exploresecurity @exploresecurity
IT security miscellany, commentary and curiosities || the geeky alter ego of @MrJeromeSmith || thoughts are my own (who else's would they be?) exploresecurity.com Cambridge, England Joined March 2013-
Tweets950
-
Followers689
-
Following215
-
Likes147
SQLi despite 'secure' Prepared Statements! Known to affect mysql and mysql2, nice write-up from @xoreipeip (and with due credit to previous work by other researchers)
Check out our new blogpost: Prepared Statements? Prepared to Be Vulnerable. blog.mantrainfosec.com/blog/18/prepar…
@Grazitti you might want to reword this response; bit harsh I thought 😆
2 instances this week of OAuth SaaS integrations where the setup guide says "login as admin". Even with scopes, the connections are overprivileged. Getting flashbacks of software that "needs" to be installed as admin (translation: cos then it just works).
As a #Salesforce admin or security pro, does it frustrate you that it's impossible to configure an account to have full access to the config of a Salesforce Org as read-only? Upvote ideas.salesforce.com/s/idea/a0BHp00…
Interesting compromise of Cyberhaven's Chrome extension with a malicious OAuth app using a genuine OAuth flow cyberhaven.com/engineering-bl…
All I want for Christmas is U(RL handlers not vulnerable to RCE)... AmberWolf has published information about CVE-2024-12908, a Remote Code Execution vulnerability in the Delinea Secret Server Protocol Handler. You can read our blog & PoC here: blog.amberwolf.com/blog/2024/dece…
More awesome work from @buffaloverflow and @johnnyspandex
Today, AmberWolf released two blog posts and our tool "NachoVPN" to target vulnerabilities in major VPNs, including CVE-2024-29014 (SonicWall NetExtender SYSTEM RCE) and CVE-2024-5921 (Palo Alto GlobalProtect RCE and Priv Esc), after our SANS HackFest presentation.🧵
New @Sonos app - yuk. Key features missing. Maybe I've just not found things like how to edit the queue. Best case, unintuitive UI; worst case, something that worked (mostly - has definitely got buggier and slower recently) is undeniably worse. Trust that updates are coming...
The @Yourallypally steward in this story should be congratulated - he followed protocol under pressure. So important for 'first line' staff to have a robust process to follow and to be confident sticking with it. talksport.com/sport/1705572/…
When there seems to be so much doom and gloom around, this story of innovation + determination + dedication is a ray of hope
Saw this on @BBCLookEast - congrats to all involved including @WeAreRSGroup
A lot of people will be forgetting @evernote now. I only store text (more or less). I appreciate they have costs and I'd be prepared to bung them a few quid but this drastic change without warning will push many to find an alternative.
@exploresecurity @evernote Have to say I forgot all about evernote as a thing
Poor show @evernote - used to be able to export all notebooks at once for back-up, now it seems I have to export each notebook in turn. Why make something so important harder to do?
@AppOmniSecurity Interesting stuff but I'm unclear if the core vulnerability and analysis was done by someone else. Can't see a source credited so maybe it is original. Could you clarify?
🚨 Urgent Update: #Google has released a Chrome update to patch a new high-severity zero-day #vulnerability (CVE-2023-5217) that is being exploited in the wild. Read: thehackernews.com/2023/09/update… #infosec #cybersecurity #informationsecurity
Great day @BsidesCambs - nice job everyone
Some fun with AI (trailer at youtube.com/watch?v=VqY0-H…)
As usual from @PortSwiggerRes and @albinowax, it's not just the theory but the accompanying resources which support the practice - nice job!
We've just published 'Smashing the state machine: the true potential of web race conditions' by @albinowax! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class: portswigger.net/research/smash…
First round of BSides Cambridge tickets are live! We've got some great talks lined up. Get your tickets now. If you're a student, message us or @secmum and we'll sort something out. #bsides #bsidescambs #infosec #cybereast eventbrite.co.uk/e/bsides-cambr…
Is there really no way @JustEatUK that a lost-n-found gift card can be reactivated? I assume it's expired (website only says "invalid" and have triple-checked code). Having to tweet because your "Contact us" page does no such thing.
