Scuttlefish Team

Provider of CTF resources

[Scuttlefish Team @ScuttlefishTeam]

Protip: GDB 10.0 supports common #CTF challenges. Just use the command `target ctf <challemhe directory>` and then `i reg eflags` and GDB will display the entire set of flags

[Scuttlefish Team @ScuttlefishTeam]

According to @CTFtime, there were over 160 online CTFs in 2020. How many #CTF flags did you get? Report your progress in 2021 using #FlagCount and try to beat your personal best.

[Scuttlefish Team @ScuttlefishTeam]

I love it when the client argues for a no-limits pentest
https://t.co/yMGbh4QSLP

[LiveOverflow 🔴 @LiveOverflow]

I got an N/A on Amazon's Bug Bounty 😡
Sharing my report now publicly!

[Scuttlefish Team @ScuttlefishTeam]

Capture your work better with ASHIRT by @TheParanoids

Great for CTF and Pentest documentation. Check out their Shellcon talk https://t.co/dKqN2vvWtW

[Scuttlefish Team @ScuttlefishTeam]

@psifertex Get Apple One for the family, and use PiHole to block youtube ads. Then, donate the money would have paid Youtube to @The_Pi_Hole so it wont feel like a waste :)

[Scuttlefish Team @ScuttlefishTeam]

@LiveOverflow I prefer them with the presenter in the upper left corner and the slides taking up a golden ratio of the screen, because I watch too many videos by @irongeek_adc and have grown to expect this format

[Scuttlefish Team @ScuttlefishTeam]

@Ledtech3 @mubix Easy, QR code. The harder challenge is including an animated gif.

[Scuttlefish Team @ScuttlefishTeam]

@mubix @Krelkci @mobatek I began using it just to avoid backdoored instances of putty

[Scuttlefish Team @ScuttlefishTeam]

@mubix @hak5darren @securityweekly @haxorthematrix @Declan727 @tkrabec @bpadres @ovie @TheChrisAM @AnthonyGartner #TimeCapsule

[Eduardo Vela @sirdarckcat]

If you submitted a write-up in @CTFtime for a #GoogleCTF challenge, send us a link to [email protected] - we have 40 prizes for the best write-ups, but have only received 30 so far. https://t.co/MCX2aAN0ih

[Marko Ruotsalainen ([email protected]) @markruots]

This presentation of report writing mistakes is gold.

As a long-time report writer these are familiar and I found a few more things to pay attention to.

@lennyzeltser has created a 2-day course on the topic, might be worth checking out! (SANS SEC402)

https://t.co/ELrUrrfeuh

[BSides Columbus @BSidesColumbus]

Happy Friday! Did you miss a presentation or wanted to dissect a certain talk? All #BSidesCMH20 presentations have been uploaded to our new Youtube Channel! https://t.co/1aVuM4rlmM

[Jorge Orchilles @jorgeorchilles]

The Purple Team Exercise Framework #PTEF and @defcon workshop are both free and posted for you to use and make your #redteam #blueteam #purpleteam more efficient. Check it out: https://t.co/qwLPLeKZ7g

[Scuttlefish Team @ScuttlefishTeam]

@da_667 @ForgottenSec And simple to detect and get around.

[👑 OFJAAAH 👑 @ofjaaah]

New:
curl -s "https://t.co/vL0glDMaLZ" | jq -r '.[].name_value' | assetfinder -subs-only | sed 's#$#/.git/HEAD#g' | httpx -silent -content-length -status-code 301,302 -timeout 3 -retries 0 -ports 80,8080,443 -threads 500 -title | anew

@b51b5b43 @Jhaddix @stokfredrik @TomNomNom

[Scuttlefish Team @ScuttlefishTeam]

@mubix How authors get money in theory https://t.co/9ikhzkJmbL

Reasons not to use medium https://t.co/ICKNxjZDjN and https://t.co/eN4kHADg2z

[O_o hi? it pronto. @_pronto_]

IoT pizza cutter?

[Samuel @saamux]

A good way to bypass the Akamai WAF by exploiting a redirect-based XSS is with the following payload:

javascript:new%20Function`al\ert\`1\``;

You can also obfuscate it using HTML entities

#BugBounty