Musashi42

Mostly zen practitioner, sometimes writer, interested in website security, bug hunting, etymology, and in million other stuff. Infinitely baffled by humans :)

[Musashi42 @Musashi_42]

so, I had a crazy thought which sadly didn't remain just a thought: what if I try to combine kali linux w/ what looked like a promising tutorial for smartcontract auditing (focus on ubuntu), tldr: I learned new levels of frustration and now I'm relaxing before trying w/ ubuntu 😁

[Musashi42 @Musashi_42]

@TMobileHelp hi, I'm having trouble with my phone plan, it's been more than 12hrs since I paid for it but still slow net and can't make phone calls, hopefully you can solve this soon, thanks

[Musashi42 @Musashi_42]

well, I don't know how I allowed for this, but my go to approach to ffuf has been (or rather was at this point) to use it w/ default user-agent, and had it not been for the actuator endpoint being mentioned inside target's robots.txt ffuf/I would have missed it #bugbountytip

[Musashi42 @Musashi_42]

@TMobileHelp hi, I'm having problem switching my plan and I don't have internet access through data net even though I paid for it.

[Musashi42 @Musashi_42]

@TMobileHelp need help with my high speed data Internet, I spent first 500MB of fast net a few weeks ago or so, and yesterday upgraded to 2GB plan but net speed is slow yet data usage has counted the slow data transfer as part of the fast net. Please help.

[Musashi42 @Musashi_42]

fun fact, even using burp ce gets me blocked from some of bbps, I mean, seriously bug bounty can be fun, but there should be additional rules for each company wanting to launch their bbp, maybe don't block researchers from using their tools? just a thought #bugbounty

[Musashi42 @Musashi_42]

am I crazy that I find it odd how some bb programs still don't get that some of us like using burp pro to capture traffic for analysis (w/o ton of extensions) so why the fuck are you blocking it and running bb program? at least provide bypass header ffs #bugbounty

[Jane Lytvynenko @JaneLytv]

⚡️Important resource ⚡️

Ukrainians put together a list of resources on how foreigners can help. There are all reputable organizations doing good work. Spread far and wide:

https://t.co/NeGElG48jZ

[Musashi42 @Musashi_42]

the most genius thing that I have been seeing on various bbps, trying burpcollaborator for ssrf getting 403, like, what's the big idea here? "let's have a bug bounty program, BUT block strings containing burp in any context, also throw in ffuf, and xss." I mean why even have bbp?

[Musashi42 @Musashi_42]

@PortSwigger @kopolindo All good on my end now, cheers

[Musashi42 @Musashi_42]

hmm, am I the only one who is having trouble with burpcollaborator? suddenly it's not resolving and I was wondering why a simple request wasn't resulting in a pingback @PortSwigger

[Musashi42 @Musashi_42]

well, I was this old when I learned that logger in burp pro doesn't capture EVERYTHING, instead use logger++, go figure #alwayssomethingnewtolearn

[Musashi42 @Musashi_42]

fun fact, I was able to get nitrosense open in foreground, in focus, I mean pointless for killing the problematic process, maybe @microsoft and @nvidia / @acer can get together and implement taskmanager w/ nitrosense or use whatever magical code of nitrosense w/ taskmanager

[Musashi42 @Musashi_42]

I'm open for other solutions, but if you have a program, a game to be more specific in a fullscreen mode and whatever you do you can't get anything to be in foreground focus then what's the point of taskmanager, and alt+F4 is the biggest joke ever, need some stronger kill command

[Musashi42 @Musashi_42]

I hope one day @Microsoft @windows will figure out how to implement the ancient tech from ubuntu called switching terminals so that when (not if, but when, let's be honest) something stops responding I don't have to reboot entire os for one fucked up process #mswinalwaysfails

[Musashi42 @Musashi_42]

hey @PandaExpress I think something's wrong on your https://t.co/O04mdzLHUY website, or am I only able to order drinks?:

[LiveOverflow 🔴 hextree.io @LiveOverflow]

what a fun attack idea

[Youssef Sammouda (sam0) @samm0uda]

phwd_ is back! To those who don't know him, he's the godfather of Facebook BBP. He already posted some new write-ups of SSRFs he found in FB that got him $60000. Follow him to get upcoming write-ups and make sure to check his previous ones in https://t.co/y0zz0geFw3

[Remedy Entertainment 🔻CONTROL Resonant out now! @remedygames]

Happy 20th birthday, Max Payne, from @SamLakeRMD (Max Payne), James McCaffrey (Max Payne), and a familiar leather jacket. 🧥🎂

Happy anniversary to everyone at Remedy, @RockstarGames, @3DRealms, and to all of you who love the game. Let's celebrate using the hashtag #MaxPayne20!

[Musashi42 @Musashi_42]

for all those into ai taking over, how lucky(?) have they been not encountering a single computer bug, or do they have some magical tech?