Syslifters (@syslifters) header
Syslifters (@syslifters) profile picture

We are dedicated to #pentests. We go on the #offensive and uncover #vulnerabilities in applications and infrastructures to prevent #attacks in the first place!

Joined January 2022
Photo by Syslifters (@syslifters)Photo by Syslifters (@syslifters)Photo by Syslifters (@syslifters)Photo by Syslifters (@syslifters)
Syslifters retweeted
🚨 We patched an privilege escalation vulnerability for authenticated users in SysReptor with 2025.83. SysReptor cloud is fully patched. Update your SysReptor self-hosted installations as soon as possible. Find more information in our advisory: github.com/Syslifters/sysrep…
2
4
192
Syslifters retweeted
The pentesting customers' year in numbers 🤡
3
4
294
Syslifters retweeted
Great Google course about #technical #writing. Works great for #pentest #reporting. developers.google.com/tech-w…
2
2
184
Syslifters retweeted
We asked at Twitter and LinkedIn if Red Teamers would report an EDR bypass to vendors. Who is lying? Twitter or LinkedIn?
1
4
229
Syslifters retweeted
Our lab for @offsectraining certifications now includes reports for: #OSWA - Offensive Security Web Assessor #OSED - Offensive Security Exploit Developer #OSMR - Offensive Security macOS Researcher #OSDA - Offensive Security Defense Analyst docs.sysreptor.com/oscp-repo… All available report templates are: #OSCP/#PWK, #OSWP/#WNA, #OSEP/#ETBD, #OSWA/#WAKL, #OSWE/#AWAE, #OSED/#WUMED, #OSMR/#MCB, #OSEE/#AWE, #OSDA/#SODA
3
3
244
Syslifters retweeted
Find the #SSO docs for #Azure and #Google: docs.sysreptor.com/setup/oid… Need other IDP? Or need help with setup? Drop us a message at github.com/Syslifters/sysrep… #reporting #pentesting #redteaming
3
3
157
Syslifters retweeted
SUDO for #Superusers! SysReptor superusers have standard privileges, until they #elevate their permissions using #sudo. ❤️ Pro only #reporting #pentesting #redteaming
5
4
1
4
220
Syslifters retweeted
We don't use #haveibeenpwned or #dehashed for our engagements. We prefer #Kaduu for getting lists of leaked plain text passwords. kaduu.io/ #cve #cybersecurity #infosec #pentesting #bugbounty #redteaming #togetherwehitharder #bugbountytips
3
3
716
Syslifters retweeted
Thank's to @pdnuclei merging our #Jedox detection template. This can be used for finding installations to check for the recently published #RCEs docs.syslifters.com/en/advis… github.com/projectdiscovery/… #cve #cybersecurity #infosec #pentesting #bugbounty #redteaming
8
27
3,907
Holy shit, almost translated our whole report format into @syslifters' sysreptor format.
2
3
7
1,683
Syslifters retweeted
CyberChef is our favorite tool for encoding and decoding. Runs as JavaScript locally in the browser. It's that easy. github.com/gchq/CyberChef #cve #cybersecurity #infosec #pentesting #bugbounty #redteaming #togetherwehitharder #bugbountytips
2
4
263
Syslifters retweeted
🚨 We found 7 severe vulnerabilities in the #Jedox EPM software, including #RCE, #DirectoryTraversal and Stored #XSS PoCs at @ExploitDB: exploit-db.com/?author=11909 #CVE-2022-47875, CVE-2022-47879,... #cybersecurity #infosec #pentesting #bugbounty #redteaming #bugbountytips
1
5
5
337
Syslifters retweeted
3
3
146
Syslifters retweeted
SameSite=strict doesn't help against CSRF 🤯 Cross-Origin != Cross-Site Cookies are not sent cross-origin but same-site, ie: From customer1.example.com to customer2.example.com (but not from xy.com to yz.com) #pentesting #bugbounty #infosec
3
2
83
Syslifters retweeted
🎉🎉 We will launch our community edition on 2 May. Get a preview at our playground: cloud.sysreptor.com/demo #cybersecurity #infosec #pentesting #bugbounty #redteaming #togetherwehitharder #bugbountytips #htb
3
4
104