Loading video...

Video Failed to Load

Go Home

We discoverd New Fivem 0day exploit - PoC 🚨 ⚠️ Unauthorized access to the Vmenu Admin panel on any FiveM server can be achieved by exploiting game network traffic packets. Credit : Mohnad Alshobaily Omar Alzughaibi Nawaf Almutairi

42,710 views • 1 year ago •via X (Twitter)

11 Comments

Mohnad Alshobaily's profile picture
Mohnad Alshobaily1 year ago

🔴 During a break from bug bounty, we jumped into FiveM for fun. Messed with Wireshark and network traffic, got VMenu admin panel access, could ban/unban, and gain full privileges on any server using VMenu. New CVE on the way⏳ #GTAOnline #Fivem #GTA5

Rainmaker's profile picture
Rainmaker2 years ago

Can Reinforcement Learning beat the market? In this free Substack post I explore a trading strategy based on Q-learning that delivers market-beating returns on the Visa stock with much smaller drawdown. Full code and backtest is available for free. Check it out!

مُصْطفى | Spider's profile picture
مُصْطفى | Spider1 year ago

@Omarzzu @N4waF_Almutairi اللهم بارك ما شاء الله مبدعين

Abdullah Alannaz's profile picture
Abdullah Alannaz1 year ago

@Omarzzu @N4waF_Almutairi مبدعين 👏🏻

Nasser Albarrak's profile picture
Nasser Albarrak1 year ago

@Omarzzu @N4waF_Almutairi ابدعتوا ياعيال 👏👏

عبدالله's profile picture
عبدالله1 year ago

@Omarzzu @N4waF_Almutairi ماشاء الله تبارك الله 👏🏽

S2RT's profile picture
S2RT1 year ago

@Omarzzu @N4waF_Almutairi مبدع كالعادة 👏

im nhy?/Feras Aljohani's profile picture
im nhy?/Feras Aljohani1 year ago

@Omarzzu @N4waF_Almutairi مبدعين ههههههههههههههههههههههههههههههههههههههههه

Malek Althubiany's profile picture
Malek Althubiany1 year ago

@Omarzzu @N4waF_Almutairi ماشاءالله عليكم ابطال

Abdulaziz's profile picture
Abdulaziz1 year ago

@Omarzzu @N4waF_Almutairi والله وحوش ياعيال مابقيتو شي ماشاء الله👏👏

NoRiskNoLive's profile picture
NoRiskNoLive1 year ago

@Omarzzu @N4waF_Almutairi ماشاء الله ابدعتم ولله

Related Videos

The value of the work we're doing at Optimum is encapsulated quite well by the phrase "speed is money". In modern markets there are real economic advantages to latency reduction. This is nothing new. Wall Street firms have long been optimizing on latency, primarily through colocation and top of the line hardware. However, when it comes to decentralized systems, expensive hardware and geographic concentration are antithetical to their purpose. Therefore we should optimize decentralized network latency through software, which I'm thrilled about because it's exactly what I've spent the better part of the past 2 decades working on with Random Linear Network Coding. Now let’s talk about networking economics, the relationship between speed and money. First, it's important to note that users will only pay for low latency if it can be consistently guaranteed. Second, you can only make that latency guarantee for a certain number of users. This is a universal law of networking. We can model this relationship on a delay curve, shown below. The delay curve is determined by the utilization rate of the network, meaning how much traffic is flowing through the network divided by the network's throughput. As you approach a level of traffic equal to the available throughput, latency trends infinitely higher. On this delay curve we can impose some utility thresholds. These thresholds are the levels of latency which are important to different groups of users because of how that latency guarantee improves their economic outcomes. Finding the point on the curve where each threshold intersects will tell us what level of traffic we can guarantee that level of latency for. Essentially, there exists a finite supply of speed on a network and the highest utility users of that speed are willing to pay more for it. I like to think of this similarly to expedited shipping options on Amazon. This is why we say speed is money, and why we can create a Latency Marketplace. The only way to increase the supply of speed is to fundamentally increase network throughput. This is what we work on at Optimum by using Random Linear Network Coding. The same relationship between traffic and throughput still applies, but now the delay curve is shifted out further to the right. Now more traffic can be processed at the same latency, or the same traffic can be processed at a lower latency. More speed available to the network. More value unlocked for the network’s users. Crucially, that value is no longer only reserved for those who can afford to sit closest to the machine. Expanding the supply of speed widens who can reach each latency threshold, keeping the network's advantage decentralized rather than concentrated in the hands of a few. When nodes join Optimum and participate, they reap the benefits, but they also add to the capacity. Rather than vying against each other in a zero-sum game, nodes help themselves and others.

