karakoa

Hacker | Developer | I break into things so you can live in a safer world.

[karakoa @0xkarakoa]

Want some bug bounty tips from a former bug bounty triager?

Check this out: https://t.co/OLMeeg8imE

Please support my work too: https://t.co/uVvQdhTrbx

#bugbounty

[karakoa @0xkarakoa]

Check out my bug bounty tips from my website.

https://t.co/YFL6F5hHYK

Please support my work: https://t.co/uVvQdhTrbx

[karakoa @0xkarakoa]

Check out my bug bounty tips from my website. And please support my work: https://t.co/uVvQdhTrbx

https://t.co/tytXXvSMLp

[Archaeo - Histories @archeohistories]

The karakoa was a formidable warship, renowned for its speed and ferocity, that dominated the seas of the Philippines and Southeast Asia during the pre-colonial era.

This large, outrigger-equipped vessel, also known as caracoa, kora-kora, or kurkoa, could reach lengths of up to 25 meters and was specifically designed for pangangayaw (sea raiding). Its unique features included a raised platform for warriors (burulan) and a synchronized rowing system (daramba) on the outrigger, propelling it with incredible speed. The karakoa's design, with its sharply curved prow and stern, S-shaped outrigger spars, and raised decks, distinguished it from other types of balangay (traditional Filipino boats).

Before embarking on a raid, Visayans performed a ritualistic ceremony called pagdaga, where the prow and keel of the karakoa were smeared with the blood of a captured enemy. Raids were typically conducted in fleets (abay), often preceded by a fast scout ship (dulawan or lampitaw). Ship-to-ship battles (bangga) were common, and warriors on board the karakoa employed a variety of weapons, including swords (like the kalis), metal-tipped spears (bangkaw), and throwing javelins (sugob) made from sharpened bamboo filled with sand. For defense, warriors utilized removable bamboo or nipa panels and personal shields (kalasag). In addition to these traditional weapons, karakoas were often armed with cannons (lantaka) and sometimes larger guns.

Raiding was a highly respected activity in Visayan society, and the exploits of warriors were often permanently recorded in their tattoos, earning them the name pintados ("the painted ones"). The karakoa, with its impressive design, formidable weaponry, and skilled crews, played a pivotal role in the maritime history of the Philippines, shaping the culture and identity of the Visayan people.

#archaeohistories

[Traceix @usetraceix]

Today we are releasing our FREE: "Introduction to x86 Assembly" educational course!

This FREE course covers registers, the stack, writing code, and compiling that code!

With a detailed breakdown on registers, sections, and the stack this FREE course is perfect!

Links👇

[7h3h4ckv157 @7h3h4ckv157]

Wiki to collect Red Team infrastructure hardening resources

Bookmark & Share!

Credit: https://t.co/Af8fIGh9j5

[Traceix @usetraceix]

x86re is probably the coolest website online.

Not only does it look awesome, it has AMAZING educational content such as basics of reverse engineering and in-depth information on PE files.

Link below!

[Het Mehta @hetmehtaa]

Reversing a VPN client to hijack sessions https://t.co/T2BZqppnFF

[Het Mehta @hetmehtaa]

Hikvision vulnerability scanner and exploiter:
https://t.co/K7JItJd6aZ

[Brandon Rossi @0xConda]

GOAD is the coolest way I've seen to setup an Active Directory pentesting lab. Interested in checking it out?

Here's a video I made going over the install process:

https://t.co/TYCTtmPFnE

[0xrudra @0xrudrapratap]

Launching https://t.co/l7T9I4auKG, A smart bug report aggregator that will help you learn web3 security faster than ever.
Auditoor has the following features:

1. Audit report breakdown: It facilitates the breakdown of complex-looking bug reports into layman's terms.
2. Interact with project code/docs: You can interact with the project code to ask any question you have, from "How is the governance power calculated in the project" to "What does the XYZ() function do".

Our tool allows you to chat with three main sources: bug reports, project codebases, and documentation related to the bug, ensuring that the bot's responses are relevant to your query.

With our tool, you can now spend less time learning new complex codebases and just start learning.

