PFY.

I just saw a repo containing an AI generated "awesome" list about something I've spent years studying. I can tell you in the time it takes you to write wrappers to do all these (paid) queries to get false or incomplete info, you could've done research and learned a thing or two.

Finally! Someone put the two IP IOCs related to the #Citrix Netscaler ADC vuln CVE-2023-3519 in a Virustotal Graph, which allows me to share them 216[.]41[.]162[.]172 216[.]51[.]171[.]17 virustotal.com/graph/g6a29f00…

Mutahar HACKING IS ILLEGAL AND FOR NERDS.

Do you want to learn YARA to track malware but don't know where to start? In anticipation of #100DaysofYARA we're giving away 3 free seats to AND's YARA Course! To enter, reply to this tweet with what malware you want to track. Most creative responses by Friday 2023-11-24 win!

Happy Birthday to Phrack! The first issue of Phrack was released on November 17, 1985. phrack.org/issues/1/1.html

Stop doom scrolling Twitter. We know you degenerates use PE-Sieve and PE-Bear. Donate immediately - hasherezade is doing God's work and she is doing it for free. She is amazing. *We donated $515.24 Donate link: paypal.com/donate/?hosted…

Check it out, it's tmp.0ut Volume 3! tmpout.sh/3/

I added some maturity models and stuff to the framework section of my awesome detection list a while back (github.com/0x4D31/awesome…), thinking they'd come in handy one day. today, after needing something similar and spending hours on a d&r maturity model, I revisited my list and

The ARISS #SSTV fans must have wished upon a star, because the planners have scheduled a short event for next week. It starts at 08:55 UTC on Thursday 7-December. See the graphic for detailed times. More soon at ariss-sstv.blogspot.com too.

About a month from now, #100DaysofYARA will kick off! Explainer on how to participate is linked below but the TL;DR is: A self-paced, concerted effort to learn YARA by writing a new rule everyday, starting January 1

✨finally carved out time to polish a weekend project! meet Galah 🦜: an llm-powered web honeypot using the OpenAI api. stay tuned for a blog post diving into the 3 months of data collected from a gcp deployment in early 2023. github.com/0x4D31/galah The Honeynet Project

Numbers station challenge on the air this Saturday at 21:00 UTC! From our KPH friends at Point Reyes (San Francisco). Can you decrypt the message? Details and freqs: priyom.org/blog/mrhs-even… How-to: radiomarine.org/events-2 Send results to [email protected] for certificates!

Corey Quinn My home servers were named for "cheeses unsuitable for grilling", probably at the suggestion of andybrown

LoL, LMAO even Lennart Koopmann I've got a new detection for you

In your opinion, what are the biggest shifts in adversary tactics/behaviors in the last 10 years? Looking for high-level, *macro* trends, backed by anecdotes or publicly documented examples. I have my own ideas, but looking for additional angles/inputs.