Ollie Whitehouse @ollieatnowhere
6K Followers 1K Following CTO @NCSC Former: PortSwigger, Interrupt Labs, NCC Group, BlackBerry, Symantec and Atstake
NCC Group Research & ... @NCCGroupInfosec
20K Followers 2K Following Technical account for global cyber security & resilience provider, NCC Group. This account is run alongside the @NCCGroupplc corporate account.
hacker.house @hackerfantastic
106K Followers 5K Following Co-Founder @MyHackerHouse 💾 | Cybersecurity & Web3 🌐 | Author of Hands-on Hacking (ISBN 9781119561453) 📖 | Offensive Lua 💻 | ✝️
R@b @Rab_Ray
613 Followers 1K Following On a quest to scratch golf. 8.5 world handicap index. Hacker of all the things. Living life to the full with Bipolar.
Soroush Dalili @irsdl
20K Followers 946 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Iain Smart @smarticu5
920 Followers 849 Following Hacker, coffee drinker, film watcher. Former secretary of @AbertayHackers, now I break into containers and pipelines for @controlplaneio
Rory McCune @raesene
5K Followers 2K Following Security Geek, Containers, Kubernetes, Ruby, Hillwalking. Probably more active on Mastodon (@[email protected]) or blue sky (@mccune.org.uk) these days.
Luke Rogerson @NullMode_
4K Followers 539 Following Training devs & hackers to think like attackers | Helping startups & SaaS stay secure | Cybersecurity Trainer & Assessor | Strong passwords & stronger deadlifts
Craig S. Blackie @craigsblackie
477 Followers 515 Following Hacker, network admin, ale drinking geek and lover.
Paul @pjd83
998 Followers 2K Following 🏴// Penetration Tester // Lover of good coffee and wine // He/Him 🏳️🌈
GavinWhite @GavinWhite
16 Followers 149 Following
Vratislav @Vratislav151110
1 Followers 111 Following
Rie Love @RieLove855457
1 Followers 175 Following Rec ruiting webshell engineers to penetrate websites, with a monthly salary of up to $100,000. If interested, please contact https://t.co/S9pHqsu9Jb
Dr.Philippe Vynckier,... @PVynckier
24K Followers 25K Following Senior advisor, Expert Security, Interested in the field of information technology, I protect the business environment against cyber threats and hackers !
CHARLOTTE MEYER @meyer_char82019
31 Followers 408 Following I'm calm good and very honest 🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰🥰
SIEMtune @jtheadstrong
71 Followers 916 Following 25+ yr InfoSec professional delivering results daily
Axad Ch {BTC} @Asadsattar01
20 Followers 324 Following Businessman Service 🌎 anonymous Crypto Exchange 💱 wallets Available💱👑 BlackMCode Matrix
Nathan Parkinson @NathyParkinson
194 Followers 304 Following
Perry1971 @Perry19712
9 Followers 233 Following
Luna @AubreyHann77600
10 Followers 691 Following
Donald @Piray264855
104 Followers 5K Following See the world on the road, and get to know yourself on the way!
2_secure @2_secure
2K Followers 1K Following Ramblings from 2-sec’s Founder and CEO. Almost 30 years in Cyber, before it was even called Cyber. Listen and learn…
Ceseau @Ceseau285761
6 Followers 374 Following Gods determine what you're going to be。Contact me Telegram number:
Liam Follin @gr4y_r0se
246 Followers 352 Following UKCSC Chartered Cyber Security Professional. Principal Security Researcher at @hsbc, and volunteer at @Trust_Leeds. Opinions are my own.
@caiyuyu @caiyuyu12
1 Followers 57 Following
RedditDeck @redditdeck
119 Followers 5K Following RedditDeck offers a more convenient Reddit experience by letting you view multiple timelines in one easy interface.
Yusuf @Yusuf58121794
3 Followers 220 Following
Urbi Chakraborty @urbic18
21 Followers 170 Following
Elrondex @elrondex
139 Followers 5K Following Elixir library to interact with Elrond Blockchain ⚡ $EGLD, Arwen, WASM, DeFI, SC, ESDTs, NFTs, SFTs, $MEX, DEX, AMM https://t.co/yPL9XXZguT
Jimmy Daspit @Treasurecolecto
3K Followers 3K Following Events Happening Now Around The World ! News
00Waz @00Waz
35 Followers 92 Following
Christoph Hofmann @chhofm
210 Followers 890 Following Zertifizierter Datenschutzbeauftragter Ansprechpartner für das Thema Barrierefreiheit Interessiert an rechtlichen, politischen und wirtschaftlichen Themen!
