if we are godz unwanted children... SO be it... We will become Digital GODZ
Paper St.
Joined March 2021
- Tweets4.2K
- Following206
- Followers270
- Likes14K
ππππππππ©πΎπ‘πͺπ retweeted
Repeat after me: most individuals do not need a VPN to "protect against eavesdropping from your ISP" or to "maximize your privacy." Using a consumer grade VPN may result in less privacy.
ISPs/LE/etc know VPN exit nodes and they're likely under near perpetual surveillance.
ππππππππ©πΎπ‘πͺπ retweeted
I came across this bit my @psiinon in my bookmarks so I thought I'd send people after it again because it's a good read.
#juiceshop #zaproxy #owasp #mozilla
hacks.mozilla.org/2018/03/haβ¦
ππππππππ©πΎπ‘πͺπ retweeted
Do you have these dangerous HTTP methods enabled on your server? link.medium.com/tl1pjkVuImb
ππππππππ©πΎπ‘πͺπ retweeted
We just made 24 new @kiva micro-loans for the new year using paybacks from earlier loans. Please join us! KIVA is awesome. bit.ly/cigitalgem-kiva
ππππππππ©πΎπ‘πͺπ retweeted
I've prepared a @tryhackme room to demonstrate #log4j #log4shell CVE-2021-44228, explaining the vulnerability, attack vector, and more importantly, detection, mitigations and patching. Working with THM staff to get this in your hands -- it should be available soon.
ππππππππ©πΎπ‘πͺπ retweeted
Nothing says "brace for impact" on a vulnerability like coin miners being deployed. This is bottom feeder activity, consider it like a low water mark.
This Post is from an account that no longer exists. Learn more
ππππππππ©πΎπ‘πͺπ retweeted
The Log4j defect is a FLAW (not a bug) that is now deeply impacting everyone. ARA. @IriusRisk
"Lack of strict separation between data and control instructions, and as a result processing control instructions received from an untrusted source."
bit.ly/ieee-CSD-gem
ππππππππ©πΎπ‘πͺπ retweeted
The entire cybersecurity community reading about Log4Shell.
ππππππππ©πΎπ‘πͺπ retweeted
The patched version of log4j 2.15.0 requires a minimum of Java 8. If you are on Java 7 you will need to upgrade to Java8
When there is active exploitation and you need to patch fast it is beneficial if you have been updating your other dependencies over time.
ππππππππ©πΎπ‘πͺπ retweeted
Looking for a new job? Consider applying to Kellogg's using the name ${jndi:ldap://127.0.0.1:1389/a}
ππππππππ©πΎπ‘πͺπ retweeted
Did I NEED to purchase a collapsible grappling hook?
π
Need is such a relative term...
ππππππππ©πΎπ‘πͺπ retweeted
Hey Phishing/redTeam friends:
Who is the best/easiest employee to target, to get a foot hold in a target.
Developer
HR
Sec Eng
Management
...???
Real question, RT appreciated
ππππππππ©πΎπ‘πͺπ retweeted
Baked cookies today
WuTang cookies aint nuthin ta fuck with
ππππππππ©πΎπ‘πͺπ retweeted
Tickets just went on sale for our #Halloween Hacking class at @nullspacelabs!
Class ticket includes 1 Wi-Fi Nugget, pre-assembled & shipped to you or picked up & soldered in person.
Learn beginner Wi-Fi hacking & use Python to program spooky effects!
universe.com/events/halloweeβ¦
ππππππππ©πΎπ‘πͺπ retweeted
Been a few months in development on and off, but finally got an end to end POC working for lsarelayx. System wide NTLM relay from Windows which relays all incoming NTLM authentications without affecting the original target application. Silent relay if you will.
ππππππππ©πΎπ‘πͺπ retweeted
"It's not the laptop with stickers you should worried about, it's my other laptop without them" -i think that was @LitMoose and I totally agree
ππππππππ©πΎπ‘πͺπ retweeted
Overheard at a conference:
Kid: What do all the stickers on the laptops mean?
Dad: That's so everyone knows what gang each other is in.
ππππππππ©πΎπ‘πͺπ retweeted
#CybersecurityAwarenessMonth: 4 weeks to highlight what needs to be done year around.
@MicroFocusSec's new #InfoSec blog discusses ways for orgs to #BeCyberSmart. Read it now: | #CyberResilience @StaySafeOnline bit.ly/3uD1Jiy #MyCompany