Nguyen The Duc

@ducnt_

Just another web warrior ⚔️ | Security Researcher | Sr. Security Engineer | CTF player && | Bug bounty hunter

Hồ Chí Minh, Việt Nam  
ducnt.net
Bergabung Februari 2017
14 Foto dan video Foto dan video

Tweet

Anda memblokir @ducnt_

Yakin ingin melihat Tweet ini? Melihat Tweet tidak akan membuka blokir @ducnt_

  1. Tweet Sematan
    31 Mar

    I really happy to share an article that bypass Akamai web application firewall and exploit a SQL Injection vulnerability. Hope this article will help someone in the same situation :).

    8 balasan 56 retweet 151 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  2. me-Retweet
    47 menit yang lalu

    No Thanks , We need Bounties only 🤣🤣🤣🤣🤣🤣🤣

    1 retweet 6 suka
    Batalkan
  3. me-Retweet
    30 Apr

    The fuzzing team has been developing a new fuzzer to help identify security vulnerabilities in the implementation of WebAPIs in Firefox. This fuzzer, which we’re calling Domino, leverages the WebAPIs’ own WebIDL definitions as a fuzzing grammar.

    2 balasan 54 retweet 108 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  4. me-Retweet
    29 Apr

    Detailing CVE-2020-0932 - a now patched RCE bug in reported to us by an anonymous researcher. The blog lays out how code exec is possible using TypeConverters and provides video demonstration and PoC. Read the post at

    1 balasan 131 retweet 235 suka
    Batalkan
  5. me-Retweet
    27 Apr

    Releasing another side-project: CursedChrome. A Chrome-extension implant that turns victim Chrome browsers into HTTP proxies. Using these proxies you can browse the web authenticated as your victims for all of their websites. Setup takes only 5-10 mins 👍

    21 balasan 386 retweet 992 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  6. me-Retweet
    27 Apr

    We’ve just published SitRep, our host triage tool developed by . It brings extensibility and OpSec considerations to the triage process:

    4 balasan 92 retweet 189 suka
    Batalkan
  7. me-Retweet
    27 Apr

    Check out my write-up about an account takeover vulnerability I found in Microsoft Teams. By sending a GIF, you could get access to the user's data and "ultimately take over an organization's entire roster of Teams accounts".

    17 balasan 236 retweet 498 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  8. me-Retweet
    25 Apr

    Exploit Proof-of-Concept for CVE-2020-12138, Privilege Escalation in ATI Technologies Inc. driver 'atillk64.sys'. Thanks to all those cited for helping me along the way.

    9 balasan 300 retweet 606 suka
    Tampilkan utas ini
    Tampilkan utas ini
    Batalkan
  9. me-Retweet
    24 Apr

    support added and pushed to master, go and automate all the takeovers and DNS related detections and vulnerabilities. We also updated guide document with DNS request template information

    2 balasan 44 retweet 160 suka
    Batalkan
  10. me-Retweet
    28 Mar

    Slides for "Attacking Secondary Contexts in Web Applications" -

    15 balasan 332 retweet 764 suka
    Batalkan
  11. me-Retweet
    24 Apr

    v1.33 released with a ton of new features. Thanks to for the great PRs! You can see whats new here

    69 retweet 145 suka
    Batalkan
  12. me-Retweet
    22 Apr

    New blog post: CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click RCE – BlueFrag

    3 balasan 284 retweet 497 suka
    Batalkan
  13. me-Retweet
    22 Apr

    In his first blog post, explains how to abuse in enterprise environments

    1 balasan 65 retweet 113 suka
    Batalkan
  14. me-Retweet
    16 Apr

    CVE-2020-7066 is a pretty neat SSRF vector in PHP; URL parsing differences strike yet again.

    2 balasan 218 retweet 662 suka
    Batalkan
  15. me-Retweet
    21 Apr

    My writeup for the haproxy http2 bug (CVE-2020-11100) is now public: . Includes a PoC exploit to demonstrate RCE against Ubuntu 19.10.

    4 balasan 273 retweet 650 suka
    Batalkan
  16. me-Retweet
    21 Apr

    😂

    12 balasan 133 retweet 538 suka
    Batalkan
  17. me-Retweet
    21 Apr

    This is a simple story about how to control back to web app from SQL with SessionState deserialization (article only in Traditional Chinese)

    2 balasan 14 retweet 32 suka
    Batalkan
  18. me-Retweet
    20 Apr

    It's here! Details on how we achieved RCE are available. Enjoy! "I'll ask your body": SMBGhost pre-auth RCE abusing Direct Memory Access structs by ()

    6 balasan 278 retweet 466 suka
    Batalkan
  19. me-Retweet
    19 Apr

    🤣🤣🤣🤣

    5 balasan 14 retweet 123 suka
    Batalkan
  20. me-Retweet
    19 Apr

    New write up - "Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts"

    13 balasan 236 retweet 649 suka
    Batalkan
  21. me-Retweet
    23 Mar

    POC: http://localhost:8000/test/?q=20) = 1 OR (select utl_inaddr.get_host_name((SELECT version FROM v%24instance)) from dual) is null%20 OR (1%2B1 analysis:

    106 retweet 178 suka
    Batalkan

@ducnt_ masih belum menge-Tweet.

Pemuatan tampaknya berlangsung agak lama.

Twitter sedang kelebihan beban atau mengalami sedikit masalah. Coba lagi atau kunjungi Status Twitter untuk informasi lebih lanjut.

    Mungkin Anda juga suka

    ·