rizemon@rizemon

Working | 🇸🇬 University graduate | OSEP | OSWE | OSCP | BSCP @rizemon@infosec.exchange

rizemon.github.io/
Joined May 2020
6 Photos and videos
🎉🎉🎉 @offsectraining #oswe
1
2
30
6,064
Black Friday Giveaway! Please Follow @AlteredSecurity, Repost, Like and Comment on this post to win a CRTP voucher for 30 days. We will announce two random winners tomorrow (27th November 2024). alteredsecurity.com/online-l… #redteam #pentesting #azure
137
119
182
15,395
rizemon retweeted
tb@kair0s3
17 Sep 2023
A short writeup for SQLovin — Dojo #26 kair0s3.medium.com/sqlovin-d…

SQLovin — Dojo #26 Writeup

Back in August, I had some free time and came across this challenge on YesWeHack Dojo. In general, the challenge focuses on a SQLite…

kair0s3.medium.com
1
1
228
rizemon retweeted
tb@kair0s3
17 Jul 2023
Finally found some time to do up the blog post for a SQL injection bug. kair0s3.medium.com/blind-sql…

Blind SQL injection with a little WAF

My first ever security blog post, so pardon how I structure it haha. So here goes, for this story, I will be sharing about how I got…

kair0s3.medium.com
3
5
406
rizemon retweeted
starlabs@starlabs_sg
15 Feb 2023
We finally published the advisories for CVE-2022-26438 & CVE-2022-26439. Both the bugs are found by our intern, Schuyler Tay, back then. starlabs.sg/advisories/22/22… starlabs.sg/advisories/22/22…

(CVE-2022-26438) Asus System Control Interface Backup Local Privilege Escalation (LPE)

Summary: Product Asus System Control Interface Vendor Asus Severity High - Adversaries may exploit this software vulnerability to set weak file permissions, leading to local privilege escalation....

starlabs.sg
1
21
68
19,325
Join @offsectraining at #SINCONReloaded to have some hands on experience with #OSDA workshop and also unveiling the new @kalilinux's #kalipurple 🥳
1
148
Not too shabby I guess 🙃
1
5
Hello world! From my 10 yrs as a dev working at scale and talking to 300+ security engineers, I have been meaning to share some dos-and-don'ts of API Security. 🤠 This is my first time posting on Twitter. Shower some love 🕺 #apisecurity #securecodingpractice #devsecops
7
69
229
rizemon retweeted
Mark Lim@peta909
26 Apr 2022
My blog post for my day job just got posted :) unit42.paloaltonetworks.com/…

Defeating BazarLoader Anti-Analysis Techniques

Anti-analysis techniques make it harder for malware analysts to do their work. We cover BazarLoader anti-analysis techniques and how to defeat them.

unit42.paloaltonetworks.com
3
26
81
rizemon retweeted
mr.d0x
@mrd0x
19 Feb 2022
I'll be dropping a new phishing technique for stealing credentials & bypassing 2FA today. You do not want to miss this.
35
367
2,148
Scored a pass on @PortSwigger's Burp Suite Certified Practitioner exam!
2
1
15
For anyone who is currently attempting the labs on @PortSwigger's @WebSecAcademy gist.github.com/rizemon/677a… Useful if you are studying for the Burp Suite exam and just want to focus on the Apprentice and Practitioner labs only!

Automatically adds color-coded level information (Apprentice, Practitioner, Expert) to PortSwigge...

Automatically adds color-coded level information (Apprentice, Practitioner, Expert) to PortSwigger's Web Security Academy "All labs" page - ColorMyWSA.js

gist.github.com
3
2
5
Just updated with a "sleep" function and it only takes ~12 seconds instead of 50!
This is what it will look like when executed. Note that it takes a while to load!
1
Inspired from nitter.net/MichaelDFry/status/147…
1
rizemon retweeted
Youstin
@youstin24
22 Dec 2021
Cache Poisoning at Scale: Identifying and Exploiting over 70 Cache Poisoning Vulnerabilities youst.in/posts/cache-poisoni…

Cache Poisoning at Scale | Youstin Infosec

Identifying and exploiting over 70 cache poisoning vulnerabilities across major bug bounty programs, including GitHub, GitLab, Shopify and HackerOne.

youst.in
24
621
1,430
I just completed @Pentesterlab's Recon Badge!!!
1
4
In March, I found an SSRF in a @googlecloud service, which gave me access to a few internal Cloud projects. I recorded myself finding the bug from start to finish. Today, I published a video where I react to these recordings and explain the issue. piped.video/UyemBjyQ4qA
12
212
761
OSCP (Offensive Security Certified Professional) Pass and Preparation - Tips and Tricks💡 A thread🧵 #oscp #CyberSecurity #infosec
1
151
338
rizemon retweeted
starlabs@starlabs_sg
4 Aug 2021
Our intern @daniellimws wrote a blogpost about the Taint Analysis tool that he worked with @Puzzorsj, @hi_im_d4rkn3ss & Akash "Identifying Bugs in Router Firmware at Scale with Taint Analysis - starlabs.sg/blog/2021/08/ide… " Sounds exciting? 😋 We hope it's a fun read on a Wednesday.
4
30
97
Load more