Soroush Dalili

@irsdl

Another ethical web appsec guy - breaker 〉builder - very limited BB hunter - delimiter characters fan - RT/LK can be an accident or not "'›|&;${3-1}\

World of Sec! 0xC0000005 Err
soroush.me
Ağustos 2009 tarihinde katıldı
140 Fotoğraf ve video Fotoğraflar ve videolar

Tweetler

@irsdl adlı kişiyi engelledin

Bu Tweetleri görüntülemek istediğinden emin misin? Tweetleri görüntülemek @irsdl adlı kişinin engelini kaldırmaz.

  1. Sabitlenmiş Tweet
    25 Nis

    With the release of my ViewState plugin for , here is my blog post on Exploiting Deserialisation in ASPNET via ViewState:

    7 yanıt 167 retweet 316 beğenme
    Bu Tweet dizisini göster
    Bu Tweet dizisini göster
    Geri al
  2. Retweetledi
    31 Eki

    Did you know you can use the Connection header to delete other headers? Interesting research lead by :

    4 yanıt 171 retweet 391 beğenme
    Bu Tweet dizisini göster
    Bu Tweet dizisini göster
    Geri al
  3. 31 Eki

    Perhaps also join in even if you are a fan ;)

    Happy Halloween? If you're not a fan of horror stories, join the campaign to make the Computer Misuse Act fit for the 21st century:
    Geri al
  4. 31 Eki

    Probably the last time I am doing this with this laptop - research continues! I am going to miss my stickers

    6 yanıt 24 beğenme
    Geri al
  5. Retweetledi
    27 Eki

    Oh shit there is a video that backs up the ‘don’t congratulate Obama’ .. Can’t wait for the announcement..

    443 yanıt 6.103 retweet 8.654 beğenme
    Geri al
  6. Retweetledi
    25 Eki

    As I'm currently missing and so can't troll in person here's a blog about the recent changes to my .NET Remoting Exploit tool to bypass Low Type Filtering .

    58 retweet 121 beğenme
    Geri al
  7. Retweetledi
    25 Eki

    Advisory: OneDrive/SharePoint File Picker Access Token Hijacking - by Adam Roberts

    12 retweet 24 beğenme
    Geri al
  8. Retweetledi
    24 Eki

    I know DoS attacks are deeply unsexy, and I'm still somewhat in shock that I ever wrote an entire post about them. The core aim of this post is to illustrate how in the right circumstances they can be fun, high-impact and profitable

    9 yanıt 85 retweet 240 beğenme
    Bu Tweet dizisini göster
    Bu Tweet dizisini göster
    Geri al
  9. Retweetledi
    21 Eki

    While not officially confirmed yet, this is very likely to be true. Also it’s worth remembering that some of the attacks results never see the light of public news because targets prefer to remain silent either for intel obervations or simply avoid empowering attackers by an ack.

    0:50
    : It is now confirmed that a Cyber attack resulted fire in 's Oil Refinery in Southwest of . Probably a Cyber attack in response to 's cruise missile attack at 's oil facilities in & , on 14 September 2019.
    Bu Tweet dizisini göster
    2 retweet 2 beğenme
    Geri al
  10. Retweetledi
    5 Eki

    Can’t stress enough the importance of patching affected VPN products. We’re seeing multiple groups exploiting these vulnerabilities.

    81 retweet 93 beğenme
    Geri al
  11. Retweetledi
    17 Eki

    Filed under "you had one job."

    40 yanıt 370 retweet 913 beğenme
    Geri al
  12. 16 Eki

    4 beğenme
    Geri al
  13. Retweetledi
    14 Eki

    OWASP Birmingham is pleased to announce it's hosting a Capture the Flag meetup in November supported by Kainos and Secure Code Warrior

    8 retweet 8 beğenme
    Geri al
  14. Retweetledi
    14 Eki

    This is so insane. This was a straight-forward solution for Buggy .Net from

    10 retweet 35 beğenme
    Bu Tweet dizisini göster
    Bu Tweet dizisini göster
    Geri al
  15. Retweetledi
    12 Eki

    HITCON CTF 2019 Quals is ongoing now! and I designed an XSS challenge this time and there are two solutions at least, could you find that? :D http://3.114.5.202/

    4 yanıt 29 retweet 146 beğenme
    Geri al
  16. Retweetledi
    11 Eki
    adlı kullanıcılara yanıt olarak

    Can't we have the old school instant (bit broken) render AND the new shiny render button, if we need it?

    5 beğenme
    Geri al
  17. 10 Eki

    Awesome

    + Added loads of charsets + Send to Hackvertor adds auto decode tag automatically + Read clipboard and see if there is anything to auto decode + Chunked dec2hex for help with request smuggling + Made autodecode & convert not use decryption to avoid incorrect decode
    2 retweet 4 beğenme
    Geri al
  18. Retweetledi
    7 Eki

    Updated my tool to exploit .NET remoting services to use a new (unpatched) technique to bypass Low Type Filter to get full serialization exploitation. Abuses the lease feature present on all MBR objects. . Don't use .NET remoting in production code!

    4 yanıt 240 retweet 442 beğenme
    Geri al
  19. Retweetledi
    6 Eki
    adlı kullanıcıya yanıt olarak

    78 yanıt 2.071 retweet 7.071 beğenme
    Geri al
  20. 3 Eki

    This is the command to activate all the bots from 3 years ago: WAKE UP AGAIN AND JOIN THE COLLECTIVE NOW! He should really be proud of himself to type these words correctly!

    ELECTION INTERFERENCE!
    1 beğenme
    Geri al
  21. 3 Eki

    Just a friendly reminder that is still mine! 🤓 😇

    7 beğenme
    Geri al

@irsdl henüz hiç Tweetlemedi.

Yükleme biraz zaman alacak gibi görünüyor.

Twitter aşırı kapasiteyle çalışıyor ya da anlık sorunlar yaşıyor olabilir. Yeniden dene ya da daha fazla bilgi almak için Twitter Durumu sayfasını ziyaret et.

    Şunları da beğenebilirsin

    ·