xenobyte

penetration tester

[xenobyte @0xBEAF]

Why Is There So Much Crap Software In The World

https://t.co/sTutQQpO36

[xenobyte @0xBEAF]

@maltepoeggel_de I'm more like: why the hell would someone write this in PHP? 🤷‍♂️

[Yanis Varoufakis @yanisvaroufakis]

I don't suppose an apology is pending from those who, for years, referred to Julian as 'rapist' and denied that the whole affair was about shoving him in a supermax US black hole for the crime of having exposed crimes against humanity committed in our name
https://t.co/MoaOWrRlPr

[xenobyte @0xBEAF]

@wneessen Der Geheimtipp lautet rashguard 😉

[xenobyte @0xBEAF]

Robotiklabor #hardwarehacking

[pgt @pgt_r2ursystem]

Let me in Android! 😅

#Fuzzing #Authentication #Bypass #Android #Hacking #Security #Arduino

[Rev. Johnny Healey @rev_null]

In ruby, you don't ask where the bathroom is, you just redefine it to be wherever you are and then shit all over everything.

[Command Line Magic @climagic]

dig whydoesmyjunkhurt.private​.search @8.8.8.8 # Are you letting Google know your personal issues via DNS? Try to stop using public resolvers as a default. DNSoverHTTPS? DoH! That's no good either. Put DNS resolvers back on the LANs & let's #MakeDNSSexyAgain #DontGoogleMyOogle

[xenobyte @0xBEAF]

@wneessen Thank you 🙂

[xenobyte @0xBEAF]

@CompuSciDave #mimimi

[Chad Hart @chadwallacehart]

For the VoIP people, @HCornflower wrote a great analysis of the recent SRTCP exploit on @webrtcHacks: https://t.co/e0HSdlcshJ
It seems WhatsApp may have missed the memo on fuzzing 6 months ago (https://t.co/umiazhM76u)

[JP Aumasson @veorq]

as @teserakt_io CEO I just received an offer to be listed in the
"Top 10 Enterprise Security Startups in Europe 2019" by some online magazine if I paid 2500 EUR; good reminder that such lists should often be read as blacklists of companies

[xenobyte @0xBEAF]

https://t.co/08E9e6vgIX

[xenobyte @0xBEAF]

I just patched #CVE 2019-11324 for the tnt-fuzzer. You might want to pull master.

https://t.co/uaNyd4lAaM #fuzzer #pentesting

[Martin Schobert - @[email protected] @nitram2342]

. @Telekom_hilft Ach, ihr seid auch echt Spaßbremsen. Ich wollte das so ins Telefonbuch schreiben. Aber vielleicht pingt ihr mal euer Security-Team an.

[Torsten Franz @toddyfranz]

„Stoppt die Zensurmaschine – Rettet das Internet! #Uploadfilter #Artikel13 #SaveYourInternet” - Jetzt unterschreiben! https://t.co/u3xJen5HFh via @ChangeGER

[Peng! 👉🏻 [email protected] @Peng]

Interesting. Das Paket von #MaskID, in das wir angeblich 5 gefälschte Pässe gesteckt hatten, wurde von der Post geöffnet, die Sim-Karte aus der Selbstauslöser-Cam rausgeholt und die SD Karte gelöscht. Neue Briefgeheimnis Standards @DHLPaket?

[Andreas Kopietz @KopietzAndreas]

Das Bundesamt für Bevölkerungsschutz empfiehlt, beim Stromausfall in Köpenick den Fernseher einzuschalten.

[Michal Stanek @ 36c3 @3lbios]

So I wanted to encrypt some files. Thought about using 7z+password. Stackexchange folks said "Didn't review it but it should be fine. You can browse the code yourself". So I did. After a few mins I noticed they use 8byte "random" IV. Yes, half of IV is zeroes. But it gets worse.