thehackerish's profile picture. Husband,Ethical Hacker,OSCP,CRTP,CRTE,CRTO...

🔴YouTube: http://youtube.com/c/thehackerish

thehackerish

@thehackerish

Husband,Ethical Hacker,OSCP,CRTP,CRTE,CRTO... 🔴YouTube: http://youtube.com/c/thehackerish

ปักหมุด

Excited to announce that the course is now LIVE! 🔥 🥳 Get INSTANT access to ALL modules and start your path to landing your first pentest job NOW! Discount expires after Black Friday. academy.thehackerish.com/?coupon_code=P…


This #BlackFriday, I am giving away my course "Hack like a white hat" for the first 1k students on Udemy. Available until 29th. Enroll, learn, and don't forget to leave a feedback! Enjoy: udemy.com/course/hack-li…


Next week I will be in NYC. What places do you recommend for food? I heard fast food is a must try. Leave me your replies


Interesting...

ทวีตนี้ไม่สามารถใช้งานได้อีกต่อไป

🕵️‍♂️Love a good CTF with a twist?👀Dive into this video where I leverage log poisoning, unveiling the dark secret of a notorious corporation.🕵️‍♀️📽️ #CTF #LogPoisoning #MustWatch youtu.be/DwI76dOtgjk

thehackerish's tweet card. I Hacked & Exposed This Fake Website for Educational Purposes - CTF

youtube.com

YouTube

I Hacked & Exposed This Fake Website for Educational Purposes - CTF


thehackerish รีโพสต์แล้ว

extremely saddened by the tragic and deadly 6.9 magnitude earthquake that hit home in Morocco 🇲🇦 the death toll has already surpassed 2,000 (at time of writing) with more than 1400 injured. my sincere condolences and prayers to all the people and families victims of this…

Yassineaboukir's tweet image. extremely saddened by the tragic and deadly 6.9 magnitude earthquake that hit home in Morocco 🇲🇦 the death toll has already surpassed 2,000 (at time of writing) with more than 1400 injured. 

my sincere condolences and prayers to all the people and families victims of this…

thehackerish รีโพสต์แล้ว

DevTunnels, blue are going to begin searching for DevTunnels.ms. Get ready ahead of time and use domains like: global.rel.tunnels.api.visualstudio\.com tunnels-prod-rel-tm.trafficmanager\.net *.app\.github.dev syonsecurity.com/post/devtunnel…


I always had a background voice that some hacker will deface my apps when I was a developer. It was my main motivation to learn web hacking. Today, I am sharing how it's done so you secure yours. #webdevelopment #ethicalhacking youtu.be/FvpZkEHpF8g

thehackerish's tweet image. I always had a background voice that some hacker will deface my apps when I was a developer. It was my main motivation to learn web hacking. Today, I am sharing how it's done so you secure yours. #webdevelopment #ethicalhacking 
youtu.be/FvpZkEHpF8g

thehackerish รีโพสต์แล้ว

In our latest post, @breakfix details how we were able to publish a malicious VSCode extension to the marketplace and leverage it for initial access during a red team mdsec.co.uk/2023/08/levera… vimeo.com/853281700?shar…

MDSecLabs's tweet card. Phishing with Visual Studio Code

vimeo.com

Vimeo

Phishing with Visual Studio Code


thehackerish รีโพสต์แล้ว

We would like to express our condolences to Blue Teamers. Microsoft has announced Microsoft Excel will now support Python. More information: techcommunity.microsoft.com/t5/microsoft-3…


Found an accessible SMTP server without authentication during an engagement. What do you think I did? 🤔


I never wanted having an Instagram account, and when I did, I will NEVER want to create one..

thehackerish's tweet image. I never wanted having an Instagram account, and when I did, I will NEVER want to create one..

I invest days prepping #redteam pretexts and scenarios, only to find that the customer's email policy blocks new domains🤦‍♂️ @Flangvik @domchell what's your strategy for maintaining a good domain reputation to use for upcoming engagements? Or just switch to social media?


I think I just found a Cloudflare #XSS bypass, and customer trusted the WAF. The app was using jquery, so I leveraged it to get and run my own script. And the WAF saw nothing.


#Pentesting guys out there, I have a GET param that gets injected into a HTTP call. I have path traversal and can only control the path of the backend API, not the hostname. I have direct access to the API, so fuzzing the API is irrelevant. Any exploitation ideas? RT for reach


Only one spot left! Go get the last coupon! It goes without saying that if you are already a pentester, don't even bother with challenge 🙃

One spot claimed, two spots are waiting for two curious minds.



One spot claimed, two spots are waiting for two curious minds.

There is a happy surprise inside📦



Loading...

Something went wrong.


Something went wrong.