky
@pentest_swissky -
kmkz
@kmkz_security -
Grzegorz Tworek
@0gtweet -
xer0dayz
@xer0dayz -
Dhiyaneshwaran
@DhiyaneshDK -
LuemmelSec
@theluemmel -
Interrupt Labs
@InterruptLabs -
Jasmin Landry
@JR0ch17 -
尺Ξn4tø 尺ødɿiguΞ5ǃ͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗͗ ็็้้้
@simps0n -
Blackstorm Security
@blackstormsecbr -
BSidesLisbon
@Bsideslisbon -
Janggggg
@testanull
Something went wrong.
Something went wrong.