TheManWithTheShoe

RREYMG38
Innovation

[TheManWithTheShoe @TheManWithShoe]

@TheCloudSE Operational Technology mainly for industrial controls. I think it has one of the most overlooked protocol, weak as anything

[TheManWithTheShoe @TheManWithShoe]

@NetworkQueenX Kindly checkout my firm
https://t.co/uMGn7i51Zl

[TheManWithTheShoe @TheManWithShoe]

@Chisomxoxo_ why the insults from people?
it's her home and that's what she wants for her fam!!!

[TheManWithTheShoe @TheManWithShoe]

@cybergirl_io Spear phishing

[TheManWithTheShoe @TheManWithShoe]

@thatwei12216101 @Zaynab_busayo 😂😂😂😂

[TheManWithTheShoe @TheManWithShoe]

@Big_Cat_Man @jayhemz the figures might be exaggerated, but people dey born wella

[TheManWithTheShoe @TheManWithShoe]

@Big_Cat_Man @jayhemz i doubt if you've visited a govt maternity clinic. People dey born!!!

[light @reprompting]

Today's reading is Agner Fog's manual on optimizing software in C++

https://t.co/i8fWvjnqYM

[TheManWithTheShoe @TheManWithShoe]

@Chimnecherhem Nope

[TheManWithTheShoe @TheManWithShoe]

@Maamita_ What did the person do?

[Hacking Articles @hackinarticles]

SSH Penetration Testing (Port 22)

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

SSH (Secure Shell) is a cryptographic protocol used for secure remote login and command execution over unsecured networks. During penetration testing, misconfigurations or weak credentials in SSH services can allow attackers to gain unauthorized access. ()

📚 Techniques Covered in This Guide

🔎 Enumeration with Nmap
🔐 Password Cracking using Hydra
⚡ Authentication using Metasploit
💻 Running Commands on Remote Machine
🔁 SSH Port Redirection
🧪 Nmap SSH Brute Force Script
🔍 Enumerating SSH Authentication Methods
🔑 Key-Based Authentication
🛠 Key-Based Authentication using Metasploit
📦 Post Exploitation using Metasploit
🌐 Local Port Forwarding (Password Based)
🔐 Local Port Forwarding (Key Based)

📖 Article:
https://t.co/QcYf2wWuu3

#CyberSecurity #EthicalHacking #Pentesting #SSH #RedTeam #InfoSec

[trish @TrisH0x2A]

someone asked Beej how sockets work in C. he got tired of explaining it. so in 1995 he put it all online.

it's been the definitive socket programming guide for 30 years.

it covers everything: TCP, UDP, IPv4, IPv6, non-blocking I/O, select(), poll().

graduate OS courses worldwide assign it. it's funnier than any technical book has a right to be.

it's free and always will be.

[Nav Toor @heynavtoor]

Burp Suite Professional costs 475 dollars a year per seat.

A senior software engineer in Amsterdam built the open source replacement as a side project. He put it on GitHub for free. It has 10,569 stars.

His name is David Stotijn. The software is Hetty.

Here is what Hetty is.

An HTTP toolkit for security research. A machine-in-the-middle proxy that sits between your browser and the target. Every request and every response flows through Hetty. You can read them, search them, intercept them, edit them, replay them, and send them again.

This is the core loop of every web application security test ever performed. Burp Suite charges 475 dollars a year for it. Hetty does the same job for zero.

Here is the feature set.

A machine-in-the-middle HTTP proxy with full logs and advanced search. An HTTP client for manually creating and editing requests, and replaying any request you already proxied. Request and response interception for manual review, with full edit, send, receive, and cancel control. Scope support to keep your work organized to a single target. A web-based admin interface that runs in your browser. Project-based database storage so multiple engagements stay separate. A GraphQL service for programmatic access.

The installer is a single Go binary. Works on macOS, Linux, and Windows. No Java runtime, no enterprise license server, no machine fingerprinting, no telemetry.

Here is the price ladder.

Burp Suite Professional: 475 dollars a year per seat.
Burp Suite Enterprise: thousands per year, contact sales for a quote.
Burp Suite Community Edition: free, but throttled, no scanner, no project save, no intruder rate.
OWASP ZAP: free and open source, now owned by Checkmarx after a 2024 acquisition.
Hetty: zero. Forever. One binary. No account.

A pentester working full time pays Burp 475 dollars a year. A team of 10 pentesters pays 4,750 dollars a year. A bug bounty hunter who finds one vulnerability has already paid for Burp twice over.

Or they download a 30 MB Go binary written by a freelancer in Amsterdam and keep every dollar they earn.

David has not pushed a new commit in 16 months. The last commit was January 13, 2025. That is normal for a tool that is feature-complete. HTTP has not changed. The proxy still proxies. The intercept still intercepts. MIT licensed code does not expire when the maintainer takes a break.

Buy a domain. Find a bug. Cash a bounty.

PortSwigger took a free industry tool and put it behind a 475 dollar paywall. A freelancer in Amsterdam gave it back. On every platform. For zero dollars.

Your proxy. Your binary. Your bounties.

(Link in the comments)

[Ivan Velichko @iximiuz]

Linux 101: Drives, Partitions, and Mounts

Practice partitioning drives, formatting them with different filesystems, and working with mounts in a series of hands-on challenges:

- Mount a drive with existing data and read its contents https://t.co/6ksdTdYYNN

- Create a GUID Partition Table (GPT) on a blank drive https://t.co/BKfeojxyw5

- Split a drive into multiple partitions and format them as ext4 and btrfs https://t.co/zefqTwif33

- Mount an existing directory at a new location (bind mount) https://t.co/QNl2X27Fpk

- Make a filesystem mount survive a reboot https://t.co/hu0VywNu0q

[trish @TrisH0x2A]

a professor at Illinois got frustrated with existing systems programming textbooks

so he started a wikibook project and had students help write it

it covers C, processes, threads, synchronization, memory allocation, networking, filesystems, scheduling and security