Welcome 2023 with lot's of memes Hi guys, new year, worls is still collapsing. So, as this trend is going on and so much weird things are happening on a daily basis. I think it's time to spread some love/hate with more memes. Thankfully, https://github.com/jacebrowning provides a very feature-rich meme generator. https:
/imagine prompt:hacker in cyberpunk style holding a commodore 64 Let's add some more doomsday atmosphere ☠️ ☢️ ☠️ There are several ways to make use of AI for your art skills :D Because I'm lazy, I just added the Midjourney Bot to my own Discord server. You can find it in the App Directory: Then it's as easy as just send a
RFC3966: Parsing phone numbers is hard :D Did you know you can hide your payloads in phone numbers? ☎️😱 RFC3966 specifies parameters for valid phone numbers that can contain characters. @securinti discovered that popular libraries are vulnerable and that it can lead to XSS and even ATO!🔥#BugBountyTips #NahamCon2022EU pic.twitter.com/tNUVyZu7Oz — INTIGRITI (@intigriti) December 17, 2022
Log4Shell one year later They are pretty cozy! 😄 #log4shell #anniversary https://t.co/Uv7Ld7S0zu pic.twitter.com/F7r4UKxd7z — Alvaro Muñoz 🇺🇦 (@pwntester) December 14, 2022
Bookmarklet to extract all URLs from DOM I've created a javascript bookmarklet that will extract all endpoints (starting with /) from your current DOM and from all the all the external script sources embedded on the page. You can find it here, if you want to try it out:https://t.co/1geip38VIh#bugbountytips pic.twitter.com/fZPko29vKO
ChatGPT for Hackers Unleashing the Power of ChatGPT for Bug Bounty and Penetration Testing Credit: @cyph3r_asrhttps://t.co/HcFDcro9s8 #cybersecuritytips #infosec #ChatGPT #bugbountytips #hacking — 7h3h4ckv157 (@7h3h4ckv157) December 6, 2022 Very nice summary about all kind of security stuff, that people already used ChatGPT for. Unleashing the Power of ChatGPT for Bug Bounty
ASUS are the masters of failsafe code Dear @ASUS , I guess this is not the right way 😅 #bugbounty pic.twitter.com/oVK6cxNcY6 — Akash Pawar ~ वीरा (@0xVeera) December 11, 2022 Let's think about that brilliant code behind ... otp = RANDOM_INT(6) user.session.otp = otp if sms.gateway.isAlive(): sms.gateway.send(user.number, otp) else: // hm
Let's start some more regular blogging ... I run this blog since 2015 and as you can see, I was able to publish two posts :-D Sooo, today I will start to ab(use) this place for my regular shitposts :)
Blaupunkt Smart Home Alarm Q3x00 vulns Introduction As IoT is a huge topic nowadays and a lot of vulnerabilities have been found on that devices during the last months my team and I took a quick look at the IP based Smart Home Alarm system Q3000 of Blaupunkt. The system consists of a controller called ("Alarmzentrale"
Advanced CSRF Attacks against Modems, Routers, Accesspoints and other internal network devices Introduction In 2014 a lot of vulnerabilities were detected in SOHO devices. In addition to critical flaws, which allow unauthenticated attackers to execute arbitrary code, there are a mass of CSRF vulnerabilities which allow a remote attacker to change different settings within the vulnerable SOHO devices. There is also an
