For the negative 3 people who have been wondering, this account has NOTHING to do with the Soul Protocol crypto group, I think I just receive about 1/10th of the correspondence in my notifications because of my username. Ugh. Just want to clear up any confusion.
Fuzzing is still one of the highest ROI skills in vulnerability research.
You throw malformed inputs at software until something breaks.
But modern fuzzing is no longer “random garbage.”
Now it includes:
- coverage guided fuzzing
- grammar aware fuzzing
- hybrid symbolic execution
- AI assisted mutation
Start here:
https://t.co/bNsXvLWh2a
How to start RE/malware analysis? https://t.co/5t8wOmck0U via @hasherezade
Had I come across this article earlier as a beginner, I'm confident I could have avoided many unnecessary detours. This is the guide I wish I’d had from day one.
Finding Public Files That Probably Shouldn’t Be Public
Search Engines
Alternative Search Engines
File Metadata
Infrastructure Search Engines
Open Directories and File Servers
Cloud Storage Buckets
Paste Sites and Code Search
URL Shorteners
https://t.co/toiVaNuPIr
A DOM-Based #XSS Polyglot
1;/*'"><Img/Src/OnError=/**/confirm(1)//>
If your input happens to end up in the DOM via innerHTML or eval(), it works for both cases.
PoCs below.
innerHTML: https://t.co/7jYlxvrp1T
eval(): https://t.co/sUo3BimzBv
I haven't seen too much press regarding #Ubikron , but if you're looking for #tools to help you with your #OSINT investigations, check it out. I've been using it religiously since I found out about it a few months ago, and I honestly can't recommend it enough. Take a look!!
Awesome OSINT Chrome Extensions
A small list of Chrome/Brave extensions for various #OSINT related tasks:
Chrome extensions analysis
Content analysis
#socmint
Website analysis
#Geoint
Web archives
Screenshots
and more.
https://t.co/W973G8ITyc
Quick Linux tip:
If you have trouble reading the directories in the $PATH variable, use the tr command to translate colon (":") characters to newline characters ("n") so they can be displayed in lines:
$ echo $PATH | tr ":" "\n"
🚨🚨 Iran and Israel War Cybertracker #2 🚨🚨
17 June 2025 update for hacktivist activity related to the ongoing #iranisraelwar
- There are already over 100 hacktivist groups who are active from this geopolitical flashpoint.
- There are four pro-India hacktivist groups supporting Israel.
- There are five pro-Russian hacktivist groups supporting Iran.
- Several high-profile hacktivist groups with state links have been reactivated and commenced operations, including Handala Hack, Cyber Av3ngers and Predatory Sparrow.
- DDoS remains the main attack vector, however claimed hack and leak and targeting of operational technology is also present.
Overall I expect there will be more hacktivist groups join this campaign and that each of the three clusters will increase.
#Iran #Israel #IsraelIranConflict
#Ubikron is amazing! I've been using it for the last few weeks. It's a great +1 from #Vortimo, which was awesome in its own right. If you're into #OSINT at any level, give them a look-see!! I even use it for non-research related stuff.