S33K3R retweeted
HTTP/3 downgrade desync via a QUIC FIN! This is a really nice finding. There used to be a significant cognitive & fiddly-coding barrier to testing lower-level HTTP/2 & 3 techniques but AI has largely eliminated it.
As ever, the fix is... upstream HTTP/1 must die!
HAProxy HTTP/3 -> HTTP/1 Desync: Cross-Protocol Smuggling via a Standalone QUIC FIN (CVE-2026-33555) r3verii.github.io/cve/2026/0…
Also, find solid pentesting services.. Y'all be writing expensive CTF codes. smh
For my techies? Read please:
A startup raised $2M in seed funding on a Friday.
By Monday morning, their entire user database was dumped on a dark web forum.
Passwords? Plain text. Rate limiting? None. JWT secrets? Hardcoded in a public GitHub repo pushed 8 months prior.
3 years of work. Gone in a weekend.
The attacker didn’t use anything exotic. No zero-days. No sophisticated exploit.
Just a login endpoint with no protection and a Google search.
The CTO posted a tearful apology thread. Users left. Investors pulled back. The company folded 4 months later.
All of it; every bit of that pain; was preventable.
This is the auth thread I wish they had read. 👇
E bami mu T-shirt yen wa. Or the free PT1 so I can gift someone.
They said don’t fall in love too fast. We said ship it. 💥
Love at First Breach is officially LIVE 💖
Beginner-friendly rooms, low pressure and high dopamine. Solve rooms, collect tickets, repeat. The more you play, the better your chances.
So come see why everyone’s catching feelings 😉
👉 Start stacking tickets tryhackme.com/love-at-first-…
I got my PT1 certification over the weekend... Tuff web part that consumed time in testing, moderate network part, and a challenging Active Directory.
#TryHackMe #PT1 #Certification #Cybersecurity #offsec
Yo, X fam.. Recent hax at PwnTillDawn.. Exciting bugs to exploit and, they're all Quite nice overall. IamGroot took over 6 months to find the last flag.. Not fair 😂😂 @wizlynxgroup
Team PWNxR00T here. Thank you @NITDANigeria 👏🏾
A big Congratulations to the winners of the #NCSC cybersecurity Hackathon's "Capture the Flag: Industry Professionals Category":
1. 1st position: Team Error
2. 2nd position: Team PWN x ROOT
3. 3rd position: Team PWN_NG
Their exceptional skills and relentless efforts in addressing cybersecurity challenges shone through in the 24-hour competition (6pm-6pm). Kudos to all participating teams for their outstanding performances! #NCSC2025
Been a while I posted here... Did some pwntilldawn boxes lately. They're quite interesting.
#pwntilldawn
S33K3R retweeted
🚀 Deployed a production-grade CI/CD pipeline for a Flask app using Docker, AWS ECS/EKS, and GitHub Actions. Docker handles secure containerization 🐳, EKS powers seamless orchestration ☁️, and GitHub Actions automates the entire workflow 🤖. #CloudComputing #AWS #buildinpublic
S33K3R retweeted
Final giveaway of the year🎁:
4️⃣Hand-On Web Exploitation (Course Only hhub.io/2024holidays)
3️⃣Shodan Codes
2️⃣Caido licenses
1️⃣Hands-On Web Exploitation (Certificate+Course Bundle)
To enter drop a 🫶🏼and RT
Check this out, I just headshotted ochinwu via @Justunsecure app.afrihackbox.com/target/4… #Justunsecure #Afrihackbox #Africa #CTFchallenges #Cybersecurity #Africanhackers
S33K3R retweeted
On Thursday, we made history by launching Afrihackbox by JustUnsecure (a leading non-profit organization focused on cybersecurity in Africa) in collaboration with Suwebatu AB
Afrihackbox is Africa’s latest platform, offering FREE cybersecurity training to all.
Excited to have secured 2nd place at the Afrihackbox CTF 2024. Huge thanks to them and the sponsors for the incredible opportunity. Also, it was a great experience to witness the launch of their cybersecurity platform.
@afrihackbox @justunsecure #Afrihackbox_ctf_2024 #Launch
