This little technique can force your blind #XXE to output anything you want! mohemiv.com/all/exploiting…

My tool goes public! Having a scope it can help you scan ports, dirsearch and brute creds. Displaying the data in a handy way. A great assistant at a more methodical assessement on bugbounty and pentest github.com/c0rvax/project…

The security community's fixation with rockstars and what they perceive as 'technical' is toxic. Working on things I like and making progress is what matters, other people's opinions don't matter. This is what I need to tell myself everyday.

Me and Vladimir Ivanov launched perimeter security scanner. We've automated recon, crawling, scanning and more. Talk to us scanfactory.io/en/ to get a free demo for your company

Data from basketball, but could apply to venture capital. Today it's all about (growth) slamdunks or (early) 3-pointers

God made Saturdays and Sundays so that startup employees can finish the tasks they promised they'd do by Friday 😿😿😿

We are doing a #giveaway of £100 Hack The Box Gift Card to the one who is able to secure most points on #HTB between 8th January & 8th February. To participate -> - follow us - like & retweet this post - comment your HTB profile #infosec #ctf #Giveaways #GiveawayAlert

I'm claiming testnet tokens for ZKsync era, the ultimate zkEVM! My Address: 0x46e1e4e1ae08c2fde6c6288c72f08d4b65e21767 Learn more: zksync.io

Приглашаем специалистов по веб-безопасности 12 октября, в среду, на OWASP Russia Meetup в московском офисе: bit.ly/2dxYtQy.

Regexp Security Cheatsheet Helps you to find #security #vulnerabilities in custom #regexp Author: Vladimir Ivanov github.com/attackercan/re…

Приручаем WAF’ы. Как искать байпасы в современных Web Application Firewalls и что с ним ... xakep.ru/2016/12/19/web… (для подписчиков)

XXE in Uber: 0day in backup application #bugbounty httpsonly.blogspot.ru/2017/01/0day-w…

Just became #OSCP. Love living in a big family of geeks who love their job.

Все, кто хочет работать в РТ, приходите, познакомимся! Будет много домашних заданий и мини-CTF. x.com/ptsecurity/sta…

Cool work! Was waiting for someone to make progress in SQLi fuzzing. x.com/2d8ru/status/9…

My first blog post about: *XSS via different extensions *SSI in IIS *RCE in IIS mike-n1.github.io/ExtensionsOver… #bugbounty #security #infosec

New research: abusing XML encodings to bypass WAFs. Must-read for pentesters! x.com/i_taksoydet/st…

#pentest 0day in iTop 2.4.0 gave me Domain Admin privileges. Check my writeup and download metasploit module: httpsonly.blogspot.com/2018/04/pentes…