Alvaro Muñoz

@pwntester

Security Researcher with . CPO (Chief Pwning Officer) at ;) CTF . Opinions here are mine!

Madrid  
pwntester.com
Joined December 2008
170 Photos and videos Photos and videos

Tweets

You blocked @pwntester

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @pwntester

  1. Retweeted
    May 7

    Looking for a bug hunting challenge? Then this Java CTF is for you! Hunt for a pre-auth RCE while also learning all about CodeQL's tracking features.

    22 retweets 115 likes
    Undo
  2. Retweeted
    May 6

    "Our goal is for every CVE in OSS that gets found that could be generalized, we create a CodeQL query that will cover that. Instead of manually fixing bugs one at a time, we can eradicate whole categories of vulnerabilities across software"

    2 replies 22 retweets 73 likes
    Undo
  3. May 6

    Totally recommended if you want to learn to write bug-finding CodeQL queries! Also if you want to practice your EL injection skillz since payload is not straightforward! Looking forward for original submissions!

    Looking for a vulnerability hunting challenge? Then this Java CTF challenge is for you! You will hone your bug finding skills to find a pre-auth RCE and also learn all about CodeQL's taint tracking features.
    10 retweets 32 likes
    Undo
  4. Retweeted
    May 6

    Looking for a vulnerability hunting challenge? Then this Java CTF challenge is for you! You will hone your bug finding skills to find a pre-auth RCE and also learn all about CodeQL's taint tracking features.

    1 reply 71 retweets 205 likes
    Undo
  5. Retweeted
    May 6

    Code scanning, powered by CodeQL, helps protect your code from vulnerabilities you might otherwise miss.

    3 replies 67 retweets 257 likes
    Show this thread
    Show this thread
    Undo
  6. Retweeted
    May 2

    Esta mujer es neuróloga en el hospital 12 de octubre. Es digna de escuchar. Es la cruel realidad y aún lo niegan. 👇👇

    439 replies 15,591 retweets 24,608 likes
    Show this thread
    Show this thread
    Undo
  7. Retweeted
    Apr 30

    A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land, by

    1 reply 7 retweets 17 likes
    Undo
  8. Retweeted
    Apr 30

    This photo compilation will be in the American History textbooks one day.

    1 reply 27 retweets 68 likes
    Undo
  9. Apr 24

    v1.33 released with a ton of new features. Thanks to for the great PRs! You can see whats new here

    70 retweets 145 likes
    Undo
  10. Apr 24

    🎉🎉 🚀

    has been working on some updates to the awesome tool, find out about our improvements here
    1 retweet 10 likes
    Undo
  11. Retweeted
    Apr 22

    Don’t miss out on presentation "InQL: GraphQL security testing made easy!" at the next GitHub Security Virtual Meetup (Thu, April 23, 2020 4PM PDT) The event is sold out! Don’t worry, the recording will be available.

    5 retweets 12 likes
    Undo
  12. Retweeted
    Apr 21

    Check out mo's last work, he fuzz Android's NFC stack and found 4 RCE (The 'R' stands for NFC distance). ()

    GHSL-2020-010: Out-Of-Bounds write in Android Open Source Project - CVE-2020-070
    1 reply 24 retweets 50 likes
    Undo
  13. Retweeted
    Apr 21

    Calling all bounty hunters: get rewarded for CodeQL queries that find multiple vulnerabilities or that identify vulnerability classes with high precision!

    1 reply 13 retweets 43 likes
    Undo
  14. Retweeted
    Apr 20

    Dropwizard users have been urged to update after a previous patch failed to fully fix an RCE flaw in the Java framework – discovered by

    3 retweets 7 likes
    Undo
  15. Retweeted
    Apr 16

    GHSL-2020-053: Use After Free in Chrome WebAudio - CVE-2020-6450

    15 retweets 41 likes
    Undo
  16. Retweeted
    Apr 16

    GHSL-2020-040: Use After Free in Chrome WebAudio - CVE-2020-6449

    16 retweets 34 likes
    Undo
  17. Retweeted
    Apr 16

    GHSL-2020-041: Use After Free in Chrome WebAudio - CVE-2020-6451

    5 retweets 14 likes
    Undo
  18. Retweeted
    Apr 16

    GHSL-2020-035: Use after free in Chrome WebAudio - CVE-2020-6427

    11 retweets 19 likes
    Undo
  19. Retweeted
    Apr 16

    GHSL-2020-038: Use after free in Chrome WebAudio - CVE-2020-6429

    22 retweets 49 likes
    Undo
  20. Retweeted
    Apr 15

    GHSL-2020-030: Server-Side Template Injection in Dropwizard - - CVE-2020-5245 - CVE-2020-11002

    10 retweets 28 likes
    Undo

@pwntester hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·