Just got a reward for a critical vulnerability submitted on @yeswehack -- Information Disclosure (CWE-200). yeswehack.com/hunters/skilo
Big thanks to @TheLaluka for highly valuable collaboration 🥰
#YesWeRHackers
Skilo retweeted
Leave some for us 😭😭😭
(Or answer the Claude Advocate form I filled so I can join 🙄😏🫰(thx again @_mudpak 💌))
Skilo retweeted
Hoy hoy !
On se retrouve toujours demain soir (Mardi 21h) pour un stream d'exploitation PHP / Laravel !
⚠️ CEPENDANNNNNNT ⚠️
Petit article de recherche @OffenSkillCorp released ! 💣️
thinkloveshare.com/offenskil…
Skilo retweeted
POV : Bonta = Bug ❄️ Vs 🔥 Brakmar = Feature
Stream : Dofus & Game Hacking Stories
Ft : N0x, it4, et Klaoude ! 😻
RDV Mardi 20 Mai, 21h @ twitch.tv/thelaluka
Skilo retweeted
Let’s not say we’ve reported this behavior to Kong back in 2023 and they replied that it was a « problem within burp » instead of a vuln in their tool 🤷♂️ I know few people that got mistreated by this Kong « security » team for this bug and others, cc @TheLaluka @askilow
🚨HTTP Request Smuggling in lua-nginx-module!🚨
This affects major proxies like Kong GW, OpenResty, Apache APISIX and many more👀
Check it out: benasin.space/2025/03/18/Ope…
Big thanks to @albinowax for his awesome research and for answering all my questions!
#bugbounty #bugbountytips
Skilo retweeted
🚀 Big Announcement! 🚀
After 8+ years of working on PayloadsAllTheThings, I’m excited to release it as an ebook on Leanpub! 📖✨
To celebrate, I’m gifting 5 free copies to random retweeters! 🔥
👉 Retweet for a chance to win
Thank you all for your incredible support! 🙌
This cheatsheet has been a labor of love and countless hours of dedication.
👉 Grab your copy now: leanpub.com/payloadsalltheth…
The results will be announced on 25th December. Entries will close Tuesday 24th, December at 12:00 PM (GMT) 🕐
#CyberSecurity #Infosec #PayloadsAllTheThings #EbookRelease
Hi there! 👋
I'm proud to share with you my first CVE:
cve.org/CVERecord?id=CVE-202…
It wasn't the hardest vuln to find, nor the most spectacular, but I'm still pretty proud of it 🙂
It made me want to dig even deeper into 0day research and, hopefully, have even more CVEs to share! 😄
Skilo retweeted
We're excited to announce one of our giveaways thanks to "@CaidoIO" 🎉 We will pick 5 winners to win a 1-year Caido Pro license!
To enter:
1️⃣ Follow us @BugBountyDefcon and @CaidoIO
2️⃣ Like this post ❤️
3️⃣ Retweet this post 🔁
You have time to participate until Friday (9/13)!
Skilo retweeted
Release 2.0 of smbclient-ng is out! 🔥 🥳
Introducing multiple sessions, startup scripts, and lots of refactoring and bug fixes!
If you like it, please leave a star ⭐ on GitHub➡️ github.com/p0dalirius/smbcli…
Skilo retweeted
Hi friends ! 🧙
Une amie (cc @RoxanneVignon ) cherche son premier job en tant que Dev Frontend Junior (idéalemnt react / redux 🤔), très-très chouette à vivre au quotidien, basée sur Grenoble et OK pour du remote, vous auriez des pistes (voir une place) pour elle ? 🙏🥺
Also, une alternance est envisageable, mais vu la double-demande et pénurie en ce moment, je me fais pas trop d'idées.. 😅
Tout like et RT et passage de CV est apprécié ! 😉🌹
Liens Utiles :
- linkedin.com/in/roxanne-vign…
- elskared.fr/
- github.com/ElskaRed
- CV drive.google.com/file/d/1f0M…
Skilo retweeted
i pushed a C reverse shell on github (˵ - ᴗ - ˵ ) ✧
it's a step by step guide for beginners (as i am)
github.com/pwnwithlove/C_rev…
Skilo retweeted
Using #objectwalker I just found a new Server Side Template Injection payload to access the os module from within a jinja2 template:
I will add it in @pentest_swissky's PayloadAllTheThings
More infos about objectwalker here: nitter.cf/podalirius_/status/165…
(1/3) I've released publicly a new tool/library called #objectwalker that I have been working on for a few months. 🥳
ObjectWalker allows you to find paths into python objects to find interesting targets, in breadth first search or depth first search!
➡️github.com/p0dalirius/object…
Skilo retweeted
If someone's looking for a ticket for #THCon, I have one to sell. Feel free to dm me ! RTs appreciated 🙏 @ToulouseHacking
Have you ever heard about ezPlatform CMS ?
Here is an exploit for the CVE-2022-41876 which leads to sensitive data leak. 🥷
github.com/Skileau/CVE-2022-…
Big thanks to @0xTahiTi for developing all the exploit with me 😄
Skilo retweeted
In a few minutes, I'm going to give my first talk at @BlackHatEvents Europe 2022!
We'll explore a way to find interesting RPC functions to coerce authentications in @Windows protocols.
Skilo retweeted
I'm currently repairing a @WeAreNovation #Supernova II rack #synthesizer!
I'll post a complete detailed article with pictures of all the steps of the restoration soon 🥳
Skilo retweeted
Today I'm publishing my third #CVE 🥳🎉
Ametys CMS before 4.5.0, a remote unauthenticated attacker can read the auto-completion plugin database and sensitive information.
A real exploitation scenario will be presented in my rump at @BreizhCTF 2022!
podalirius.net/en/cves/2022-…
Skilo retweeted
[#thread 🧵] Did you know the shortest #payload to achieve code execution in #PHP is only 15 bytes long ? 🤯 If you can inject it in a page on the site you will achieve remote code execution!
This is really useful in #BugBounty or #pentest when you have a limited input size.
Skilo retweeted
[#thread 🧵] Last week in #Microsoft #PatchTuesday, a critical vulnerability was patched that theoretically allows attackers to achieve Remote Code Execution on a target #IIS server (CVE-2022-21907). I'll explain how it works in this thread ⬇️
Skilo retweeted
In #infosec, it's important to have #backup of our work and not rely on #GitHub as we can be banned without notice at any time. With this in mind, I created a #Python script to backup all of your repositories locally! It works awesomely in a crontab! 🦋
github.com/p0dalirius/Github…
