Nguyen The Duc

@ducnt_

Just another web warrior | Security Researcher | Sr. Security Engineer | CTF player && | Bug bounty hunter

Hồ Chí Minh, Việt Nam  
ducnt.net
Bergabung Februari 2017
12 Foto dan video Foto dan video

Tweet

Anda memblokir @ducnt_

Yakin ingin melihat Tweet ini? Melihat Tweet tidak akan membuka blokir @ducnt_

  1. Tweet Sematan
    8 Jan

    My first `double kill` at : Kudos to WordPress security team with very quickly and awesome work 🥰

    1 balasan 15 suka
    Batalkan
  2. 27 Feb

    Filed a duplicate with gr8 bug was found by but can reopen it with a triaged issue. Really a excited moment.

    1 balasan 1 retweet 9 suka
    Batalkan
  3. me-Retweet
    25 Feb

    New blog post! Here is how you can use MSBuild’s UnregisterAssembly task to execute arbitrary code in a .NET assembly. ⤵️

    1 balasan 112 retweet 211 suka
    Batalkan
  4. me-Retweet
    21 Feb

    Just wrote a new article about how I found a Remote Command Execution 0-day (CVE-2020-8813) via static analysis in Cacti v1.2.8 the popular infrastructure graphing solution. I also explained how to exploit it without authentication in some cases.

    13 balasan 239 retweet 614 suka
    Batalkan
  5. me-Retweet
    18 Feb

    Slides from my talk on iMessage exploitation: More technical details in the blog post: Great conference again, thanks team! :)

    2 balasan 111 retweet 305 suka
    Batalkan
  6. me-Retweet
    18 Feb

    [PoC] CVE-2020-0618 Microsoft SQL Server Reporting Services RCE Vulnerability POST /ReportServer/pages/ReportViewer.aspx HTTP/1.1 Host: target ... ... NavigationCorrector$PageState=NeedsCorrection&NavigationCorrector$ViewState=[PayloadHere]&__VIEWSTATE=

    Meda ini mungkin mengandung materi sensitif. Pelajari lebih lanjut
    4 balasan 188 retweet 351 suka
    Batalkan
  7. me-Retweet
    18 Feb

    Just published another remote code execution chain I exploited recently. I also wrote about how organizations can stop these attacks at the development stage - the key is convention over configuration.

    17 balasan 211 retweet 650 suka
    Batalkan
  8. me-Retweet
    11 Feb

    さんとSpectreやXS-LeaksやCross-Origin-*ヘッダーについて話しました！ / ep63 Cross Origin Info Leaks

    1 balasan 4 retweet 32 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  9. me-Retweet
    17 Feb

    Top 10 new web hacking techniques of 2019

    7 balasan 769 retweet 1.517 suka
    Batalkan
  10. me-Retweet
    13 Feb

    I've discovered logic privilege escalation bug on AMD User Experience Program Launcher from Radeon Software -2020-8950

    1 balasan 84 retweet 156 suka
    Batalkan
  11. me-Retweet
    11 Feb

    Blind SSRF exploitation En: Ru: What about port scanning using DNS-requests?

    4 balasan 165 retweet 421 suka
    Batalkan
  12. me-Retweet
    11 Feb

    A few small proposals for PHP 8 have been accepted: ::class Static return type Variable syntax tweaks

    11 balasan 135 retweet 331 suka
    Batalkan
  13. me-Retweet
    10 Jul 2018

    Neatly bypassing Content Security Policy. Why 'unsafe-inline' is almost always a full-fledged XSS.

    5 balasan 130 retweet 254 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  14. me-Retweet
    6 Feb

    DOM Clobbering strikes back by

    2 balasan 90 retweet 214 suka
    Batalkan
  15. me-Retweet
    6 Feb

    Thanks to research, new stuff are being released for soon - as for the features, payload minimization, raw cmd command, and auto command encoding within JSON/XML messages are being released after the PR review by

    1 balasan 33 retweet 113 suka
    Batalkan
  16. me-Retweet
    6 Feb

    Nice by

    13 retweet 58 suka
    Batalkan
  17. me-Retweet
    5 Feb

    Checkra1n for Windows first demo!!🔥🔥 Coming Soon!!

    87 balasan 306 retweet 1.682 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  18. me-Retweet
    3 Feb

    Here's my write-up for ’s CTF challenge!

    5 balasan 29 retweet 108 suka
    Batalkan
  19. me-Retweet
    3 Feb

    CVE-2020-7471: SQLI in Django: django.contrib.postgres.aggregates.StringAgg aggregation function was subject to SQL injection, using a suitably crafted delimiter. FIX:

    57 retweet 132 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  20. me-Retweet
    31 Jan

    , , and I are starting a new security blog. In our first write-up, we will discuss the impact of "SameSite by default" and how it affects web app sec. Feel free to request future topics you would like us to cover.

    11 balasan 216 retweet 413 suka
    Batalkan
  21. me-Retweet
    31 Jan

    Someone dropped a PHP zero-day on GitHub. Talked to the PHP team last night. Bug requires local foothold to exploit, so not usable for remote attacks. Also, this is the second exploit for this "disable_functions bypass" in the last few months.

    5 balasan 122 retweet 190 suka
    Batalkan

@ducnt_ masih belum menge-Tweet.

Pemuatan tampaknya berlangsung agak lama.

Twitter sedang kelebihan beban atau mengalami sedikit masalah. Coba lagi atau kunjungi Status Twitter untuk informasi lebih lanjut.

    Mungkin Anda juga suka

    ·