Jim K

InfoSec / Fitness

[Jim K @0zzY_21]

@miladydegens 0x45c2202968b0aD02C856494984db5dd7cBc96d8F

[degen calls @miladydegens]

I wasn’t gonna do it, but fcck it!!

Everyone who fwm knows i never fail to impress

Just stealth launched my own memecoin $TRADOOR

10,000,000 $TRADOOR will be equally distributed among first 999 to retweet and drop
$ETH wallets!

Ca 0xb47efcc461d3cd6b270daf15388a77a3fae64ad1

[It's FOSS @Itsfoss]

Linux is 35 years old now.

How long have you been using Linux?

[John Hammond @_JohnHammond]

CrowdStrike Falcon agents are imploding right now and causing a Blue Screen of Death boot loop on every endpoint. Reports of massive outages globally.
https://t.co/cS9Zt4SagH

[Jim K @0zzY_21]

I'd love to see @kerlink_news work with @hotspotty on making remote diagnostics available for my @helium hotspot! https://t.co/uJeYnxPHkn

[Jim K @0zzY_21]

@itsfoss2 ArchBang!

[Jim K @0zzY_21]

OSINT via Netlas to Locate Vulnerable Systems Online.

https://t.co/VlYzkFW43g

[Techno Tim @TechnoTimLive]

I don’t need USB flash drives anymore!

[Jim K @0zzY_21]

@VoskCoin Pisces HNT/IOT miner

[Jim K @0zzY_21]

@itsfoss2 Debian Gnome & ArchBang!

[Jim K @0zzY_21]

CVSS 4.0 vulnerability severity rating standard is now available.
https://t.co/d3uunsw4nw

[Jim K @0zzY_21]

@EuropaLeague 💛🖤🦅

[Jim K @0zzY_21]

Privilege Escalation in Confluence Data Center and Server - CVE-2023-22515 | Confluence Server and Data Center https://t.co/rbBLIBoWU9

[Jim K @0zzY_21]

@Haydaddict @EuropaLeague Περαστικά! 🦅🟡⚫️

[Jim K @0zzY_21]

🦅🟡⚫️

[UEFA Europa League @EuropaLeague]

AEK Athens hold on 😤

#UEL

[Jim K @0zzY_21]

@itsfoss2 I was ~16, fedora, openSUSE, bodhi, jolicloud, backtrack, crunchbang, archbang, arch etc.

[Jim K @0zzY_21]

@yioults1 IQ below zero (as usual)..

[Justin Gardner @Rhynorater]

Routes to RCE Braindump:
* SSRF -> AWS Metadata
* Command injection
* Code Injection
* Arbitrary file write
* RFI
* LFI + dirty file write
* Configuration file injection (See @ctbbpodcast ep 27)
* Deserialization bugs
* SSTI
* Binary Exploitation bugs (Stack/Heap Overflow, etc)
* SQLi -> Command Injection
* Authorization bug -> Application logic code execution (ie Wordpress Plugin editing)
* SSI
* Dependency confusion
* STO -> Code download in CI pipeline
* Leaked PEM/auth keys

Any more? Remember, looking for unique techniques that result in RCE, not CVEs or bugs that utilize any of the above.

[Jim K @0zzY_21]

@MadmusclesPlans Is this a joke?
Great list for the least effective movements

[The Bug Bounty Hunter @tbbhunter]

Exploiting MikroTik RouterOS Hardware with CVE-2023-30799

https://t.co/6uqq7cxhhX