Zonifer

[Zonifer @0xZon1]

@MrBeast 10000001

[Zonifer @0xZon1]

@VittoStack Me!

[Zonifer @0xZon1]

@ChipotleTweets Check your DMs

[mthcht @mthcht2]

LOLFSAAS

Living off Free SaaS

Hundreds of SaaS platforms with free tiers, documenting abuse surface, opsec risks, authent methods, C2 framework mappings, and operational limits.

https://t.co/w6NdZ7eA8C

[Zonifer @0xZon1]

@ElonMuskAOC 1337

[No Starch Press @nostarch]

FYI, the best security researchers weren't made in corporate training rooms. They were forged by curiosity, open resources, and community-driven knowledge. If you're here for that energy then come on down!

[Zonifer @0xZon1]

@I_Am_Jakoby @dr0pbears Also happy to test against some products. Dms are not open

[Felix Wilhelm @_fel1x]

First post on the Asymmetric Research blog. A critical bug in Polygon's Heimdall validator that put over $2B of crypto assets at risk.

[Zonifer @0xZon1]

I've published a blog post discussing the recent cookie hijacking incident that occurred with Okta last month. What's crazy is that I had reported this vulnerability to them 17 months ago!
https://t.co/Shzb4Z4Ym9

[Zonifer @0xZon1]

@463n7_57 @HackerBoxes Could I DM you?

[Sahil Bloom @SahilBloom]

Today is my 32nd birthday.

Over the last month, I asked several 90-year-olds what advice they would give to their 32-year-old selves.

Here's the life advice everyone needs to hear:

[Vincent Van Mieghem @_vivami]

Bypassing CrowdStrike, Microsoft Defender for Endpoint etc. for fun.. not profit https://t.co/VCLnD0e1bL

[Bad Sector Labs @badsectorlabs]

CI/CD pipeline war stories (@0xZon1 + others), Serv-U exploit writing (Cal Livitt of @bishopfox), Safari IndexedDB leak (@FingerprintJS), RDP services vuln (@sztejnworcel), a very slick loader (@cerbersec), and more! https://t.co/lPSgWfzYud

[NCC Group Research & Technology @NCCGroupInfosec]

10 real-world stories of how we've compromised CI/CD pipelines 🔥

by @0xZon1, with contributions from @smarticu5, @wucpi, @divya_natesan, & @enjenneer

https://t.co/smD3JarmvM

[NCC Group Research & Technology @NCCGroupInfosec]

Today we’ve published our 2021 Annual Research Report written by SVP & Global Head of Research, Jennifer Fernick (@enjenneer), summarizing over 237 research publications & conference presentations delivered by NCC Group researchers in 2021 - https://t.co/qjIcjIsVfv

[Zonifer @0xZon1]

@ManasH4rsh Nim!

[NCC Group Research & Technology @NCCGroupInfosec]

🎃 In October, we'll be presenting at @toorcon, @ShellConLa, @InfoSec_World, #MapleSec, @NDC_Conferences, and more.

Details here:
https://t.co/4u0kMfvKS7

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Ok let me ask the dumb question everyone's wondering.

How SHOULD you open a potential malicious link safely?

Is a VM with cuckoo sandbox installed the best most convenient option?