ɐſuıNɹəqʎƆ

☯ CyberSecurity ramblings and personal opinions

[Tavis Ormandy @taviso]

Funny bug, you can use xscreensaver to run tcpdump without root on debian. I don't really know what the solution is, it's not an easy one to solve.

https://t.co/KcbwYRcJKm

[Somdev Sangwan @s0md3v]

Learn Regex in 4 tweets :)

cat matches cat
ca+t matches caaaaaaaaaaaat but not ct
ca*t matches caaaaaaaaaaaat and also ct
ca{2,4} matches caat, caaat and caaaat
c(at)+ matches catatatatatat
c(at|orn) matches cat and corn
c[ea] matches cat and cet
c[ea]+ matches caaaat and ceeet

[Rasmus Petersen @_rasmusp]

Had so much fun playing the Defcon 27 OpenCTF, which we won for the second year in a row! #defcon #defcon27

[wallofsheep @wallofsheep]

Thank you J. Zhanna Malekos Smith for hosting the PHV Talk: The Cyberlous Mrs. Maisel: A Comedic (and slightly terrifying) Introduction to Information Warfare
#defcon #defcon27 #wallofsheep

[Paul Wagenseil @snd_wagenseil]

Zhanna Malekos Smith presenting fundamentals of Russian disinformation as The Marvelous Mrs. Maisel at #DEFCON27 #phv -- I've never seen such sustained applause at DEF CON. This woman is going to be a star.

[ɐſuıNɹəqʎƆ @CyberNinjaDK]

@komali_2 No. You have just switched the app to the wrong conference. Press the More option in the menu

[ɐſuıNɹəqʎƆ @CyberNinjaDK]

@Birajhmbspeaks @dc801 Don’t think they give you room numbers at the Restaurant

[sandh0t @sandh0t]

My dream come true 😁 Finding an #XSS on #Google main domain
#BugBounty @GoogleVRPA

[April King 🌀 @CubicleApril]

I'm excited to share a project that I've been working on: a brand-new version of @Mozilla's SSL Configuration Generator:

https://t.co/KHAIHVQZPj

Configuring TLS is perhaps the most complicated and error-prone of all IT tasks, and this tries to make it as easy as possible.

[S1dTR0tt3r147 @S1dTR0tt3r147]

This is what working from home does to you.

[Mickey @HackingThings]

Hold my beer, i need to unlock my phone...

[PentesterLab @PentesterLab]

Want to bypass WAF when exploiting CVE-2019-5418 ? curl -H 'Accept: ../../../../../../e*c/p*s*d{{' http://server/...

[PasswordResearch.com @PwdRsch]

Researchers asked 43 freelance developers to code the user registration for a web app and assessed how they implemented password storage. 26 devs initially chose to leave passwords as plaintext. [PDF] https://t.co/IEN1M5m8BH

[Troy Hunt @troyhunt]

If you're a @haveibeenpwned subscriber, it's very likely you're going to get a breach notification about this one. 763M unique email addresses (including mine) were in this incident from yet another company siphoning up and misusing our data: https://t.co/MVEYIl3HQQ

[The Hacker News @TheHackersNews]

⚠️ Important — Update your #Google Chrome immediately to patch a new high-severity 0-day RCE #vulnerability (CVE-2019-5786) that hackers are actively exploiting in the wild

https://t.co/vrorvFYuU8

Patched Chrome version 72.0.3626.121 has been released for Windows, macOS, Linux

[ɐſuıNɹəqʎƆ @CyberNinjaDK]

@DavidNMandel Hjemløs betyder jo kun at man ikke har en fast bopæl - måske er han nødt til at køre fra p-plads til p-plads...Den stakkel...dine 70 kr. gør at han lige kan have fast bopæl i en time

[ɐſuıNɹəqʎƆ @CyberNinjaDK]

@0xtosh I wonder what the information you removed was, as login and password is still visible?

[♥️¯\_(ツ)_/¯♥️ D, the nicest asshole ever... @drsinger1111]

The best captcha...
@nixcraft

[ɐſuıNɹəqʎƆ @CyberNinjaDK]

Neat trick - learned something new there... Thanks

[Omar Espino • @omespino]

#Protip can you pop a calc with "C:\>powershell C:\*\*2\n??e*d.*?" ? yes.
bypass blacklisted words filter (or firewalls) via wildcards

C:\>powershell C:\??*?\*3?\c?lc.?x? calc
C:\>powershell C:\*\*2\n??e*d.* notepad
C:\>powershell C:\*\*2\t?s*r.* taskmgr

#BugBounty #infosec

[Emad Shanab - أبو عبد الله @Alra3ees]

fuxploider - File upload vulnerability scanner and exploitation tool.

https://t.co/TkfhbN2W3q