Rob Watson @robwatson1964
52 Followers 190 Following Information & Cyber Security former Computer Forensic Investigator, former photographer, former Police Officer, wannabe bodybuilder and generally boring person
Plasma @b1tw1z4rd
0 Followers 5K Following
Squirrels In A Barrel @squirrelsnabrrl
38 Followers 1K Following
zer0pwn @zer0pwn
6K Followers 2K Following
AxN788CN @TranTuan3042022
0 Followers 4K Following
Sarah.J.Harris @sarahsky23
4K Followers 5K Following Counting Down To You, The Murder Hypothesis, Four Good Liars, Meet Me On The Bridge, One Ordinary Day At A Time,The Colour of Bee Larkham's Murder
CometVPN @CometVPN_
47 Followers 248 Following Dedicated & Rotating Residential VPN | Plans from $1.89/month or $0.70/GB
Renan de Medeiros @RenandMedeiros
107 Followers 833 Following
Chris Anley @chris_anley
208 Followers 147 Following
Adrian Sturges @adriansturges
1K Followers 1K Following Producer of Half Bad, The Third Day, Summerland, Chimerica, The Enfield Haunting, The Disappearance of Alice Creed, The Escapist.
Lord Lambda @closure_bell
228 Followers 1K Following Hard CompSci vs Financial IT. Programming. Quant Dev. Trading Logistics. Risk Management. #ActuallyAutistic.
Red @sam_phisher
702 Followers 2K Following Pentester/red teamer. Interested in maldev, AD & Azure. Writer of shitty code.
scofield @CyberNo1Rookie
28 Followers 1K Following RedTeam | OSCP | CRTO | CRTL | CRTE | CRTM | OSCE3 github: https://t.co/rvJ2Jjp0mn
g0rg0g0L 👾🎨 @gorgogol
3K Followers 972 Following Hacker, painter and pianist. Worshipping cats and guitars.
$ymantec @SymanTechnology
132 Followers 5K Following
eth @KHL_ETHA
10 Followers 3K Following
HC @gazeboharry
8 Followers 117 Following
Satyajit Das @satyajitdas02
316 Followers 3K Following Cyber-Sage | Infosec | Appsec | BFSI | Shooting Sports | Inception | Social Responsibility
1fe1se @1fe1se
6 Followers 141 Following
PortcullisLabs @portcullislabs
2K Followers 4K Following Portcullis Labs is the R&D arm of @cisco's Security Advisory team in EMEA. Follow our journey at https://t.co/BIbV67locX.
calcfootball @calcfootball
77 Followers 2K Following
Alexandra Kulagina - ... @AlexandraKulag3
437 Followers 3K Following 📍🇫🇮 - Talks about 👉 IoT Cybersecurity / Firmware Security / Device Security 💻 - Sales & Marketing Specialist @binareio - 📧 [email protected]
Dale Pavey 🛠️ @Null0xFF
77 Followers 1K Following IoT security | Homelab owner | opinions are my own | I hit things with hammers
Grambulf @grambulf
341 Followers 631 Following
Ollie Whitehouse @ollieatnowhere
6K Followers 1K Following CTO @NCSC Former: PortSwigger, Interrupt Labs, NCC Group, BlackBerry, Symantec and Atstake
NCC Group Research & ... @NCCGroupInfosec
20K Followers 2K Following Technical account for global cyber security & resilience provider, NCC Group. This account is run alongside the @NCCGroupplc corporate account.
hacker.house @hackerfantastic
106K Followers 5K Following Co-Founder @MyHackerHouse 💾 | Cybersecurity & Web3 🌐 | Author of Hands-on Hacking (ISBN 9781119561453) 📖 | Offensive Lua 💻 | ✝️
R@b @Rab_Ray
613 Followers 1K Following On a quest to scratch golf. 8.5 world handicap index. Hacker of all the things. Living life to the full with Bipolar.
