finally, i can retire

Hey... did anyone notice that PAN 0day was fixed in a version that was released over a year ago? Guess it wasn't easy to notice under all the loud opinions about ethics. 🤣

How can you identify the plane, location, and mission commander in this image? With the intelligence cycle and a little automation! This Verif!cation Quiz Bot challenge from Fiete Stegers | @[email protected] is the hardest one I've tried so far. New #geolocation blog post: nixintel.info/osint/planes-a…

#log4j thread Detection Ideas + Yara by Florian Roth ⚡️ - gist.github.com/Neo23x0/e4c8b0… Hashes for vulnerable LOG4J versions by Rob Fuller - github.com/mubix/CVE-2021… SIGMA by SOC Prime - tdm.socprime.com/tdm/info/XY2Ej… tdm.socprime.com/tdm/info/4SiOs… Payloads list by GreyNoise - gist.github.com/nathanqthai/01…

rip everyone #log4shell youtu.be/EwwtGN_d8Is

here take this 🤲🍯 #log4shell #log4j github.com/sysgoblin/log4…

I promised I would write a report covering my phishing research in 2021. That report is now live: steved3.io/data/Phishing-… Shout out to @AmandaFGoedde for helping me edit, as well as にのせき for making Miteru, and urlscan.io for creating an awesome tool to help defenders.

just pushed a quick update to emulate apache/elastic, process query params, and accept POST data with a fake login form. have at it! 🍯

log4getaboutit 🤌

well i mean just fuck everything at this point right

A few hours ago, a promising token called $YEAR was airdropped. It was set up as a "year in review" of your Ethereum transaction history. Less than an hour ago, this turned into a painful experience for buyers of the token. Here's how $YEAR pulled the rug in under 6 hours🧵 1/

Sad that I got beat to posting about this publicly after looking at it on and off since October, but there are a lot of great details in here about a previously unknown botnet written in Go! Here are some screenshots (including the operator's desktop) I had as well!

It saddens me to announce that Sukon, the startup I’ve been working on since September 2021, will be shutting down. It was a hard decision, but ultimately it was the right call to make. There were 3 main reasons why Sukon failed, which is what I’ll go over in this thread🧵

the world is ending and im out here buyin crocs

Happy holidays from the #FBI