Nguyen The Duc

@ducnt_

Just another web warrior ⚔️ | Security Researcher | Sr. Security Engineer | CTF player && | Bug bounty hunter

Hồ Chí Minh, Việt Nam  
ducnt.net
Gått med februari 2017
17 Foton och videor Foton och videor

Tweets

Du blockerade @ducnt_

Är du säker på att du vill visa dessa Tweets? Visning av Tweets kommer inte att häva blockeringen av @ducnt_

  1. Fastnålad Tweet
    31 mars

    I really happy to share an article that bypass Akamai web application firewall and exploit a SQL Injection vulnerability. Hope this article will help someone in the same situation :).

    8 svar 60 retweets 154 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  2. Retweetade
    28 maj

    LOL.

    52 svar 1 727 retweets 5 383 gillanden
    Ångra
  3. Retweetade
    27 maj

    Cross origin access with exception object + full exploit (reward: $25633)

    67 retweets 234 gillanden
    Ångra
  4. Retweetade
    25 maj

    Last month, I found a DOM XSS that led to RCE in . Here is the write-up: Most of the credit goes to

    14 svar 238 retweets 639 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  5. Retweetade
    26 maj

    An impossible lab has been solved! Congratulations to who solved the attribute context arbitrary code lab. With the following solution: ?a=`+alert(document.domain);//&x=%22oncut=%22eval(%27`%27%2bURL)' the length limit has now been reduced to 20.

    3 svar 83 retweets 391 gillanden
    Ångra
  6. Retweetade
    25 maj

    Abusing Microsoft Outlook 365 to Capture NTLM

    3 svar 158 retweets 321 gillanden
    Ångra
  7. Retweetade
    25 maj

    SSRF + CRLF + HTTP Pipeline + Docker API = RCE… How dangerous is Request Splitting, a vulnerability in Golang or how we found the RCE in Portainer and hacked Uber

    4 svar 355 retweets 838 gillanden
    Ångra
  8. Retweetade
    22 maj

    Thanks Safari :D XSS via hash is back!!

    1 svara 40 retweets 117 gillanden
    Ångra
  9. Retweetade
    22 maj

    WinRAR <3

    84 svar 2 158 retweets 9 697 gillanden
    Ångra
  10. Retweetade
    22 maj

    CVE-2020-9484 Tomcat RCE漏洞分析

    1 retweet 9 gillanden
    Ångra
  11. Retweetade
    21 maj

    Here is a write-up of a very interesting RCE bug I found on Google Cloud Deployment Manager for the :

    12 svar 297 retweets 731 gillanden
    Ångra
  12. Retweetade
    20 maj

    Aerial ‘smoke screen’ used to protect ships in battle in the 20th century.

    122 svar 4 417 retweets 19 730 gillanden
    Ångra
  13. Retweetade
    15 maj

    I blogged about some interesting behavior which lead to an internal auth bypass. Smuggling HTTP headers through reverse proxies:

    3 svar 72 retweets 171 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  14. Retweetade
    19 maj

    Increasing disk and memory size make Integer Overflow great again🤣

    The end is near. 2020 does not forgive. "15 years later: Remote Code Execution in qmail (CVE-2005-1513)"
    15 retweets 90 gillanden
    Ångra
  15. Retweetade
    5 feb.

    Text fragments will soon be available in Chromium land. You can then use `#:~:text=` to highlight certain text. 😲 🔗 Chrome status: 🔗 Spec: Video alt: Usage of text fragments to highlight text on wikipedia

    10 svar 179 retweets 441 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  16. Retweetade
    16 maj

    😮 Google open sourced their fuzzing dictionaries!

    12 svar 762 retweets 1 978 gillanden
    Ångra
  17. Retweetade
    18 maj

    DEFCON web solution (except grad school)

    4 svar 24 retweets 59 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  18. Retweetade
    16 maj

    I made a tool to generate Sec/Dictionary files for content discovery by scrapping GitHub for File/Folder Names and GET/POST & HTTP from PHP files. So far its examined 5,256,950 files from 39069 repositories, check the results

    9 svar 223 retweets 570 gillanden
    Visa denna tråd
    Visa denna tråd
    Ångra
  19. Retweetade
    12 maj

    One more to the pocket : CVE-2020-0901 - TALOS-2020-1015 Microsoft Office Excel s_Schema Code Execution Vulnerability

    27 retweets 62 gillanden
    Ångra
  20. Retweetade
    12 maj

    9 svar 176 retweets 668 gillanden
    Ångra
  21. 12 maj

    I and my teammate really happy to share our latest research / doing bug bounty about WAF exploit / bypass. This is a popular WAF application from a vendor in Vietnam, hope you like it 🥰.

    1 retweet 10 gillanden
    Ångra

@ducnt_ har inte Tweetat än.

Hämtningen verkar ta ett tag

Twitter kan vara överbelastat eller ha tillfälliga problem. Försök igen eller besök Twitter Status om du vill ha mer information.

    Du kanske också gillar

    ·