James Kettle @albinowax
84K Followers 103 Following Director of Research at @PortSwigger aka @Burp_Suite. Find my research, tools & contact details at https://t.co/vP6UbGmvl3
Gareth Heyes \u2028 @garethheyes
38K Followers 1K Following Web security researcher at PortSwigger. Author of JS for Hackers and Hackvertor. https://t.co/e0aNEbFb9D
Soroush Dalili @irsdl
20K Followers 946 Following Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker 🕸️https://t.co/YipuTcYnWc🥷 🍏A dad-joke maker🍐
Iain Smart @smarticu5
920 Followers 849 Following Hacker, coffee drinker, film watcher. Former secretary of @AbertayHackers, now I break into containers and pipelines for @controlplaneio
Andy Gill @ZephrFish
20K Followers 647 Following Security Researcher, RT, Director & Course Author at @ZephrSec |Staff on @CuratedIntel | Lab Creation @XintraOrg | https://t.co/gvGwReANzD - check out my RT course
Robin @digininja
25K Followers 230 Following Hacker, coder, climber, runner. Co-founder of SteelCon, freelance tester, author of many tools. Always trying to learn new things. @hacknotcrime Advocate
Rory McCune @raesene
5K Followers 2K Following Security Geek, Containers, Kubernetes, Ruby, Hillwalking. Probably more active on Mastodon (@[email protected]) or blue sky (@mccune.org.uk) these days.
Clint Gibler @clintgibler
26K Followers 574 Following 🛡️ Leading Cyber at @OpenAI 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
Luke Rogerson @NullMode_
4K Followers 539 Following Training devs & hackers to think like attackers | Helping startups & SaaS stay secure | Cybersecurity Trainer & Assessor | Strong passwords & stronger deadlifts
PortSwigger Research @PortSwiggerRes
122K Followers 7 Following Web security research from the team at @PortSwigger
Adam Chester 🏴�... @_xpn_
39K Followers 535 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOlmau2
Craig S. Blackie @craigsblackie
477 Followers 515 Following Hacker, network admin, ale drinking geek and lover.
Paul @pjd83
998 Followers 2K Following 🏴// Penetration Tester // Lover of good coffee and wine // He/Him 🏳️🌈
Robert Sösemann @rsoesemann
2K Followers 248 Following Software Craftsman, Clean Code & AI enthusiast | #SalesforceMVP | Principal Architect @aquivalabs | Creator of Salesforce @pmd_analyzer | Conference Speaker
AmberWolf @AmberWolfSec
454 Followers 0 Following Offensive Cyber, Risk Management & Governance, Vulnerability Research and Technical Due Diligence
Will Hunt @Stealthspl... @Stealthsploit
1K Followers 477 Following Hacker, Black Hat trainer, speaker, musician, gamer. Co-founded @insecurity_ltd. https://t.co/T3s2B55WJl Discord - https://t.co/nFzmfIfjxa
Liam Follin @gr4y_r0se
246 Followers 352 Following UKCSC Chartered Cyber Security Professional. Principal Security Researcher at @hsbc, and volunteer at @Trust_Leeds. Opinions are my own.
BSides Cambridge @BsidesCambs
274 Followers 222 Following 23rd September 2023, Cambridge University Press, Triangle Building, UK 🇬🇧 🐮✨
Ed Williams 🏴�... @dynllandeilo
705 Followers 175 Following Dad, husband, brother, son a Chymro. Cyber and hacking. Views do not represent my workplace. ZHlmYWwgZG9uYyBhIGR5ciB5IGdhcnJlZw== 🏴 #bitcoin
Minali Arora @AroraMinali
711 Followers 536 Following Security Researcher, Consultant by Profession, Blogger, Bug Bounty hunter & Wine lover!! Views are my personal
zer0pwn @zer0pwn
6K Followers 2K Following
Chris Anley @chris_anley
208 Followers 147 Following
Zonifer @0xZon1
37 Followers 177 Following
woodspeed @wucpi
434 Followers 939 Following 2019 Jenkins Security MVP | CAWASP, CARTP, CRT, OSCP, eWPT, eWPTX, eMAPT | Views and opinions are my own.
