Nguyen The Duc

@ducnt_

Just another web warrior ⚔️ | Security Researcher | Sr. Security Engineer | CTF player && | Bug bounty hunter

Hồ Chí Minh, Việt Nam  
ducnt.net
Unit: febrer de 2017
14 fotos i vídeos Fotos i videos

Tuits

Has blocat @ducnt_

Estàs segur que vols veure aquests tuits? Això no desblocarà @ducnt_.

  1. Tuit fixat
    31 de març

    I really happy to share an article that bypass Akamai web application firewall and exploit a SQL Injection vulnerability. Hope this article will help someone in the same situation :).

    8 respostes 56 retuits A 151 els agrada
    Mostra el fil
    Mostra el fil
    Desfés
  2. ha retuitat
    fa 47 minuts

    No Thanks , We need Bounties only 🤣🤣🤣🤣🤣🤣🤣

    1 retuit A 6 els agrada
    Desfés
  3. ha retuitat
    30 d’abr.

    The fuzzing team has been developing a new fuzzer to help identify security vulnerabilities in the implementation of WebAPIs in Firefox. This fuzzer, which we’re calling Domino, leverages the WebAPIs’ own WebIDL definitions as a fuzzing grammar.

    2 respostes 54 retuits A 108 els agrada
    Mostra el fil
    Mostra el fil
    Desfés
  4. ha retuitat
    29 d’abr.

    Detailing CVE-2020-0932 - a now patched RCE bug in reported to us by an anonymous researcher. The blog lays out how code exec is possible using TypeConverters and provides video demonstration and PoC. Read the post at

    1 resposta 131 retuits A 235 els agrada
    Desfés
  5. ha retuitat
    27 d’abr.

    Releasing another side-project: CursedChrome. A Chrome-extension implant that turns victim Chrome browsers into HTTP proxies. Using these proxies you can browse the web authenticated as your victims for all of their websites. Setup takes only 5-10 mins 👍

    21 respostes 386 retuits A 992 els agrada
    Mostra el fil
    Mostra el fil
    Desfés
  6. ha retuitat
    27 d’abr.

    We’ve just published SitRep, our host triage tool developed by . It brings extensibility and OpSec considerations to the triage process:

    4 respostes 92 retuits A 189 els agrada
    Desfés
  7. ha retuitat
    27 d’abr.

    Check out my write-up about an account takeover vulnerability I found in Microsoft Teams. By sending a GIF, you could get access to the user's data and "ultimately take over an organization's entire roster of Teams accounts".

    17 respostes 236 retuits A 498 els agrada
    Mostra el fil
    Mostra el fil
    Desfés
  8. ha retuitat
    25 d’abr.

    Exploit Proof-of-Concept for CVE-2020-12138, Privilege Escalation in ATI Technologies Inc. driver 'atillk64.sys'. Thanks to all those cited for helping me along the way.

    9 respostes 300 retuits A 606 els agrada
    Mostra el fil
    Mostra el fil
    Desfés
  9. ha retuitat
    24 d’abr.

    support added and pushed to master, go and automate all the takeovers and DNS related detections and vulnerabilities. We also updated guide document with DNS request template information

    2 respostes 44 retuits A 160 els agrada
    Desfés
  10. ha retuitat
    28 de març

    Slides for "Attacking Secondary Contexts in Web Applications" -

    15 respostes 332 retuits A 764 els agrada
    Desfés
  11. ha retuitat
    24 d’abr.

    v1.33 released with a ton of new features. Thanks to for the great PRs! You can see whats new here

    69 retuits A 145 els agrada
    Desfés
  12. ha retuitat
    22 d’abr.

    New blog post: CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click RCE – BlueFrag

    3 respostes 284 retuits A 497 els agrada
    Desfés
  13. ha retuitat
    22 d’abr.

    In his first blog post, explains how to abuse in enterprise environments

    1 resposta 65 retuits A 113 els agrada
    Desfés
  14. ha retuitat
    16 d’abr.

    CVE-2020-7066 is a pretty neat SSRF vector in PHP; URL parsing differences strike yet again.

    2 respostes 218 retuits A 662 els agrada
    Desfés
  15. ha retuitat
    21 d’abr.

    My writeup for the haproxy http2 bug (CVE-2020-11100) is now public: . Includes a PoC exploit to demonstrate RCE against Ubuntu 19.10.

    4 respostes 273 retuits A 650 els agrada
    Desfés
  16. ha retuitat
    21 d’abr.

    😂

    12 respostes 133 retuits A 538 els agrada
    Desfés
  17. ha retuitat
    21 d’abr.

    This is a simple story about how to control back to web app from SQL with SessionState deserialization (article only in Traditional Chinese)

    2 respostes 14 retuits A 32 els agrada
    Desfés
  18. ha retuitat
    20 d’abr.

    It's here! Details on how we achieved RCE are available. Enjoy! "I'll ask your body": SMBGhost pre-auth RCE abusing Direct Memory Access structs by ()

    6 respostes 278 retuits A 466 els agrada
    Desfés
  19. ha retuitat
    19 d’abr.

    🤣🤣🤣🤣

    5 respostes 14 retuits A 123 els agrada
    Desfés
  20. ha retuitat
    19 d’abr.

    New write up - "Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts"

    13 respostes 236 retuits A 649 els agrada
    Desfés
  21. ha retuitat
    23 de març

    POC: http://localhost:8000/test/?q=20) = 1 OR (select utl_inaddr.get_host_name((SELECT version FROM v%24instance)) from dual) is null%20 OR (1%2B1 analysis:

    106 retuits A 178 els agrada
    Desfés

@ducnt_ encara no ha tuitat.

Sembla que triga molt a carregar-se.

És possible que el Twitter hagi assolit el límit de capacitat o que experimenti una sobrecàrrega momentània. Torna-ho a provar o vés a l'estat del Twitter si en vols obtenir més informació.

    També et pot interessar

    ·