Fascinating and very in depth writeup of active exploitation
.@Volexity detected an incident where it discovered a threat actor chained 2 #0days in Ivanti Connect Secure, CVE-2023-46805/CVE-2024-21887, to achieve RCE, modifying components of the software to backdoor the device.
volexity.com/blog/2024/01/10…
#dfir #threatintel #memoryforensics
Doing a source code review, and found they encode every single static variable value with a custom base64 function that also obfuscates it, it’s so irritating. Just makes me more determined to find bugs in it 😈
Siemens recently published an advisory containing several vulnerabilities I reported to them on devices using their ROX Firmware, was fun to dig deep into the backend code of an industrial networking device :)
cert-portal.siemens.com/prod…
Accidentally finding a command injection vulnerability because you have an @ in your password and the rest of it fails to resolve into a valid hostname 🤔
PD tools stay winning
[NEW-RELEASE] - TLSX
Features 👇👇
🎯 Multiple Modes for TLS Connection
🎯 Auto Fallback for older TLS version
🎯 Pre Handshake TLS connection
🎯 Custom Cipher / SNI / TLS selection
🎯 HOST, IP, URL, and CIDR input
GitHub Project: github.com/projectdiscovery/…
#tls #security #recon
I spend so much of my time away from the keyboard theorycrafting things to try, particularly automation, and then when I can sit down and actually work on it I instantly lose all motivation
Python 3 support praise the good lord
Blog post: Burp Suite roadmap for 2022
portswigger.net/blog/burp-su…
Anyone in the US have suggestions for good conferences to go to? Never been to one and I’d love to change that this year. East coast is ideal but I don’t mind traveling for good quality
DONT start bug bounties for the purposes of money. Start with the intention of learning, and if you invest in yourself, the bugs will come and eventually they will pay. I have a 9-5 and only did targeted hunting a few nights a week, but in Nov-Dec it was 3-4x my 9-5 income
This hunt is what got me started on Apple almost a year ago! While Apples bug bounty program and their interaction with the community leaves something to be desired, it is an absolutely fascinating target. Huge scope with lots of variety
Opened some apps on my iPhone, discovered an interesting "bag.xml" file which lead to finding XSS which we used to grab your Apple PII information. A finding from back in feb with @BugBountyHunt3r members
zseano.medium.com/finding-xs…
Leveled up to 0x03! https://xitter.cf/t.co/hiXGDlrvNT via @SynackRedTeam
Was going to tweet about level 2 when I got it earlier this week, but then I got level 3 before I got the chance. Loving the platform so far!
