한국어
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
filedescriptor's profile picture. @0xReconless

FD

@filedescriptor

@0xReconless

996게시물 17천팔로워 34팔로우 중
내가 좋아할 만한 콘텐츠
filedescriptor's profile picture.
FD
 @filedescriptor
2023. 9. 22.

Google(Chromium) suddenly decided to pay me for a UI Spoofing bug reported 3 years that had been idle, and from reward potential to no potential to potential. Ok thanks?

filedescriptor's tweet image. Google(Chromium) suddenly decided to pay me for a UI Spoofing bug reported 3 years that had been idle, and from reward potential to no potential to potential. Ok thanks?
filedescriptor's tweet image. Google(Chromium) suddenly decided to pay me for a UI Spoofing bug reported 3 years that had been idle, and from reward potential to no potential to potential. Ok thanks?
1
4
51
3
12천
FD 님이 재게시함
7aSecurity's profile picture.
7ASecurity
 @7aSecurity
2022. 7. 28.

This #privacy audit looks like the first LeaveHomeSafe #pentest ever, way below commercial apps: Broken SSL validation, SD Card Leaks, 2FA Logic bypass, Screenshot leaks, several Face Recognition artifacts, etc. 7asecurity.com/blog/2022/07/l…

OpenTechFund's profile picture. We advance internet freedom by supporting research, development, & implementation projects that fight censorship, increase privacy, & improve security online.
Open Technology Fund
 @OpenTechFund
2022. 7. 27.

Serious vulnerabilities have been found in the Hong Kong government's LeaveHomeSafe COVID-19 app. @7aSecurity recently conducted a security audit that discovered numerous flaws that allow interception of the LeaveHomeSafe app and its backend servers. opentech.fund/news/7asecurit…

OpenTechFund's tweet card.  
7ASecurity, OTF Red Team Lab partner, completes Blackbox Pentest and Privacy Audit of LeaveHomeSafe...
출처: opentech.fund
2
44
45
2
0
1
17
22
0
0
FD 님이 재게시함
vxresearch's profile picture.
VXCON
@vxresearch
2022. 6. 17.

We are organising VXCON on 27 August. Please feel free to submit CFP. vxcon.hk

0
2
3
0
0
FD 님이 재게시함
thezdi's profile picture.
Trend Zero Day Initiative
@thezdi
2022. 5. 18.

Confirmed! Masato Kinugawa demonstrated a 3-bug chain of injection, misconfiguration and sandbox escape on Microsoft Teams to earn $150K and 15 Master of Pwn points.

thezdi's tweet image. Confirmed! Masato Kinugawa demonstrated a 3-bug chain of injection, misconfiguration and sandbox escape on Microsoft Teams to earn $150K and 15 Master of Pwn points.
1
25
131
4
0
FD 님이 재게시함
RenwaX23's profile picture.
‌Renwa
 @RenwaX23
2022. 5. 10.

New writing about the story of 3 bug bounty reports in which I chain low severity bugs together for higher impact and less known browser tricks. Includes CSS injection, Self-XSS, Drag-Drop XSS, Cookie Bomb, Login-Logout-CSRF, and more... medium.com/@renwa/the-und…

RenwaX23's tweet card. Story of 3 bug bounty writeups which I use low bugs and chain them together for higher impact.
The Underrated Bugs, Clickjacking, CSS Injection, Drag-Drop XSS, Cookie Bomb, Login+Logout CSRF…
출처: medium.com
4
102
312
115
0
FD 님이 재게시함
EdOverflow's profile picture.
Ed
 @EdOverflow
2022. 4. 27.

After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116. I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

EdOverflow's tweet image. After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: rfc-editor.org/rfc/rfc9116. I would like to use this opportunity to thank those who made this possible. Thank you. ❤️
43
969
3천
243
0
FD 님이 재게시함
Hacxyk's profile picture.
HACxyk.
 @Hacxyk
2022. 4. 16.

We found a way to spoof ENS domains and were awarded a $15k bug bounty by @ensdomains 👇Check out the write-up medium.com/@hacxyk/how-we…

Hacxyk's tweet card. TL;DR: We found a flaw that allowed us to spoof Ethereum domain names and received a $15k bounty.
How we spoofed ENS domains for $15k
출처: medium.com
4
22
123
18
0
FD 님이 재게시함
EdOverflow's profile picture.
Ed
 @EdOverflow
2022. 2. 5.

