Fredrik N. Almroth

@timhwang @samhouston This expression to validate prime numbers: ^1?$|^(11+?)\1+$ See: noulakaz.net/2007/03/18/a-r…

reply with the most incredible regex that you've ever seen

@LinusLarsson youtu.be/RjbkAECbDBE

Stängde just fler flikar än de flesta ser under en livstid.

🇸🇪Midnight Sun CTF is back for it's 6th straight year! Registration is open here: midnightsunctf.com 🏆Qualifiers will run from 08 April, 2023 11:00 UTC -- 09 April, 2023 11:00 UTC 🥇On-site finals are on 18 August. As always check ctftime.org for details

@d0nutptr So it was you all along! smh

Apparently I also purchased github.io That’s right I own all of your github pages 😏

Woke up to some lowbrow extortion attempts 😎

@_tsuro @cffsmith http://__whois__.au

What's your favorite domain name? I'll start: rwx.page (by @cffsmith)

@TomNomNom My condolences

OpenSSL 3.0.7 is out. TL&DR: Punycode issue with international domains used in certs. Needs CA to sign malicious cert. Doesn't look like a "huge deal" IMHO. Relax.. Patch.. Repeat... #openssl

@zonduu1 vbscript:msgbox%201 in ancient IE? ¯\_(ツ)_/¯

XSS in href=, "javascript" blocked and %00, %0a, %0d, %09 doesn't work to try bypass it '&' is properly encoded to '&' and I run out of ideas. Any suggestions? #BugBounty

Recording of “JavaScript Prototype Poisoning, an unexplored bug-class, and it’s everywhere“ by Christoffer Jerkeby & Anton Linné is up: youtube.com/watch?v=VSZCyT… youtube.com/watch?v=VSZCyT…

How to turn bugs into a "passive" income stream! ft @detectify’s @almroot youtu.be/oHhofSj9lEM #cybersecurity #bugbounty

@alkalinesec @BlueSpaceCanary @iximeow

@BlueSpaceCanary @iximeow pls delete this before the inevitable dall-e reply

I was finally able to disclose one of the examples from my last blog post labs.detectify.com/2022/07/06/acc… Here's the PoC-movie from the report to Reddit:

@TomNomNom Good luck and godspeed! :D

I decided to make a homage-post to @homakov and @Nirgoldshlager about different OAuth-token leakage methods I've been researching – ten years after their blog posts that inspired me to start hunt for bugs ♥️ thank you. labs.detectify.com/2022/07/06/acc…

Had a great conversation about @detectify ‘s crowdsource program with @almroot today in the studio. Def a interesting way of creating a passive income flow, submit a finding, preferably unauth, get it verified and get paid every time it hits / fires on any of their customers!

Bypassing CDN WAF’s with Alternate Domain Routing blog.ryanjarv.sh/2022/03/16/byp…

@SSkylinearafat @DC3VDP @DeptofDefense almroot@x:~$ nsupdate > server <ip-of-target-ns> > update add takeover.<target.com> 60 A 1.3.3.7 > send

@DC3VDP @DeptofDefense @almroot Write up on this will be much appreciated

The @DeptofDefense VDP #ResearcheroftheMonth for January 2022 is @almroot. They submitted a critical report on manipulating DNS that enabled them to add DNS records to a DoD server! #VDPHackersFTW #cybersecurity

@martenmickos Tack ska du ha!

Great job by @almroot from 🇸🇪

@stokfredrik Snyggt jobbat! Grattis!

Do you stop and celebrate milestones, or do you keep pushing towards what’s next?