Offsec enthusiast 💻🛡 My tweets are mine
Ireland
Joined March 2012
- Tweets754
- Following213
- Followers221
- Likes2.6K
Javier Ortega retweeted
Small bug bounty writeup from one of my findings from the past - even back then having a carefully crafted list of non resolving starbucks hostnames was essential (shameless ad: argosdns.io). Writeup:
argosdns.io/blog/how-i-got-i…
Background of hackerone.com/reports/500468
Javier Ortega retweeted
ICYMI: I created an LLM-powered tool to detect CVEs before they're even published - and it's now powering vulnerabilityspoileralert.co….
This is a simple GitHub page statically generated using vulnerability-spoiler-alert-action. Check out the backtest findings at github.com/spaceraccoon/vuln… and let me know what you think the hit rate is!
I'm running this open-source vulnerability intelligence project using a personal API token, but maybe @AnthropicAI... or @OpenAI might want to support this? 👀
Very interesting read, can't wait to try some MCP pentest🫡
I wrote about Hackbots on the @Hacker0x01 site!
It covers what they are, where they're at now, and most importantly where it's all heading 😊
I hope you'll check it out! Link in first reply.
108
Javier Ortega retweeted
Tired of waiting hours for cert.sh to catch new domains?
@G0LDEN_infosec built Gungnir—a tool that scrapes CT logs in real time. See new domains within seconds of cert creation.
Full talk on YouTube → youtu.be/yQQ92XAWfGY
#BugBounty #Recon #BugBountyVillage
Javier Ortega retweeted
Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:
Javier Ortega retweeted
waymore v4.9 is available:
🩹 BUG FIXES: See CHANGELOG on github
✅ Update with: pip install --upgrade waymore
github.com/xnl-h4ck3r/waymor…
#BugBounty
🤘
Javier Ortega retweeted
Analysis of the URL File Zero-Day Vulnerability
CVE-2024-43451
github.com/blackorbird/APT_R…
Javier Ortega retweeted
Want a quick & dirty (but supported by Microsot) way to avoid #follina Office know payloads?
Just disable "Troubleshooting wizards" by GPO
> admx.help/?Category=Windows_…
HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnostics - EnableDiagnostics - 0
By CERT @banquedefrance
Si no hubiera sido por la convocatoria de septiembre, yo no habría acabado mi carrera, tres años seguidos fui y gracias a eso saqué la carrera en 4. Es una vergüenza que no se haya preguntado la opinión del propio alumnado que va a hacer estos exámenes.
El Consejo de Gobierno @unizar ha aprobado hoy el calendario académico 2022-2023 con el adelanto de la convocatoria de septiembre a finales de junio y principios de julio. Así se armoniza el calendario con el resto de etapas educativas: y se equipara al resto de universidades.
Javier Ortega retweeted
The latest update where @duosec swapped the spots for approve/deny for their MFA push is a killer due to my muscle memory.
De las peores cosas que le podrían pasar a Polonia. Un país que podría ser grande en Europa haciéndose la zancadilla a si mismo.
This Post is from an account that no longer exists. Learn more
1