Regarding the recent BeyondTrust's Remote Support supply chain attack by a Chinese APT: I once wrote an article about misusing said software and exposing leaks. Not sure if that was the way it was done, but it can't be far from the truth.

Looking to get (more?) into malware so, naturally, I'm looking into @MalDevAcademy. Anyone did/doing the courses? What are the prerequisites?

it hurts tho

Revisited an (pretty) old report where a blind XSS that leaks JWTs was rated as a medium and the program owner ignored my comments. There's still the possibility of a payout, is it possible for a report to reopen (RTFS -> New)? Is there support to check out my report? @yeswehack

RT @AhmedE7657: GitHub repo containg top disclosed hackerone reports by bug type.

RT @BertJanCyber: This is an interesting post from @MDSecLabs with some useful hunting queries included!

RT @CryptoGangsta: @b1ack0wl You’re not supposed to use syntax highlighting or something. Coding should be torture and not fun.

RT @Alra3ees: “Mass Hunting Blind XSS — Practical Techniques” by Ott3rly

Four more months and then I'm back at full time hacking shit

anyone has the leak of asking for pure ethical reasons (honestly)

RT @vxunderground: Windows 11 will be adding the Share button to the Start Menu and Taskbar. This is excellent news for people who are unfa…

@Cyb3rMik3 @eventbrite Saw that last week, was pretty confused

@Clarkee Silly me, should've guessed it

@RuraPenthe0 I need to make one (again) for web apps and APIs

RT @0xtavian: @d3mondev Haven't tried Ax yet? Install it today 👇

RT @0xtavian: How to choose remote wordlists or upload your own local wordlists when running a module that has the _wordlist_ variable! He…

RT @pxmme1337: so last week i had an idea it's a recon competition kind of game new round every 24hrs check the FAQ section! hope you'l…