Fox

[Fox @DenFox93]

@crypto_birb .

[Pramod Goyal @goyal__pramod]

Gpt-2 is just 174 lines of code... How crazy is that

[Fox @DenFox93]

@zetachain @esatoshiclub Zetachain lets you call a Bitcoin wallet from an Ethereum smart contract no bridges or wrapped BTC needed!

[Fox @DenFox93]

@BGatesIsaPyscho Not true, this is is Maya Bay at koh Phi Phi. You cannot enter in the water because of the sharks

[Fox @DenFox93]

@dustfuncrypto @zetachain Some say it’s just a degen meme protocol, others believe it’s a portal to an alternate dimension where every dust wallet holds millions in lost Bitcoin. But the truth? The truth is hidden in the etherscan tx history of the Illuminati’s MetaMask.

[Kris @kris]

When Bitcoin hits $100,000 I will give 1 BTC to one person who follows me.

The rules are simple:
- like this tweet, follow me and RT
- comment “100k incoming”

Let’s go! $BTC #bitcoin

[Fox @DenFox93]

@kris 100k incoming

[Lupin @0xLupin]

Today I received a $12,000 bounty using the Sandwich Attack ! 🤑

The vulnerability allowed me to enumerate the API Keys of other users 🤯

How did I do that ? Well the API key was a UUIDv1. If you are not familiar with UUIDv1s you need to know that they are constructed in 6 sections:

High, Mid, Low, Clock Sequence, Node ID, and UUID version.

Interestingly, the Node ID corresponds to the MAC address of the system generating the identifier. This means that if two consequent UUIDs are generated on the same device, this part remains the same, similar to the Clock Sequence.

When High, Mid, and Low are combined, they reveal a timestamp represented in hexadecimal value.

Using some basic mathematics it's possible to subtract the offset between the Gregorian Calendar and the Julian Calendar and then divide by 1000 to get an Epoch TimeStamp.

Ok now that we know that they are generated by a timestamp + machine ID, it means that we could generate them back if we know when the API keys were created 🧐

Luckily enough the API Key that I was using was generated in a batch, meaning I could use the Sandwich Attack in order to brute force the API Keys of other users easily 🔥

If you want to know more about how I exploited the Sandwich Attack, go check my video about this on my YouTube channel 🤟

[LiveOverflow 🔴 @LiveOverflow]

Let's play a game. W̵h̵a̵t̵ ̵i̵s̵ ̵t̵h̵e̵ ̵v̵u̵l̵n̵e̵r̵a̵b̵i̵l̵i̵t̵y̵?̵
How would you respond to this report?

[Fox @DenFox93]

@vxunderground awesome. I take the chance 🤞🏻

[DC | David Lee @dccybersec]

Are you interested in freelancing in cybersecurity and automation services?

I'm on the lookout for people who are interested in freelancing in Cybersecurity &/OR Automation of business processes within the IT industry with training starting immediately.

If this sounds like you, please get in touch with me!

#cybersecurity #freelancing #freelancer #automation #ai #workfromanywhere

[Beosin Alert @BeosinAlert]

Analysis of the Stars Arena exploit:🔽

The contract is not open source, there seems to be a reentrancy vulnerability.

During the call of the 0xe9ccf3a3 function, the attacker reentered and called the 0x5632b2e4 function, setting a block height.

Then, in the sellShares function, this height was used as a parameter to calculate the amount of $AVAX to send, resulting in an abnormally large calculated amount. Ultimately, the attacker was able to obtain a large profit.

[Bankless @Bankless]

Vitalik dropped a big blog post about Ethereum's future

Here's everything you need to know (even if you're non-technical)

A THREAD 🧵

[Today In Infosec @todayininfosec]

1990: Clifford Stoll's book "The Cuckoo's Egg" was turned into an episode of NOVA entitled "The KGB, the Computer, and Me". Without spoiling it, it's a story of how he tracked down a hacker who broke into his employer's computer. Watch it for free: https://t.co/FZSRWwX6Lt

[Luke Stephens (hakluke) @hakluke]

$50k bug bounty on Shopify explained.

In this video, learn how Augusto Zanellato found a critical GitHub PAT linked to private Shopify repositories, earning a $50,000 bounty!

Watch now 👇
https://t.co/xRKEqSBdZW

[Mobile Hacker @androidmalware2]

Use silent #SMS messages to track LTE users’ locations

An attacker sends silent SMS messages with a defined pattern and analyze LTE traffic to verify the victim location.
All you need is just: SDR + SIM cards + LTESniffer software
https://t.co/fFfiBmmGgs

[The Moisrex @the_moisrex]

Oh wow, this joke is actually true! 🙃

[Sebastian Sigl @sesigl]

I interviewed over 70 full-stack engineers in the last years.

I created a Notion based "Learn Full-Stack Development Pack V3" that contains a learning path to become a full-stack dev based on free resources.

Retweet and reply with "free" and I'll DM it to you.

(need to follow)

[Timur Yunusov @a66ot]

For everyone who didn't get to my @nullcon @paymentvillage training, I suggest starting with this free content:
https://t.co/RR6JHoyuKG - Offensive Payment Security (2h workshop)
https://t.co/1f0VMY1moR - Payment Village DEF CON workshop (3h workshop about magstripe)

[Norbert Tihanyi, PhD @TihanyiNorbert]

NEW fully undetectable AMSI bypass script based on Matt Graeber @mattifestation 'amsiInitFailed' script.
After one year my "old" AMSI bypass script is now detected by 9 AV. So here is the new fully undetectable script:

@kmkz_security