chebuya's banner
chebuya's profile picture

chebuya

@_chebuya • 1,913 subscribers

c2 enjoyer

Shorts

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

89,290 Aufrufe

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

How I discovered and exploited an unauthenticated SSRF in the Havoc C2 teamserver, allowing attackers to leak origin IPs of teamservers behind redirectors and much more!
0:23
_chebuya's profile picture

How I discovered and exploited an unauthenticated SSRF in the Havoc C2 teamserver, allowing attackers to leak origin IPs of teamservers behind redirectors and much more!

chebuya

95,881 Aufrufe • vor 2 Jahren

How I discovered and exploited an Unauthenticated RCE in BYOB (Build Your Own Botnet), an open-source post-exploitation framework for students, researchers and developers with close to 9k stars on GitHub!
0:37
_chebuya's profile picture

How I discovered and exploited an Unauthenticated RCE in BYOB (Build Your Own Botnet), an open-source post-exploitation framework for students, researchers and developers with close to 9k stars on GitHub!

chebuya

65,143 Aufrufe • vor 2 Jahren

I ran semgrep on every open source target in scope on HackerOne with my tool, SASTSweep, here's what that looks like Last teaser before tool release I promise
2:38
_chebuya's profile picture

I ran semgrep on every open source target in scope on HackerOne with my tool, SASTSweep, here's what that looks like Last teaser before tool release I promise

chebuya

43,778 Aufrufe • vor 1 Jahr

Keine weiteren Inhalte verfügbar