Twitter Beğeni Hilesi

Blog about my Pwnie Awards nominated Exchange RCE gadget chain dropped: 1) File Write to drop DLL to unknown directory and leak this path to log file. 2) File Read to leak write location from the log file. 3) Local DLL loading gadget -> RCE It was a fun process 🥲

Some nice Shazz's from alex. This shows what entities are allowed between forward slashes in protocol relative URLs: shazzer.co.uk/vectors/66ec03…

AMAZON NOW HIRING NUCLEAR ENGINEERS All these companies claimed for years to be 100% renewable-powered. It was always untrue, and now they can't get into nuclear fast enough. They watched nuclear plants die rather than lift a finger to help. Not anymore. Time to build.

6 years ago I started designing an open source oscilloscope, one I wish I had when I started in electronics. 3 years ago I released a WIP design, looking for contributors. And after massive community effort, ThunderScope is now ready for your lab bench: crowdsupply.com/eevengers/thun…

LinkedIn recently began harnessing its users’ content and data to train artificial intelligence models, opting all platform participants into the program without formal notice — except for users in the United Kingdom and Europe. therecord.media/uk-regulator-s…

Hi I'm currently looking for Threat researcher/malware analyst/SOC Analyst position If you have any opportunities please dm me Here is my Cv and my Technical blog m4lcode.github.io

Disney to stop using Slack after data breach exposed more than 44 million messages, 18,800 spreadsheets and at least 13,000 PDFs. 🤦‍♂️🤦‍♂️🤦‍♂️ bleepingcomputer.com/news/security/…

Cards against humanity’s website explaining why they’re suing Elon is pretty fucking good

Un étudiant en droit recalé fait la leçon à l'université Paris-Panthéon-Assas en justice actu.fr/ile-de-france/…

urlhaus.abuse.ch/asn/216240/ AS number:AS216240 AS name:MortalSoft AnonVM cc: Tube-Hosting has yet to find legitimate customers and has continiously botnet skids on his ASN. bgp.tools/prefix/93.123.… #bulletproof #hosting

2 months later and this malicious ip is still being hosted in the UK http://89.197.154.116/ cc: mRr3b00t NDA0E

101.126.87.87:50500 #cobaltstrike 101.126.87.87 #opendir 2 suspicious DOC's virustotal.com/gui/file/da4c4… virustotal.com/gui/file/8fc18… with so far 0 detections although macro's within the doc's are recognized! cc: DOCGuard - Detect Maldocs in Seconds! MalwareHunterTeam 🧐

I published a new blog post - Improve Your Forensic Analyses with hashlookup foo.be/2024/09/Improv… #dfir #forensics #digitalforensics #infosec #opensource #hashlookup #opensource

Page d'accueil : Un outil Open Source pour construire un tableau de bord hautement configurable avec du YAML qui se connecte à plus de 100 services. One dashboard to rule them all and in your browser bind them ! 👉 En savoir plus : gethomepage.dev/latest/ 👉 Le code :

#USA 🇺🇲 - Uber Eats Data Breach Allegedly Exposes Over 280,000 Records According to the threat actor, the compromised dataset includes information such as order details and financial transactions. dailydarkweb.net/uber-eats-data… #dataleak #darkweb #infosec

🤓 Do you know Fabric? A tool created by ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ Fabric is an open-source tool that lets you manage a collections of prompts or patterns!💡 Here is FabricUI—a web interface I coded for Fabric! I wrote a blog about it! Here is a thread👇 youtu.be/FeB0dRzd1rs?si…

De l’utilité d’avoir un parc nucléaire

Si on recense "toutes les substances chimiques qui se trouvent dans notre corps", on recense... tout le corps. En entier. 😏

Had someone contact me out of the blue yelling at me for making powercat. Apparently they got popped and the attacker used it. I need you to listen very carefully. EVERY AV tool has caught powercat for well over 6 years. The blame is on you. 1

🤩 I’m honored to announce that I’ve been nominated for the SANS Institute Difference Maker award in the category "Practitioner of the Year"! 🎉 If you’ve liked my work, you can cast your vote here 👇Thanks a lot for your support! 🙏 ❤️ #infosec survey.sans.org/jfe/form/SV_e3…