Andrei Abakumov (@andrewaeva) header
Andrei Abakumov (@andrewaeva) profile picture

Andrei Abakumov

@andrewaeva

Security, Yandex

 Russia, Saint-Petersburg
Joined April 2011
  • Tweets865
  • Following398
  • Followers607
32Media
Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)Photo by Andrei Abakumov (@andrewaeva)
You must try harder!
2
1
2
Начали выдавать доступ до chaos.projectdiscovery.io/ В базе уже 3.452B записей, которые помогут погонять над ними все что хочется, например nuclei от ребят из этого же проекта. Заполняешь форму, получаешь API ключ для github.com/projectdiscovery/… и интегрируешь в свои пайплайны.
Chaos by Projectdiscovery

Chaos by Projectdiscovery

Live and comprehensive internet data API, this dataset is actively updated with DNS entries across the entire internet.

chaos.projectdiscovery.io
350
История о том, как мы придумали с нуля отдельную инфру для Банка в Облаке, которая сейчас летит в проде. Сложно поверить, что эта история началась со схемы на доске в комнате безопасности. О том, с какими трудностями мы столкнулись и какие выводы сделали youtube.com/live/HJDOSkW-yyU…
Yet Another Security Meetup #1

Yet Another Security Meetup #1

00:00:00 Начало трансляции00:02:11 Открытие – Антон Карпов, Яндек...

youtube.com
2
5
768
В поиске appsec инженеров к нам в команду. Задачи как application, так и infrastructure security. Предстоит заниматься персональными сервисами (Почта, Диск, Документы, Телемост) и внутренним финтехом. В перспективе, внешним финтехом. yandex.ru/jobs/vacancies/sec…
I have bought AWAE course. Any advices for preparation?
2
1
Adding A*120 to the end is so similar to programming and binary security 😆 berthub.eu/articles/posts/re…
1
1
And bypassing immune system by special char - 1-methyl-3’-pseudouridylyl is so scary
Andrei Abakumov retweeted
Eldar Zaitov (@kyprizel) profile picture
Eldar Zaitov@kyprizel17 Jul 2020
Do you use ZooKeeper in your infrastructure? Keep it secure. A story of exploiting ClickHouse vulnerability via ZooKeeper. medium.com/@kyprizel/why-kee…
Why keep you Zoo doors closed

Why keep you Zoo doors closed

A story of RCE via ZooKeeper and ClickHouse replication protocol (CVE-2019–15024)

medium.com
1
15
31
SSRF + CRLF + HTTP Pipeline + Docker API = RCE… How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber link.medium.com/dSWQ6ewPL6
How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer…

How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer…

Every idea needs a Medium

link.medium.com
4
368
5
842
Verifying myself: I am andrewa on Keybase.io. rW3lqPBauXQi_0fxbJluNEWIBtIzRBlKAkla / keybase.io/andrewa/sigs/rW3l…
Gh0st, Humble, Sufferance, Pain done!
Andrei Abakumov retweeted
Eldar Zaitov (@kyprizel) profile picture
Eldar Zaitov@kyprizel14 Feb 2018
Russian #1 web resource is now served with 1y HSTS and includeSubdomains. Gratz @oxdef @ivladdalvi @toxo4ka!
3
5
Andrei Abakumov retweeted
oxdef (@oxdef) profile picture
oxdef@oxdef18 Nov 2017
ZeroNights 2017 ift.tt/2jEvjnH
1
7
12
Andrei Abakumov retweeted
CTFZone (@CTFZone) profile picture
CTFZone@CTFZone18 Nov 2017
CTFZone Finals 2017 finished! Top3 places: 1. LC/BC (Russia) 2. EatSleepPwnRepeat (Germany) 3. SUSlo.PAS (Russia) #ctfzone #makectfgreatagain #zeronights #bizone
Image from CTFZone (@CTFZone)
17
1
26
We released our plugin - security checks pack for Burp Suite #burp #extension #zeronights github.com/yandex/burp-molly… @Burp_Suite
GitHub - yandex/burp-molly-pack: Security checks pack for Burp Suite

GitHub - yandex/burp-molly-pack: Security checks pack for Burp Suite

Security checks pack for Burp Suite. Contribute to yandex/burp-molly-pack development by creating an account on GitHub.

github.com
28
53
Slides from #zeronights yadi.sk/i/4kmI3EMS3PocGC Automation of Web Application Scanning with Burp Suite #burp #extension
10
30
Andrei Abakumov retweeted
Ivan Chalykin (@igc_iv) profile picture
Ivan Chalykin@igc_iv11 Jul 2017
Thanks Yandex BugBounty for this awesome trip :)
"><svg/onload=alert()>

ALT "><svg/onload=alert()>

1
4
Andrei Abakumov retweeted
oxdef (@oxdef) profile picture
oxdef@oxdef28 Jun 2017
Ищем руководителя для «Охоты за ошибками»! yandex.ru/jobs/vacancies/pro…
3
2
Лол
куда?
успеха чего?
Load more