Jesus Calderón @JesusMag0
81 Followers 198 Following Security Consultant, Security Researcher and more important Sevilla F.C supporter :P
💖 @enjenneer
3K Followers 2K Following
Nick Watkins @Quartercask
191 Followers 1K Following Could be described as charming, intelligent & witty... and one day I will be. Until then, father of tennis daughters, professional tester of pens & UFC nut.
Johnny Fishcake @johnnyspandex
294 Followers 109 Following
Alan Monie @AlanMonie
403 Followers 775 Following
Phil Winwood @yppip
646 Followers 2K Following All things security - pentester - bug hunter - researcher
OWASP Cambridge UK @OwaspCambs
627 Followers 389 Following Twitter handle for the OWASP Cambridge chapter
Cambridge Cyber Advis... @CyberCambridge
53 Followers 231 Following
DH @sorrel340
34 Followers 79 Following Security, tech, infosec, telecoms: the computational side of @duncanhurwood. Views my own.
In.security @insecurity_ltd
828 Followers 175 Following A specialist cyber security company offering a suite of technical services and training
David Wong @cryptodavidw
18K Followers 3K Following security @zksecurityXYZ & AI @zkaol, author of Real-World Cryptography, prev: architect @Mina, sec lead Libra (@Facebook), crypto @NCCGroup
Vincent @vtlynch
553 Followers 1K Following Tweets are my own and do not represent the views of my employer.
Tom Anthony @TomAnthonySEO
14K Followers 543 Following CTO at @SearchPilot. Web dev since 1998. PhD in AI. Do bug bounties as a hobby. BlueSky: https://t.co/1BhrupWzeG
Nicky Bloor @nickstadb
2K Followers 671 Following Coder, hacker, infosec researcher, adrenaline junkie. Once hiked Ben Nevis, Scafell Pike, and Snowdon in 22h 48m. Not a snake oil peddler.
presuming onion @PresumingOnion
253 Followers 392 Following
JC @JCJCartwright
242 Followers 2K Following I work in cyber security. Interests include space, renewables, archaeology, futurism, humanism, gaming, music, comedy & wine. Once worked on RuneScape.
Tim Rawlins - Directo... @PinionSIRR
224 Followers 421 Following Tim Rawlins: Security, Intelligence, Risk & Resilience from Director & Senior Adviser at NCC Group. Opinions mine. Pinion: a small cog that makes a difference.
James @james_ncc
90 Followers 551 Following
CETC @CambCETC
287 Followers 314 Following Cambridge Enterprise & Technology Club - Providing a unique regional opportunity to network and attend seminar speaking events about cutting edge technologies.
Simon W @Sponex
286 Followers 827 Following Information Security Consultant / Security Enthusiast / Web developer
ForensicDev @ForensicDev
184 Followers 796 Following Interests in Cyber Security, SW Development and Engineering...
Steven van der Baan @vdbaan
357 Followers 199 Following Husband; dad; curious; quirky. You are never to old to do something stupid.
Jen Roseman @JSalisburyJones
2K Followers 2K Following Formerly of the weird world of think tanks, now in the weird world of cyber security.
Richard Davy @rd_pentest
2K Followers 895 Following Penetration Tester. CREST CCT | OSCE | OSCP | OSWP
redsnarf @redsnarf
295 Followers 121 Following RedSnarf is a pen-testing / red-teaming tool for retrieving hashes & credentials from Windows workstations, servers and DC's using OpSec Safe Techniques.
CamSec @camsec
127 Followers 3 Following The official Twitter account for the CamSec Security Group. For upcoming events see https://t.co/ERFn8TXPZF CamSec YouTube channel https://t.co/tXTi9KJHDV
Marc Wickenden @marcwickenden
2K Followers 1K Following Cloud AppSec Bloke. Kubernetes, Go, Python, cycling, YAML engineering. Builder and breaker @4ARMED. It was like that when I found it.
Holly Graceful @HollyGraceful
12K Followers 838 Following PenTesting @AkimboCore. “Not all thoughts have to be noises Hollister” — @_mormaid
You might like