Muriel Medard

45,392 views • 2 months ago

REMOTE ACTIVE DESKTOP found on Fulton County's Dominion server from the Speckin Forensics Report, exposing critical security failures in Fulton County's Dominion machines. Open external network interfaces, which included active enabled remote-desktop protocols which were data routing to foreign networks, including an IP address from Canada, destroying the "air-gapped" argument. Fulton County, Pennsylvania, not Georgia, was then held in Contempt for a Secret Voting Machine Probe, which resulted in the decertification of Fulton County's machines by the Pennsylvania Secretary of the Commonwealth for conducting the independent audit, not the forensic violations found. In July 2022, forensic experts imaged the hard drives of Fulton County, PA's Dominion voting equipment. The September 15, 2022 Speckin Forensics LLC report lays out a series of serious security lapses, unauthorized changes, outdated protections, and unexplained external connections, which raises major questions about system integrity and certification compliance. 1. Security hardening incomplete: Necessary measures to harden and secure the machines were not completed. Last update or security patch dated around April 10, 2019. No patches or updates afterward. 2. Multiple external USB insertions: External USB drives were inserted on several occasions. No known current list of approved external drives existed. Therefore, it was impossible to determine whether any inserted drives came from unauthorized sources or further compromised the data or system. This includes connections in 2019 consistent with software install periods and unexplained 2021 connections. 3. Serious post-installation changes 900+ .dll files: Over 900 .dll files and links were created since the Dominion software installation date. The report describes this additional pathway as a security breach due to the introduction of an unauthorized script. 4. Default credentials and policies left in place: Usernames and passwords were never updated from defaults such as "admin" and "guest." Group policies remained at default settings, allowing the username "admin" with password "admin" complete access to the device. 5. Unauthorized Python script after certification: A Python script was installed on the Adjudication01 workstation after the system certification date. This should not have been added post-certification. The script could create vulnerabilities including external access, data export of tabulations, or introduction of metrics not allowed by the certification process. 6. Interconnected network of drives: The drives are networked to share data and counts. Unauthorized access to any one device therefore allows unauthorized access to any other device on the network. 7. External network connection, Canada-linked IP: An external IP address associated with Canada was found on Adjudication01, the same device with the post-certification Python script. This shows at least one network device connected to an external device on an external network. Log references include an IP linked to Quebec, Canada. Additional security risks found: Windows Defender dated to July 2016 with no subsequent updates, leaving the system unprotected against later malware. Dominion had published hardening procedures in 2019 that were not followed. Sample tables in the report list specific USB device connection dates/times and post-install .dll activity, creation, access, write, timestamps. Documents Source: Speckin Forensics & Election Crime Bureau

The SCIF

24,422 views • 1 month ago

If you’re playing on MonkeyTilt, the outcome might already be decided BEFORE you bet “The cryptography behind every bet has always been sound” We tested it It isn’t... we sent two different client seeds for the same nonce same result both times the server is ignoring the client seed entirely the player has ZERO influence on outcomes — what we did — opened the MonkeyTilt provably fair verifier with a revealed server seed entered nonce 1 → got 3.04x changed the client seed same server seed, same nonce → 3.04x changed it again → 3.04x the client seed has ZERO effect on the outcome — why this matters — in a provably fair system the outcome is derived from: -server seed -client seed -nonce the client seed exists so the player contributes randomness the server CAN’T predict if it’s ignored the server knows every outcome BEFORE you bet the hash commitment proves nothing because the server already controls all the inputs — not a frontend bug — we checked the network traffic the verifier sends a WebSocket request with: -client seed -server seed -nonce the server receives different client seeds and returns the same result anyway request 1 → client_seed “Clientseed123456789” → 3.04x request 2 → client_seed “NEWSEED12345” → 3.04x this is the server ignoring input not a display issue — live bet traffic — placing a Limbo bet returns: -random_multiplier -total_payout -round_closed that’s it no hash no seed reference no nonce no proof seeds are fetched from a separate endpoint game engine and seed system are DISCONNECTED — nonce verification — you can only verify nonces you’ve already played in a real system all outcomes are predetermined once the server seed is committed - they’re deterministic blocking future nonces suggests results don’t exist until you bet — summary — -client seed ignored by server -no cryptographic proof in bet responses -game engine and seed system DISCONNECTED -nonce verification restricted this isn’t provably fair it looks like provably fair UI on top of server side RNG MonkeyTilt should probably address this anyone can verify this themselves in 60 seconds - open the verifier, change the client seed, watch the result stay the same

CoinBets🔍

20,973 views • 6 months ago

Another pleasant surprise by Axis Bank’s Atlas Credit Card 🥰🥳🤩 : With Axis Bank’s Atlas Credits Card, you get access to the Business Class Lounge at Abu Dhabi Airport in UAE. To my surprise, even Priority Pass of HDFC’s Infinia Credit Card, HDFC Bank’s Marriott Diners Black Credit Card and may other premium credit cards were not eligible for this Business Class lounge 😱😱😱. 👉Primary card holder of Axis Bank’s Atlas Credit Card and accompanying guests get access to the Business Class Lounge instead of a cramped, very small and crowded economy class lounge of Abu Dhabi Airport. 👉At Business Class Lounge, you are presented an A la Carte menu by waitress like a high-end restaurant. You can order food and drinks from that menu. There are limited veg options but you can request them to make veg version of dishes. 👉Additionally, you get access to full buffet of Economy Class Lounge which has many veg options. You can bring it to Business Class Lounge. 👉Priority Pass of even super-premium credit cards like HDFC Infinia and premium credit cards on Diners Club network are NOT ELIGIBLE for this Lounge. ✅✅✅And bigger surprise is, you also get access to 6 Restaurants with free food and nob-alcoholic beverages using Axis Atlas Credit Card at Abu Dhabi Airport. However, Priority Pass of Infinia Credit Card and other premium credit cards give access to just one economy class lounge and no restaurants access at Abu Dhabi Airport. I visited this lounge during my recent visit to Dubai and Abu Dhabi and experienced this. Atlas Card’s Lounge program is with DreamFolks network. Not sure if other Dreamfolks cards get similar access. 👉 Just in case you want to Apply Axis Bank’s Atlas Credit Card, here is the link to Apply👉: Press Like button and Repost if you found it informative 😊. Follow “SpendWisely” for updates, info and tips about credit cards and online shopping. ————————————— For all ongoing Credit Card offers (First Year Free, Lifetime Free, Extra Joining Benefits Offers), visit Micro-website of SpendWisely. Here is the Link 👉 ————————————— Note: Always take a credit card basis your own need and personal spending pattern, not just because of an offer. Make your own assessment. Some of the Links in the post might be our referral links. If you apply through these links we might get some referral benefits. [credit card, spendwisely, spend wisely, credit cards]

SpendWisely

42,240 views • 1 year ago