Benjamin D. Mussler (@mussler) header
Benjamin D. Mussler (@mussler) profile picture

Benjamin D. Mussler

@mussler

German security researcher in Malta. Accidental bug bounty participant.

 Malta
Joined August 2012
  • Tweets161
  • Following0
  • Followers384
14Media
Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)Photo by Benjamin D. Mussler (@mussler)
At the German OWASP Day 2019 in Karlsruhe #owasp_d19 #god19 – at Karlsruhe, Germany
Image from Benjamin D. Mussler (@mussler)
5
1
11
The next OWASP Meeting is happening on the 6th of November ❗ ℹ️ owasp.org/index.php/Malta
Image from National Cybersecurity Coordination Centre MT (@cybercentremt)
1
2
5
Benjamin D. Mussler retweeted
Juxhin (@juxhindb) profile picture
Juxhin
@juxhindb24 Aug 2019
Finally came around to writing a short post on how to setup your own Bind9/named DNS resolver to detect Out-of-Band vulnerabilities - blog.digital-horror.com/sett… #appsec
3
19
23
TYPO3 Arbitrary Code Execution in Image Processing typo3.org/security/advisory/… via @typo3_security
1
3
🇲🇹 Putting Malta on the map of #owasp_d2018 attendees – at Münster, Germany
Image from Benjamin D. Mussler (@mussler)
4
... when @manicode asks a room full of Germans how many of them use Facebook, and not a single hand goes up ¯\_(ツ)_/¯
Image from Benjamin D. Mussler (@mussler)
2
2
15
Benjamin D. Mussler retweeted
Juxhin (@juxhindb) profile picture
Juxhin
@juxhindb10 Jul 2018
Synner—A TCP SYN client written in Rust. First attempt at low-level networking with Rust powered by libpnet. blog.digital-horror.com/synn… #rust #rustlang #libpnet
3
13
44
PoC for Drupal CVE-2018-7600 / SA-CORE-2018-002 xitter.gq/rotem_reiss/status/984…
Rotem Reiss (@rotemreiss) profile pictureRotem Reiss@rotemreiss12 Apr 2018
Mission accomplished. #drupalgeddon2 #cve-2018-7600 #sa-core-2018-002 @drupalsecurity research.checkpoint.com/unco…
1
6
1
13
Cc: @RicterZ @notdan @bojanz @chx
2
🇪🇪 Are there any infosec related events in Estonia, other than CyCon? Something like BSides, OWASP...? //Cc: @BrainiacBug @elarlang @SilviaValiSV @putsi
3
2
RCE closed as Informative ¯\_(ツ)_/¯
Image from Benjamin D. Mussler (@mussler)
6
#SANSHolidayHack​s are exceptionally well made CTFs. Not only entertaining but clearly designed to educate participants of various skill levels and backgrounds. Highly recommended! xitter.gq/edskoudis/status/94144…
edskoudis (@edskoudis) profile pictureedskoudis
@edskoudis14 Dec 2017
We’re off to see the…. 2017 #SANSHolidayHack Challenge!!!! Snowballs and Hacking and Elves… Oh my! Enjoy! holidayhackchallenge.com
Image from edskoudis (@edskoudis)
Image from edskoudis (@edskoudis)
4
3
Benjamin D. Mussler retweeted
publiclyDisclosed (@disclosedh1) profile picture
publiclyDisclosed@disclosedh127 Oct 2016
Open-Xchange disclosed a bug submitted by @dejavuln: hackerone.com/reports/156258 - Bounty: $1,000 #hackerone #bugbounty
Image from publiclyDisclosed (@disclosedh1)
1
4
14
Mail.ru hacked w/ SQLi despite bug bounty @Hacker0x1. Turns out SQLi on targets was reported in Jan but out of scope
Image from Benjamin D. Mussler (@mussler)
5
116
20
117
FristiLeaks, SecOS, pWnOS 1, Tr0ll (not necessarily in that order)
Benjamin D. Mussler retweeted
Antonio Quina (@st3r30byt3) profile picture
Antonio Quina@st3r30byt318 Aug 2016
PowerShell is opensource and runs on Linux and OSX! github.com/PowerShell/PowerS…
1
1
Not as comprehensive but IMO enough for OSCP prep: first few parts of securitytube.net/groups?oper…, then securitytube.net/groups?oper…
XSS via SMB username (unauth) in seven @Dlink NAS. Fires on admin login w/o user action. b.fl7.de/2016/08/d-link-nas-…
Image from Benjamin D. Mussler (@mussler)
1
15
1
7
Regex: [A-z] is *not* short for [A-Za-z]. Simple demo how [A-z] can be dangerous when used to whitelist characters:
Image from Benjamin D. Mussler (@mussler)
1
"Passwords were stored in plaintext [...] hackers can now see all 100 million passwords used on [VKontakte]." xitter.gq/LeakedSource/status/73…
This Post is from a suspended account. Learn more
Load more