New blog post: "What Bypassing Razer's DOM-based XSS Patch Can Teach Us" — edoverflow.com/2022/bypassing….

6
101
249
82
0
filedescriptor's profile picture.
FD
 @filedescriptor
2022. 1. 20.

Why do we need NFT on social media??

3
0
12
1
0
FD 님이 재게시함
filedescriptor's profile picture.
FD
 @filedescriptor
2021. 8. 11.

Also function solve(obj, property){ if(typeof obj != 'function') { obj(property).innerHTML = '<img src=1 onerror="alert(`You win`)">'; } else { alert('You must try harder than that.'); } }

1
5
17
2
0
FD 님이 재게시함
lbherrera_'s profile picture.
Luan Herrera
 @lbherrera_
2021. 5. 31.

I've been meaning to create a blog for some time now, and I finally did it! For its first post I wrote about a vulnerability that allowed an attacker to leak the full URL of cross-origin redirects on Google Chrome, check it out! blog.lbherrera.me/posts/appcache…

blog.lbherrera.me

AppCache's forgotten tales

Leveraging AppCache's network section to leak the complete URL of cross-origin redirects.

출처: blog.lbherrera.me
8
121
331
78
0
FD 님이 재게시함
DailySwig's profile picture.
The Daily Swig
 @DailySwig
2021. 5. 21.

‘Soft skills are the most under-researched area of the bug bounty industry’ – ‘Reconless’ YouTubers (@0xReconless ) on filling a gap in infosec education portswigger.net/daily-swig/sof…

DailySwig's tweet card. One year after the launch of their ethical hacking video channel, Ron Chan, ‘FileDescriptor’, and ‘EdOverflow’ tell The Daily Swig about their approach towards inspiring and educating the hacker...
‘Soft skills are the most under-researched area of the bug bounty industry’ – ‘Reconless’ YouTubers...
출처: portswigger.net
0
43
126
31
0
FD 님이 재게시함
PwnFunction's profile picture.
Suraj
@PwnFunction
2021. 4. 23.

New Video! Binary Exploitation 0x02 Why you should Close Your Files youtu.be/6SA6S9Ca5-U

PwnFunction's tweet image. New Video! Binary Exploitation 0x02 Why you should Close Your Files youtu.be/6SA6S9Ca5-U
5
71
285
31
0
FD 님이 재게시함
PortSwiggerRes's profile picture.
PortSwigger Research
 @PortSwiggerRes
2021. 2. 24.

The top 10 web hacking techniques of 2020, by @albinowax with help from @filedescriptor, @irsdl, @Agarri_FR and the entire community portswigger.net/research/top-1…

PortSwiggerRes's tweet card. Welcome to the Top 10 (novel) Web Hacking Techniques of 2020, our annual community-powered effort to identify the must-read web security research released in the previous year. Over the past few weeks
Top 10 web hacking techniques of 2020
출처: portswigger.net
4
241
505
89
0
filedescriptor's profile picture.
FD
 @filedescriptor
2021. 1. 19.

Untrusted Types just got a new UI with better filtering options and features thanks to @ThomasOrlita! Check it out! github.com/filedescriptor…

filedescriptor's tweet image. Untrusted Types just got a new UI with better filtering options and features thanks to @ThomasOrlita! Check it out! github.com/filedescriptor…
4
34
139
22
0
FD 님이 재게시함
ngalongc's profile picture.
Ron Chan
 @ngalongc
2021. 1. 19.

I have made a video to demonstrate how we can automate permission checks using my GitLab project "OpenAPI Security Scanner". Check it out! youtu.be/K65e5QRQ1tc Video editor: @wacms666

ngalongc's tweet card. Automating Permission Checks Using OpenAPI Security Scanner?

youtube.com

YouTube

Automating Permission Checks Using OpenAPI Security Scanner?

출처: youtube.com
8
95
319
59
0
intigriti's profile picture. Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍

Intigriti

@intigriti
samwcyo's profile picture.

