Karel Origin retweeted
Still using the NVD API?
Coverage gaps, inconsistent CVSS scoring, missing CPEs, and enrichment delays can slow down triage and automation.
We just released our NVD-compatible API, designed as a drop-in replacement. Swap the base URL and try it free.
app.volerion.com/solutions/n…
Karel Origin retweeted
Launching today!
Volerion transforms raw CVEs into structured and instant insights
#CVE #CyberSecurity #infosec
Found myself in a scenario where I had to query a rate-limited API.
The sleep command works but will waste a lot of time, as it cannot take into account the time passed since the call originally started. Couldn't find anything existing, so I created:
github.com/karelorigin/limit…
Karel Origin retweeted
I just published Identifying and Exploiting Unsafe Deserialization in Ruby XMLRPC link.medium.com/tc9mOBQlUBb
Karel Origin retweeted
You have command injection in a GitHub Actions workflow. Now what?
Read my blogpost on leaking secrets from GitHub Actions workflows:
karimrahal.com/2023/01/05/gi…
Karel Origin retweeted
In yesterday's @CoreRuleSet release several critical issues are getting fixed which I and other hackers reported during #1337up0522. The most interesting bug affecting broader number of WAFs is yet to be released so stay tuned!👾👾
coreruleset.org/20220919/crs…
Had a lot of fun this event with @intigriti and @TheParanoids! Meeting the hackers and Yahoo/Intigriti people was a real pleasure :) #1337up0822
🚥 Get ready, set, go! 🏎️💨
Time for these top hackers to relax and watch some top racers!
#1337up0822 @TheParanoids @intigriti
All good things come to an end, even 1337up0522. Never thought that I would finish in 2nd place. Super grateful for the Most Valuable Hacker award. Thanks a lot @intigriti!
Hope I get to do this again sometime! :)
Karel Origin retweeted
.@Karel_Origin, @kapytein and I won the most advanced hack prize and second price for the hackademic award 🥳 was a fun day and I'm looking forward to next year IRL
We're thrilled to announce the winners of #HTH21:
1st Most Creative Hack: Bazen
1st Most Impactful Hack: Omegapoint--Göteborg
1st Most Advanced Hack: {{hubs.li/H0YcmsJ0}}
1st Hâckademic Award: FlosSecurity
#HTH21 | @GemeenteDenHaag | @cybersprintnl | @zerocopter
Karel Origin retweeted
Introducing: Wingman
Wingman is an XSS scanner designed for bug bounty hunters, infosec professionals, and hobbyists.
Read more:
xsswingman.com/blog/posts/an…
Read all about our investigation on the HouseParty hack! 👇
I couldn't bear the thought of going a full year without publishing a blog post on my website. So to end 2020, @KarimPwnz, @Karel_Origin, and I have published our investigation into the Houseparty hack: "The Story of the Million Dollar Bounty" — edoverflow.com/2020/housepar…
BOOM! This is it. The "BOOM" that started it all, or as @securinti likes to call it: The big BOOM.
6 years ago: hackerone.com/reports/16392
Pain is what you experience when you have a decent amount of followers but 0 likes on your latest tweet :P
