Dominik retweeted
Can you #blackbox test all #OWASP Top 10 categories? 🤔 We mapped 22 years of evolution in our latest blog post to find out – spoiler: most aren't testable without source code. Read our recent blog post here analysis here 👇
blog.nviso.eu/2026/01/09/owa…
Dominik retweeted
10 years ago, we embarked on a journey to contribute to a safer society.
Together, we made it a reality! This would not have been possible without the trust of our clients & partners and the dedication of every single NVISO bird over the last decade.
Thank you all!
#OneNVISO
Last week I took the Burp Suite training from @Agarri_FR . No matter how long you've used Burp, I'm sure you could learn something here. But come well rested, the 4 days are *packed*!
Well worth the time and the money and definitely something I'd recommend.
Ever wanted to know how (not) to implement OAuth and what the common pitfalls are?
Come visit the workshop that my @NVISOsecurity colleague Claudia and myself will be giving at @BSidesMunich May 15th about OAuth hacking.
See you there!
Dominik retweeted
This is an Online Reverse Shell Generator that allows anyone to configure their IP Addresses, Ports, and Shell of choice for your favorite reverse shell payloads
hakin9.org/reverse-shell-gen…
#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource
You know the joke about Skyrim running everywhere?
I think we might have found a worthy successor. Kali running on a smartwatch 🤯
🚨 New Release Alert: Kali Linux 2021.3🚨
Updates include⚙️:
⇢ OpenSSL
⇢ New Kali-Tools site
⇢ Better VM support in the Live image session
⇢ New tools
⇢ Kali NetHunter smartwatch
⇢ KDE 5.21
Learn more: offs.ec/2XhC432
Dominik retweeted
NVISOLAND is here! 🤩
Join our music livestream from the rooftop of our Frankfurt Office at 16h here: youtube.com/watch?v=mcysC3Lb…
#nviso #cybersecurity #nvisoland #music
Writing a Pentest report and still missing that critical CVSS 10.0 finding? Just take CVE-1999-0454 and you're good to go.
Follow me for more hands-on real life applicable infosec tips.
cvedetails.com/cve/CVE-1999-…
Adding the newest one to the collection. #SEC503 taught by Nik Alleyne at (virtual) #SANSAmsterdam. One more till I can try to go for the long term goal of becoming a GSE.
@SANSEMEA
That wraps it up. #SEC503 taught by Nik Alleyne at #SANSBrussels, culminating in an amazing capstone challenge run with the team "from sec503 import coin" (@FogFilip and the 2 anonymous Finns).
#ShowMeThePackets @SANSEMEA
That moment when you find a RCE bug on @BugBountyHunt3r , only to have the report rejected by @zseano , then you re-read your report, see that it is actually low quality, you re-report it and find the first (and unintended) RCE :)
#HACKvent2020 is a wrap. And with this here is my write-up: tyrox.blog/2021/01/01/hackve…. Thank you @hackvent @TheHackingLab for this event and the learning experience!
A new @bugpoc_official Challenge, a new Write-Up!
Thanks and until next time.
tyrox.blog/2020/11/10/wacky-…
My Write-Up for this year's @CyberSecRumble, organized by @NVISOsecurity and @redrocket_ctf is up. You can read it at tyrox.blog/2020/11/03/cybers…
Dominik retweeted
Donald Trump on computer hacking: "Nobody gets hacked. To get hacked you need somebody with 197 IQ and he needs about 15 percent of your password."
[video]
Here is my Write-Up for @bugpoc_official's latest challenge: 0xtyrox.github.io/2020/10/06…
It ended up being a bit long, but I wanted to include the dead ends as well.
As a bonus there is an exfil script.
Finally! After 3 days of working on it I cracked the @bugpoc_official challenge and submitted my solution to @Hacker0x01 . As always, took a lot of wrong turns and learned a lot.
Write-Up should follow.
Officially certified GWAPT since today.
Thank you @timboloman for the live online class!
@SANSEMEA @CertifyGIAC
It has arrived. The coin for @SANSNetWars Jupiter Rockets CtF.
Thank you @edskoudis , I will treasure it!