Sam Curry

@samwcyo
NahamSec's profile picture. Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷

Ben Sadeghipour

@NahamSec
Jhaddix's profile picture. CEO, CISO, Trainer, Hacker, and Speaker. Cybersecurity + Hacking + AI + Sec Leadership @arcanuminfosec

JS0N Haddix

@Jhaddix
garethheyes's profile picture. JavaScript for hackers: Learn to think like a hacker. https://t.co/e0aNEbEDk5

Gareth Heyes \u2028

@garethheyes
LiveOverflow's profile picture. wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio

LiveOverflow 🔴

@LiveOverflow
MrTuxracer's profile picture. Freelancer @rcesecurity | #BugBounty | @Hacker0x01 H1-Elite | $1,500,000 Overall Bounties | Mobile Hacker | https://t.co/pcWduPOt0n

Julien | MrTuxracer 🇪🇺

@MrTuxracer
infosec_au's profile picture. Co-founder, security researcher. Building an attack surface management platform, @assetnote

shubs

@infosec_au
hakluke's profile picture. Hacker, marketer. I manage socials and produce amazing technical blogs for cybersecurity orgs. Founder of @hacker_content and @haksecio

Luke Stephens (hakluke)

@hakluke
Bugcrowd's profile picture. The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™

bugcrowd

@Bugcrowd
stokfredrik's profile picture. Hi.. im that hacker / creative that your friends told you about., 💫🔮

STÖK ✌️

@stokfredrik
h4x0r_dz's profile picture. Uber Driver

H4x0r.DZ 🇰🇵

@h4x0r_dz
Yassineaboukir's profile picture. HackerOne Top 50, Elite, Pentest Lead, Ambassador, MVH Title and (former) Hacker Advisory Board • Digital Nomad • (Un)pro Athlete

Yassine Aboukir 🐐

@Yassineaboukir
albinowax's profile picture. Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3

James Kettle

@albinowax
harshbothra_'s profile picture. Freelance Pentester & Consultant • Cobalt Core Lead & Pentester • Author • Speaker • Blogger • SecurityExplained • Project Bheem • Learn365 • Views are personal

Harsh Bothra

@harshbothra_
InfoSecComm's profile picture. Largest InfoSec publication with 62,000+ followers and 1M+ monthly views.

InfoSec Community

@InfoSecComm
Farah_Hawaa's profile picture. Security @ Meta | youtuber | views = mine

Farah Hawa

@Farah_Hawaa
gregxsunday's profile picture. Grzegorz Niedziela - a hacker who documents his hacking journey by creating and curating the best content about bug bounty and offensive security.

Bug Bounty Reports Explained

@gregxsunday
Hacker0x01's profile picture. The only official HackerOne Twitter account. A global leader in offensive security solutions. #HackForGood #togetherwehitharder

HackerOne

@Hacker0x01
PwnFunction's profile picture. alt @matmul

Suraj

@PwnFunction
ALLPHAAA7's profile picture.

arshiya

@ALLPHAAA7
HAbdullah55817's profile picture.

Hamzah Abdlmotalb Abdullah

@HAbdullah55817
khan70056's profile picture. Tech guy with security love

miloin matheu

@khan70056
HieuProgramer's profile picture.

Hieu Programer

@HieuProgramer
TheAliAbdollahi's profile picture. penetration tester :)))

DAli

@TheAliAbdollahi
Swoubfop02230's profile picture.

Swoubfop

@Swoubfop02230
aishaofuaa's profile picture.

和一

@aishaofuaa
S1renHead_'s profile picture.

S1ren Head 🇵🇸

@S1renHead_
6173687561646d6's profile picture. itsmeashu , dogs ,meow ;) | security researcher, bug bounty hunter !!

itsmeashu

@6173687561646d6
ko27182's profile picture. بواقي انسان علق

Kirolos osama

@ko27182
_xploiterr's profile picture. Shallow Waters are noisy, Deep Waters are Silent. ✍️ Write-ups → https://t.co/2ki4J3756e

xploiterr

@_xploiterr
GabliMop60212's profile picture.

