JF Bastien

@jfbastien

I often think about this (now deleted) @johnregehr tweet: C is awesome because it defers problems to runtime, at which point people might not be able to find me.

Jul 31, 2020

-

How to exploit the confluence 0day.

HTTPVoid

@httpvoid0x2f

Thread - Confluence Blind OGNL Injection analysis from our limited java knowledge. From vulnerable sink to becoming admin of the confluence instance. #CVE-2022-26134. Tested on latest vulnerable version 7.18.0.

Jun 4, 2022

-

If you want to have a simple private Tor-alike system, this seems like a good starting place.

UPnProxyChain: a Tool to Exploit Devices Vulnerable to UPnProxy

Code:

GitHub - ValtteriL/UPnProxyChain: A tool to create a SOCKS proxy server out of UPnProxy vulnerable device(s). · GitHub

A tool to create a SOCKS proxy server out of UPnProxy vulnerable device(s). - ValtteriL/UPnProxyChain

ProTip:

nmap -sU -p 1900 —script=upnp-info <target>

And if you want to fuck with the above:

GitHub - chadillac/UPnProxyPot · GitHub

Contribute to chadillac/UPnProxyPot development by creating an account on GitHub.

-

In completely unrelated news, for the first time the Russia authorities are saying something in public about the last three months of non stop hacking.

Lukasz Olejnik

@lukOlejnik

Russia will make executives personally liable for cyber/information security. "it has been pentesting (finding vulnerabilities for a reward by “white hackers”) by the whole world for 3 months now". The government is aware of the recent "free audits" ... gazeta.ru/tech/2022/05/3…

Jun 4, 2022

Crypto. Scam. Fraud. (Strong, “and nothing of value was lost” vibe)

OKHotshot

@NFTherder

🚨BAYC & OtherSide discords got compromised‼️ Seems because Community Manager @BorisVagner got his account breached, which let the scammers execute their phishing attack. Over 145E in was stolen Proper permissions could prevent this

Jun 4, 2022

-

Longhorn

@never_released

Horrifying out of Microsoft. The false positive rate won't be exactly pretty... I wouldn't be surprised if this results in quite some communications in affected orgs being moved to other channels...

Jun 3, 2022

Dave, 2022 edition

@6502_ftw

These are prime examples of what happens when you develop a piece of technology without stopping to think how it could be misused.

Jun 3, 2022

-

God Is A Tulpa

@kristy_clueless

I love how every part of this headline is pure chaos

Jun 4, 2022

-

Andrew Kelley

@andy_kelley

Who called it "malloc()" and not "see_you_later_allocator()" ?

Jun 3, 2022

-

This is excellent.

-

Omri Elisha

@AnthroOmri

We memorized phone numbers. We memorized driving directions. No one knew what we looked like. No one could reach us. We were gods.

Nov 13, 2021

-

UAV records itself getting shot down.

-

raptor

@0xdea

Is exploiting a NULL pointer deref for LPE just a pipe dream? Very cool Windows vuln-dev blog post by @izobashi thezdi.com/blog/2022/6/1/…

Jun 5, 2022

-

Dreadnought Holiday

@TheDreadShips

As old Shakespeare (W) nearly put it, some are born misfortunate, some achieve misfortune, and others have misfortune thrust upon them. And sailing into the heart of the Venn diagram of unfortunate outcomes, albeit just a little bit late, comes Vice Admiral John Nevell.

May 30, 2022

-

Archaeology & Art

@archaeologyart

The Roman Empire’s 250,000 miles of road re-imagined as a subway transit map. Created by Sasha Trubetskoy @sasha_trub.

Jun 2, 2022