Husband,Ethical Hacker,OSCP,CRTP,CRTE,CRTO... 🔴YouTube: https://xitter.gq/t.co/f43ti2FFIj
0.0.0.0/0
Joined January 2013
- Tweets936
- Following99
- Followers3.8K
- Likes1K
Pinned Tweet
Excited to announce that the course is now LIVE! 🔥 🥳 Get INSTANT access to ALL modules and start your path to landing your first pentest job NOW!
Discount expires after Black Friday.
academy.thehackerish.com/?co…
This #BlackFriday, I am giving away my course "Hack like a white hat" for the first 1k students on Udemy. Available until 29th. Enroll, learn, and don't forget to leave a feedback! Enjoy: udemy.com/course/hack-like-a…
Next week I will be in NYC. What places do you recommend for food? I heard fast food is a must try. Leave me your replies
🕵️♂️Love a good CTF with a twist?👀Dive into this video where I leverage log poisoning, unveiling the dark secret of a notorious corporation.🕵️♀️📽️ #CTF #LogPoisoning #MustWatch
youtu.be/DwI76dOtgjk
thehackerish retweeted
extremely saddened by the tragic and deadly 6.9 magnitude earthquake that hit home in Morocco 🇲🇦 the death toll has already surpassed 2,000 (at time of writing) with more than 1400 injured.
my sincere condolences and prayers to all the people and families victims of this tragedy.
thehackerish retweeted
DevTunnels, blue are going to begin searching for DevTunnels.ms. Get ready ahead of time and use domains like:
global.rel.tunnels.api.visualstudio\.com
tunnels-prod-rel-tm.trafficmanager\.net
*.app\.github.dev
syonsecurity.com/post/devtun…
I always had a background voice that some hacker will deface my apps when I was a developer. It was my main motivation to learn web hacking. Today, I am sharing how it's done so you secure yours. #webdevelopment #ethicalhacking
youtu.be/FvpZkEHpF8g
thehackerish retweeted
In our latest post, @breakfix details how we were able to publish a malicious VSCode extension to the marketplace and leverage it for initial access during a red team mdsec.co.uk/2023/08/leveragi… vimeo.com/853281700?share=co…
thehackerish retweeted
We would like to express our condolences to Blue Teamers.
Microsoft has announced Microsoft Excel will now support Python.
More information: techcommunity.microsoft.com/…
At the beginning of my #Hacking journey, I struggled with Active Directory. Years later, here is a humble contribution to the community: becoming Domain Admin using a classic chain attack.
youtu.be/3lBPEyQaptI
Found an accessible SMTP server without authentication during an engagement. What do you think I did? 🤔
I think I just found a Cloudflare #XSS bypass, and customer trusted the WAF. The app was using jquery, so I leveraged it to get and run my own script. And the WAF saw nothing.
#Pentesting guys out there, I have a GET param that gets injected into a HTTP call. I have path traversal and can only control the path of the backend API, not the hostname. I have direct access to the API, so fuzzing the API is irrelevant.
Any exploitation ideas? RT for reach
Only one spot left! Go get the last coupon!
It goes without saying that if you are already a pentester, don't even bother with challenge 🙃
Episode 2 is up! I read the code to understand and bypass a SQL injection.
youtu.be/BwVn--fgyP4
