JavaSec
144 subscribers
103 photos
15 videos
16 files
40 links
Bu yerda faqatgina cyber security haqida emas, shunchaki Owner o'zining fikri va tajribasini ulashib boradi

About:
Pentester TL @TuranSecurity | Red-teamer (CPTS, CWEE) |CVE 2x Nvidia, 1x Dolibarr | 0day from ZDI | CTF player | Thoughts & life
Download Telegram
Nasib. Yaxshi yangiliklar ham bor…
2🔥84👍2🕊1
Forwarded from Turan Security
🏆 BlackHat MEA 2025 CTF musobaqasida 12-o'rin!

Turan Security va O'zbekiston shahafini himoya qilgan jamoa dunyoning eng nufuzli kiberxavfsizlik musobaqalaridan birida 125 jamoa orasidan TOP-12 talikdan joy oldi!

Saudiya Arabistoning Ar-Riyod shahrida o‘tkazilgan BlackHat MEA tadbiri - global miqyosdagi eng kuchli mutaxassislar, ekspertlar va jahonning yetakchi kiberxavfsizlik jamoalari uchrashadigan maydon.

TOP jamoalar orasida Team lead’imiz qiyinlik darajasi yuqori bo'lgan 3 ta taskda:
🚩Firstblood - web, birinchi;
🚩Firstblood - forensics, birinchi;
🚩Secondblood - web, ikkinchi bo'lib flagni aniqlashga erishdi.


Bizning maqsadimiz xalqaro maydonda O‘zbekistonni nufuzini oshirish, yoshlarga ilhom berish va kiberxavfsizlik sohasini rivojlantirish.
1🔥72🤝1
Why mid-January🤔
Please open Telegram to view this post
VIEW IN TELEGRAM
2🔥12❤‍🔥3🕊1
JavaSec
Why mid-January🤔
Nvidia also hacked 😎
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥5🤡3🕊2
frontendni bilmaydigan backendchi bn ishlash qiyin deyishadi
aslida backendchi frontendni emas frontendchini tushunishini o'zi yetadi menimcha bu yerda frontendchi ham o'zi nima hohlayotganini to'g'ri tushuntirib bera olishi ham muhim)
🤣32
3 ta zero-day va uchunchi 0day zaifligi accepted va 👀000💲 bounty!

1-zero-day zaifligi uchun reject olganimda menimcha Zero Day Initiativedan
accepted olishni iloji yoq deb oylagan edim

Zero Day Initiative (ZDI) — Trend Micro tomonidan yuritiladigan, dunyodagi eng yirik va nufuzli vulnerability research dasturlaridan biri. Ushbu dastur mustaqil xavfsizlik tadqiqotchilari (researcherlar) tomonidan topilgan zero-day va kritik zaifliklarni sotib oladi, ularni ishlab chiqaruvchi (vendor) bilan hamkorlikda yopilishini ta’minlaydi va foydalanuvchilar xavfsizligini oshiradi.

Shu dastur orqali topgan zaifligim ZDI laboratoriyasida to‘liq tekshirilib, tasdiqlandi va rasmiy ravishda qabul qilindi. Natijada bounty oldim va ZDI researcher sifatida tan olindim.


Demak iloji bor…
29🔥6👍1🕊1
2025 Year in Review: Offensive Security & Vulnerability Research
This past year has been defined by deep technical research and high-level offensive security challenges. Here is a summary of my key milestones:

Security Research & Exploit Development
▪️ NVIDIA CVE-2025-XXXXX: Identified a security vulnerability; official CVE release scheduled for January 2026.
▪️ Trend Micro Zero Day Initiative: Received a bounty offer for a 0-day vulnerability discovery.This also on the patching process.

Advanced Technical Certifications
▪️ HTB Certified Web Exploitation Expert (CWEE): 100/100 points | 6/6 flags
▪️ HTB Certified Penetration Testing Specialist (CPTS): 100/100 points | 14/14 flags

CTF & Competitive Achievements
▪️ HTB Cyber Apocalypse: Secured 18th place globally out of 8,100+ teams.
▪️ Cyber Orda in Kyrgyzstan (Central Asia): 1st Place + 3 first bloods🩸.
▪️ CyberKent (Uzbekistan): 2nd Place (Red Team).
▪️ We organized a CTF together with Turan Security team!

These achievements represent months of research and consistent effort. Huge thanks to my teammates and the Turan Security for the support. I’m looking forward to pushing the boundaries of offensive security even further in 2026.
3🔥8🤡43👏3🤣3🕊2🙊2❤‍🔥1👍1💊1