osama_alaa

Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection malcrove.com/weaponizing-tr… #redteam #malcrove

الحمد لله VMware fixed two vulnerabilities in vCenter server: CVE-2021-21992 >> XML parsing denial-of-service vulnerability CVE-2021-21993 >> SSRF vulnerability For more info vmware.com/security/advis…

Insecure Java Deserialization leading to RCE (CVE-2021-27335) in one of the common Banking Applications discovered by one of @malcrove team members: malcrove.com/kollectapps-in…

@AndreGironda Downloaded the appliance , got the jar file , then get the code from it.

@osama_hroot Where is that source code from?

An unauthorized server-side request forgery (SSRF) vulnerabilities (#CVE-2021-21973) POC

@0xrudrapratap @intx0x80 It is overriding the WSGI python script which has WSGIScriptAlias in server configuration .

@osama_hroot @intx0x80 is the log upload file more like a cron file or correct me if I'm wrong.

Unauthenticated RCE in VMware View Planner (#CVE-2021-21978) POC Advisory: vmware.com/security/advis…

@FlEx0Geek كلهم نفس ال parameter :D

@osama_hroot شوية بجز تعيشك ملك 😂😂

That what happens when my internet speed is slow :D

@marlborojamez @aulliakenz This is upload scanner extension , just let it run on background.

@KhantePrajwal upload scanner

@osama_hroot which extension are you using?

@steventseeley @Viss Does you manage to do that without any service restart?

@Viss Cache overwrite

Who needs SSH for CVE-2021-21972? :->

Cloudflare XSS bypass in input tag : Payload : onfocus=alert(1) autofocus> Don't rely on public payloads to bypass WAFs , as most of them won't work :D You have to craft your own payload . #xss #bypass #bugbountytip #BugBounty

Write-up of #hackyholidays CTF , Thanks @adamtlangley for the challenges. osama-alaa.medium.com/h1-ctf-grinch-… #bugbounty #bugbountytips #infosec #hackerone #ctf

Finally finished @Hacker0x01 ctf individually with a hint in challenge 11 , it wasn't a human challenge :D Thanks @adamtlangley for this wonderful ctf especially Evil Quiz and attack-box challenges #ctf

@FouadHashesh @eLearnSecurity الله يبارك فيك

الحمد لله Thanks @eLearnSecurity #eWPTX

@chapeunegro @eLearnSecurity Thanks , good luck in ewaptx 👍

@osama_hroot @eLearnSecurity Congrats bro, i took ewpt weeks ago, studying for ewptx 🦾

@FlEx0Geek @eLearnSecurity الله يبارك فيك <3

@osama_hroot @eLearnSecurity مبروك <3

@moneeraden2 @eLearnSecurity الله يبارك فيك

@osama_hroot @eLearnSecurity الف الف مبروك

@AlwardaniAa @eLearnSecurity Thanks

@osama_hroot @eLearnSecurity Congrats 👏🏻