Tib3rius (@0xTib3rius)

Pinned

T

Tib3rius@0xTib3rius · Oct 29

🚀 Catch me online! 🚀 🎥 YouTube: youtube.com/Tib3rius 💻 Twitch: twitch.tv/0xTib3rius 📱 TikTok: tiktok.com/@0xtib3rius 🔗More links: linktr.ee/tib3rius 🌐 Let’s connect!

1

2

58

29

43.0K

T

Tib3rius@0xTib3rius · 9 h

If travel sickness is an illness caused by travelling, why isn't home sickness an illness caused by being at home? 🤔

3

0

12

0

1.0K

T

Tib3rius@0xTib3rius · Jul 24

Just had a marathon ~2hr planning session for "Aw, man...pages!", my DEF CON software documentation quiz show. Y'all screwed on some of these questions. 😅 Come prove me wrong: Aug 8, 10am, Contest Stage. hackertracker.app/event/?conf=DE…

0

5

0

2.0K

T

Tib3rius@0xTib3rius · Jul 24

I'm waiting for @Xbow to actually impress me by finding vulnerabilities that are notoriously difficult for standard automation to find. The big two examples are business logic flaws and authorization issues. I would also love to know how much one of their scans costs them. 🤔

TTib3rius@0xTib3rius · Jul 23

"most tools would have given up" "A master class on path traversal exploitation" "the vulnerable endpoint permitted local file access via the file:// scheme" "/photo/proxy?url=file:///etc/passwd" ... 🤣🤣🤣 The marketing is the most impressive thing here.

8

5

99

15

13.0K

T

Tib3rius@0xTib3rius · Jul 24

.@TheRealC3rul34n sent me this after I was telling her about my SharePoint struggles + success. She gets me. 🥰

2

7

65

0

3.0K

T

Tib3rius@0xTib3rius · Jul 23

Facts. 6 hours of my life at least yesterday with ChatGPT as my troubleshooting buddy. It was convinced I'd downloaded a bad ISO 3 times, but no it's just SharePoint not working the way it should.

JJustin Elze@HackingLZ · Jul 23

The flex here is installing a working version of SharePoint and not the calc pop.

3

0

22

0

3.0K

T

Tib3rius@0xTib3rius · Jul 23

OMG. Metasploit worked. Which means...MY SETUP WAS OK. MOM I ACTUALLY INSTALLED A SHAREPOINT SERVER. POPPED CALC.EXE LIKE A REAL LIFE HAXOR!!!

TTib3rius@0xTib3rius · Jul 23

Calling it, for now. New found respect for Windows Sysadmins, I do not understand how y'all stay sane. If anyone has a working PoC and wants to collab for a video, lmk. I'll likely record a small one tomorrow evening and go over the basics of what we do know about the exploit.

26

73

916

288

55.0K

T

Tib3rius@0xTib3rius · Jul 23

"most tools would have given up" "A master class on path traversal exploitation" "the vulnerable endpoint permitted local file access via the file:// scheme" "/photo/proxy?url=file:///etc/passwd" ... 🤣🤣🤣 The marketing is the most impressive thing here.

XXBOW@Xbow · Jul 22

⚡️XBOW found LFI where most tools would have given up. Photo download endpoint blocked all path traversal attempts. But JavaScript analysis revealed /photo/proxy?url= - vulnerable to file:// scheme access. Successfully read a password file via proxy endpoint. Technical…

7

16

209

47

38.0K

T

Tib3rius@0xTib3rius · Jul 23

I have ~1000 of these stickers to give out at Hacker Summer Camp. 🤓 Come get one!

3

9

76

0

4.0K

T

Tib3rius@0xTib3rius · Jul 23

Smelly has spoken.

vvx-underground@vxunderground · Jul 23

Hello, Someone please hire @endingwithali. She is currently looking for a job in software engineering. She is a very nice lady. Thank you.

0

7

0

2.0K

T

Tib3rius@0xTib3rius · Jul 23

Not sure which hacker con to go to? I break down my favorites, sharing pros, cons, personal stories, and tips for finding local events. Whether you're planning your first con or just looking for a new one to try, this guide is for you! Watch now! youtu.be/QOtRBA2H72o Thanks…

0xTib3rius's tweet image. Not sure which hacker con to go to? I break down my favorites, sharing pros, cons, personal stories, and tips for finding local events.

Whether you're planning your first con or just looking for a new one to try, this guide is for you!

Watch now! youtu.be/QOtRBA2H72o

Thanks…

1

0

10

1

1.0K

T

Tib3rius@0xTib3rius · Jul 23

I don't know who needs to hear this today, but if you hold down Ctrl in Windows Task Manager, it pauses the automatic live-sorting of the table so you can click on the correct process. 👍

39

48

496

68

25.0K

T

Tib3rius@0xTib3rius · Jul 23

Sad that there is seemingly no sticker contest this year. DEF CON is the largest hacker sticker trading convention in the world. 🥲 Also fill out the Feet Feud survey pls: forms.gle/e8pP6FutqduusA…

TTib3rius@0xTib3rius · Jul 21

Yo @InfosecStickers is there a sticker contest this year? Or is someone else hosting it? I have heard nothing... I have a sticker I have yet to reveal publicly that I want to submit. Otherwise I guess I can just share it. 😅

1

0

7

0

2.0K

T

Tib3rius@0xTib3rius · Jul 23

Calling it, for now. New found respect for Windows Sysadmins, I do not understand how y'all stay sane. If anyone has a working PoC and wants to collab for a video, lmk. I'll likely record a small one tomorrow evening and go over the basics of what we do know about the exploit.

TTib3rius@0xTib3rius · Jul 22

Have tried this exploit: github.com/soltanali0/CVE… No dice. Either my setup is janky (possible), the payload generation isn't working properly (using ysoserial.net tho) or the exploit is missing stuff. 🤔

10

2

78

23

63.0K

T

Tib3rius@0xTib3rius · Jul 22

Have tried this exploit: github.com/soltanali0/CVE… No dice. Either my setup is janky (possible), the payload generation isn't working properly (using ysoserial.net tho) or the exploit is missing stuff. 🤔

TTib3rius@0xTib3rius · Jul 22

Progress???

10

3

42

30

17.0K

T

Tib3rius@0xTib3rius · Jul 22

missed a face @NotNordgaren

NNordgaren@NotNordgaren · Jul 22

At the end of Scooby Doo when everyone is @_JohnHammond

1

0

22

0

3.0K

Tib3rius Retweeted

૮

૮ ･ ﻌ･ა Trash Puppy@trshpuppy · Jul 22

Watch this so I can go to DefCon via your collective subconscious youtu.be/bamz9Ozj6II?fe… (ft. @0xTib3rius 😜)

3

34

8

5.0K

T

Tib3rius@0xTib3rius · Jul 22

At the end of Scooby Doo when everyone is @_JohnHammond

RRussianPanda 🐼 🇺🇦@RussianPanda9xx · Jul 22

Hanging with the gang at @HuntressLabs Summer Summit ☀️🍸 @0xffaraday , @wbmmfq , @JSemonSecurity , let the doxxing begin …

8

5

59

0

12.0K