Some use-cases:

1. Learning about the calculations performed within the project code and their explanations.

2. Understanding a complex function or feature and how it fits into the protocol.

3. A breakdown of the features provided by the protocol

#bugbountytips #bugbounty

[Harshleen @0xharshleen]

🔍 SEARCH ENGINES FOR PENTESTERS

https://t.co/zRjdOtfnRJ —> (🌐 Server, 🛡️ Vulnerabilities)
https://t.co/akW57edjFa —> (🔍 Dorks)
https://t.co/gBufxLvGpt —> (📶 Wifi Networks)
https://t.co/rXaXQ3RXNW —> (💻 Code Search)
https://t.co/yRS3j76PqL —> (⚠️ Threat Intelligence)
https://t.co/vhZH6x2acM —> (🌐 Server)
https://t.co/Fj7QD4vvx5 —> (⚠️ Threat Intelligence)
https://t.co/gtVIbKwjtk —> (🌐 Server)
https://t.co/BKfuEJnjbo —> (📧 Email Addresses)
https://t.co/qpHqNoLc5b —> (⚠️ Threat Intelligence)
https://t.co/us62tXyqyy —> (⚠️ Threat Intelligence)
https://t.co/ydDyoSrThn —> (⚠️ Threat Intelligence)
https://t.co/wwYgqjv7Yr —> (🔍 OSINT)
https://t.co/NMS5OCURdH —> (🔓 Attack Surface)
https://t.co/2ojeSC4pA5 —> (💻 Code Search)
https://t.co/7SNWs5aC61 —> (⚠️ Threat Intelligence)
https://t.co/sCgOrjrMtQ —> (💻 Code Search)
https://t.co/UyxsvKY5Ll —> (🔓 Attack Surface)
https://t.co/6rjIlGZWqw —> (⚠️ Threat Intelligence)
https://t.co/Czc0XCbRCV —> (🔓 Attack Surface)
https://t.co/v01Olm2Wzd —> (🌐 Server)
https://t.co/6uOuXH1xcb —> (🔐 Certificate Search)
https://t.co/WzK4vS6vpi —> (🛡️ Vulnerabilities)
https://t.co/hht8RhoMkZ —> (⚠️ Threat Intelligence)
https://t.co/XDTweoBvB1 —> (🦠 Malware Analysis)
https://t.co/pgcWxeCT9L —> (👥 Threat Intelligence)
https://t.co/RIvhxIJdnt —> (🛡️ Vulnerability Database)
https://t.co/AJyeSejOKk —> (🔍 Data Breaches)
https://t.co/yHfbG4FYcx —> (🔎 Website Ownership)
https://t.co/BvLJwCKB5K —> (🌐 DNS Reconnaissance)
https://t.co/h8NSab3hRd —> (📜 Historical Website Data)
https://t.co/q0NJ9FZOs3 —> (🔐 Real-time Certificates)
https://t.co/sWlQnUZQax —> (🌐 Passive DNS Data)
https://t.co/gBufxLvGpt —> (📶 Wi-Fi Network Mapping)
https://t.co/oIid6fkcud —> (🦠 Malware Repository)
https://t.co/34THJpfj2m —> (⚠️ Threat Intelligence)
https://t.co/Czc0XCbRCV —> (🌐 Attack Surface)
https://t.co/yZ1XFBJ4id —> (🛡️ Vulnerability Database)
https://t.co/SzXYnWrZUt —> (🌍 BGP Information)
https://t.co/jI13HBH1vt —> (🕵️ Dark Web Search)

[Nicolas Krassas @Dinosn]

https://t.co/7O7EX9pr6t: exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement https://t.co/YtlI33rAG7

[Nicolas Krassas @Dinosn]

BYOVDLL: New Exploit Bypasses Microsoft’s LSASS Defenses https://t.co/fyeCioUrgq

[Luke Stephens (hakluke) @hakluke]

One of the most basic ways to look for SQL injection vulns using Github Code Search 👇

[Nicolas Krassas @Dinosn]

CVE-2024-38063 (CVSS 9.8): 0-Click RCE Affects All Windows Systems https://t.co/8xBL9qMiFM

[7h3h4ckv157 @7h3h4ckv157]

Conference presentation slides:

Credit Link: https://t.co/TxX2iPGycD

- Black Hat USA 2024 slides (3-8 August,2024)
- REcon 2024 Slides (28-30 Jun,2024)
- Offensivecon 2024 (May 10-11,2024 Berlin)
- Blackhat Asia 2024 (April 16-19, 2024 Marina Bay Sands / Singapore)
- Blackhat Asia 2023
- Offensivecon 2023
- Blackhat USA 2023
- Recon 2023
- Blackhat Europe 2023

[K̵i̵r̵k̵ ̵T̵r̵y̵c̵h̵e̵l̵ @Teach2Breach]

Thanks to everyone who came to my talks at defcon on the Tempest c2. Below are some links to the slides, 1st blog post, and repo. More on the way:

slides: https://t.co/9gbnsAGodH
Tempest c2 intro blog: https://t.co/p3e99Qy2Ab
repo: https://t.co/475LfdVy85