Gabli Mop

@GabliMop60212
maxi_rch's profile picture.

maxi

@maxi_rch
kingladeyoo's profile picture. Programmer | Cyberpunk | Musician 🎵 Check out my Album . TFTBFSTFA 👇

Callme_Nafman

@kingladeyoo
sma_gggg's profile picture.

sma

@sma_gggg
mynameisskool's profile picture.

zzzzzz

@mynameisskool
W199621147's profile picture. Cyber Security | Ethical Hacking

White dragon

@W199621147
omarahmad1590's profile picture. لا أؤمن بالصدفة ،كنت دائماً أري اللَّه في كل شئ.

Omar Ahmed

@omarahmad1590
ebn_salah's profile picture. عبدٌ يرجو النجاة

محمود

@ebn_salah
AlirezaNezami23's profile picture. web application penetration tester

Alireza Nezami

@AlirezaNezami23
AzizullahZ7961's profile picture.

Azizullah Zafari

@AzizullahZ7961
wertikeo's profile picture. hhh

Kai to Qiao

@wertikeo
DavidSharl404's profile picture.

David sharl

@DavidSharl404
VAG33K's profile picture. Rather be the hunter than the prey

777

@VAG33K
Macabely97021's profile picture. Bug Bounty Hunter | CTF Player

Macabely

@Macabely97021
anupamjaiswall's profile picture. selftaught Ethical Hacker

Anupam Jaiswal

@anupamjaiswall
E1_Sec's profile picture. bb hunter constantly in dreams

Sēn

@E1_Sec
stealthp0inter's profile picture. half crazy half genius high tech low life

stealth pointer

@stealthp0inter
TheZ3ntinel's profile picture.

Naman Patil

@TheZ3ntinel
0xCh3ckm4t3's profile picture.

saul

@0xCh3ckm4t3
SaumyaTechBR's profile picture.

Saumya Agarwal

@SaumyaTechBR
senyksia's profile picture.

Sen

@senyksia
gaj3ndra's profile picture. Hello World!

Gajendra

@gaj3ndra
pandyaMayur11's profile picture.

PandyaMayur

@pandyaMayur11
soja_bang's profile picture. Life is Short And Progress is Slow 🕸

SOJA

@soja_bang
zeyu1337's profile picture. 🇸🇬 | co-founder @hacktronai | @projecteurope_ 🇪🇺 | cs @cambridge_uni 🇬🇧 | prev: @cure53berlin @tiktok_us, ogp | ctfs @water_paddler (def con 31-32🥈)

zayne (zeyu) zhang

@zeyu1337
ShayanAlizadeh_'s profile picture.

Shayan

@ShayanAlizadeh_
Hacker_Ise's profile picture. Web & Mobile Security Reseacher | Exploring Blockchain and Cloud Security | ARM | Chasing My Curiousity

Isaiah

@Hacker_Ise
mexic0x00's profile picture. :) noob

Mostafa

@mexic0x00
payioad0x13768's profile picture. 混子一个罢了

payIoad

@payioad0x13768
elfaqii's profile picture. فأقم وجهك للدين القيم من قبل ان ياتي يوم لا مرد له من الله ▼ 🇵🇸

آدَم الفَقِي

@elfaqii
mokhtar0x1's profile picture.

Mokhtar Wael

@mokhtar0x1
lucylovecode's profile picture. 一枚程序媛

Lucy

@lucylovecode
ExploitNest's profile picture. CRTA | CAP | OSCP (Aspirant) - Pentration Tester & Bug Hunter - Red Teamer 🤡

Dark@Joker:~$

@ExploitNest
hack3dby0mar's profile picture. Penetration Tester | Bug Bounty hunter

Omar

@hack3dby0mar
im4x00's profile picture. Im4x00

Armia Nessim

@im4x00
EAffair752680's profile picture.

Editor4-Affair7

@EAffair752680
cgfromdc's profile picture. Comms/PR lead at @Hacker0x01 | @GeorgetownPRCC Grad

Corey Goldstone

@cgfromdc
TvsDa58624's profile picture. Linux Administrator Python Coder

Goz26

@TvsDa58624

United States 트렌드

내가 좋아할 만한 콘텐츠

Something went wrong.


Something went wrong.