PROTIP: If you have to upload a picture to a website and there is a minimum file size that your image file doesn't meet, simply attach a webshell to the end of your file to increase the total size.

...🙃

The rumors are true! We're hiring at GreyNoise! Roles include engineering, research, sales, PM, data science, and community mgmt. Our team is mostly located in the Washington DC area but we absolutely support and encourage a distributed team Apply here: linkedin.com/jobs/search/?f…

We’ve all been feeling a bit down recently and so my wife decided we were going on holiday. I was told that I was taking Tuesday and Wednesday off and she’s been working on a secret plan 🧵

This isn't good. Php repo looks to be compromised.

#ff Alan (over at bsky) Seriously, this dude is relentless at hunting phishers and inspecting kits.

*** 1st #KNOXSS GIVEAWAY! *** Like and RT this to have a chance to win one of the following: * 1 KNOXSS Pro Subscription 3-month * 1 KNOXSS Pro Subscription 6-month * 1 KNOXSS Pro Subscription 1-year Winners of this draw will be announced in 72hs, good luck! 😀

Recently I've been looking into #Pegasus #Malware and found myself in a rather unique threat intelligence position. To talk about it, here's... a Thread 🧵 a Blog 📖 and a Video 🎥 👇

Bug Bounty Alert! We are on a massive hunt for CWE-79 across our entire portfolio. Now through the end of October earn a 400% bonus from our $100,000 pool. cwe.mitre.org/data/definitio…

Leveled up to 0x02! via Synack Red Team

I'm not writing a report ever again #bugbounty #pentesting #infosec #OpenAIChat

I’ve just published a write up for a recent Google VRP (Google Bug Hunters) submission that highlights the importance of pinning Actions by SHA instead of tag. #GitHub #BugBounty adnanthekhan.com/2024/11/11/rel…

I’ve just released an initial version of a new payload called Cacheract. It’s a one of a kind malware that lives entirely within GitHub Actions pipelines. It takes GitHub Actions cache poisoning to the next level. github.com/adnanekhan/cac…

If you haven’t tried gato-x yet you’re missing out!

Damn, 5 day response time from notification to acknowledgement of your core product being backdoored. I’d expect a quicker response from a $2B company… github.com/Kong/kubernete…

I performed some analysis that might shed light on how the recent supply chain attack (github.com/Kong/kubernete…) happened. Thanks @Devyn for tweeting it earlier!! 🧵: Back in November, we can see that the maintainers updated workflows: github.com/Kong/kubernete…

i truly believe that i will usher in a new era of peace and prosperity when i get every single post on hthis fucking website deleted by 2022