Víctor

Technology enthusiast and history researcher | Networks - C - Python - Linux - Kernel - Driver - RTOS - Porting - Assembly - Compiler - AI | 🇪🇸🇺🇸🇦🇪

[TablePlus @TablePlus]

We are proud to introduce our new product, https://t.co/QIfcj7Ziks

It is a Virtual Machine specifically designed for Apple Silicon and AI Agents. This is our very first release, and it fully supports macOS, Windows, and Linux with GPU acceleration.

- Liquid Glass,
- GPU Accelerator.
- MCP for AI Agent on your Mac or inside the VM.

[Nayib Bukele News @NayibBukeleDice]

España tiene la oportunidad este 29 de Noviembre a limpiar su país y votar en contra de los comunistas rojos aliados a la dictadura de Venezuela.

Pedro Sanchez su tiempo en dos meses termina. España sera Libre.

Hermanos españoles sigan el ejemplo de Hispanoamericana #VotaBien

[Matt Buckley @MattBuckleyX]

🚨AMAZING: A reporter asked JD Vance about the widow of fallen airman Alex, she’s struggling to get benefits because the conflict hasn’t been “officially declared a war.” She’s got three young kids.

Vance didn’t spin it. Didn’t dodge it.

He asked for her private contact info and said the White House would reach out as soon as the briefing ended to make sure she gets everything she’s entitled to.

His message to her: we love you. We’re grateful for the sacrifice. We take very seriously our commitment to get you what you need.

That’s how you treat the family of a man who died serving this country. Fix it. Don’t bury it in paperwork.

[Elon Musk @elonmusk]

Grok @Bot can be your personal chief financial officer!

[Miguel Ángel Durán @midudev]

Todos los productos de Adobe reimplementados desde cero, gratuitos y de código abierto

→ https://t.co/p6yYSQtIm5

[Matt Brown @nmatt0]

I bought an industrial radio controller made in China that transmits on unauthorized frequencies in the US. As it turns out, there are many of these knock off units being sold on ebay, Alibaba, etc.

In order to safely test the units, I used an RF enclosure to be sure that these unauthorized signals were not transmitted outside of my lab environment.

Using a USRP Software Defined Radio (SDR) I was able to observe that these radios transmit reserved for cell service and commercial aviation air-ground systems.

Additionally, I was able to perform a simple replay attack on the controller signals to successfully actuate the receiver.

[Chubby♨️ @kimmonismus]

A developer says he used Opus 5.5 to recreate seven essential Adobe apps, including Photoshop, as free, open-source alternatives (no more subscriptions).

Built in Rust, free to use, with public source code.

These are early versions, PhotoCraft is not yet ready to replace Photoshop for daily professional work completely, bout about 90% they say.

What a fantastic time to be alive. I love it.

[OpenAI @OpenAI]

We're expanding our approach to content provenance to include text in response to EU regulatory requirements, while recognizing the significant limitations of current text watermarking technology.

Our tools already help verify whether an image or audio file was created with our models. This work builds on those efforts to help people better understand when content may have been generated or edited with an OpenAI model.

In the EU, we’ll start watermarking eligible text from ChatGPT and Codex over the coming weeks to comply with the EU AI Act.

Customers using our API can turn on text watermarking for select models worldwide today.

[America @america]

Elon Musk's full discussion with NVIDIA CEO Jensen Huang at the https://t.co/IzUYzFJ4OH launch event.

[cr3ghost @cr3ghost]

If you're learning malware analysis or reverse engineering, bookmark this.

RPISEC released the full materials from its Malware Analysis university course for FREE.

12 lectures + 10 hands-on labs + 4 projects covering:

• Static + dynamic malware analysis
• x86 + IDA
• Windows internals + WinAPI
• Malware behavior + persistence
• Anti-disassembly
• Anti-VM + anti-debugging + anti-AV
• Packing + unpacking
• Windows kernel + drivers
• Rootkit techniques
• Hooking + DKOM
• Anti-forensics + covert channels
• Runtime process manipulation
• APT sample analysis

It was designed for students starting with zero reverse engineering experience and built heavily around Practical Malware Analysis.

https://t.co/9RRL2LcI5q

Huge credit to RPISEC and original authors Branden Clark, Austin Ralls and Aaron Sedlacek for making the course materials publicly available.

#MalwareAnalysis #ReverseEngineering #WindowsInternals

[Justin Brave💡 @justinbrave21]

50 legendary internet rabbit holes you can spend hours exploring👇

1. https://t.co/BKQKtCpfmF — Watch the world via live satellite imagery
2. https://t.co/skHM6iilRk — See every plane currently in the sky
3. https://t.co/3wHLr5Crg0 — Track all ships at sea in real time
4. https://t.co/wneZoYlvLt — Live map of winds and storms
5. https://t.co/th5qTv52O1 — Watch lightning strikes hitting Earth in real time
6. https://t.co/ugJruuAACv — Live list of recent earthquakes
7. https://t.co/KjzFm8N2Vf — Ocean cables carrying the internet
8. https://t.co/ihBKAFPTgk — Watch forests disappear from space
9. https://t.co/QO76fqlnqY — The world's statistics, second by second
10. https://t.co/6aNOFkqc0c — Current number of tweets and searches being posted
11. https://t.co/Ng5YgeP1em — Compare the true sizes of countries
12. https://t.co/8nxdhZQV3I — Maps from centuries ago
13. https://t.co/KxBUC8vSl0 — Archive of 150,000 historical maps
14. https://t.co/jCKAhsZeWZ — World map drawn by volunteers
15. https://t.co/d5QWs5nRf2 — Look out the window of a random person around the world
16. https://t.co/RKjjmyrsVb — Virtual walks through cities
17. https://t.co/foY7sok6b8 — Teleport to a random spot on Earth
18. https://t.co/ZJ889ivqJL — Catalog of the world's strangest places
19. https://t.co/wVGZkiJzPW — Interactive knowledge experiences
20. https://t.co/j1VNMfZb26 — Scale journey from atom to universe (Updated HTML5 link)
21. https://t.co/CvOBtlatbG — Explore the solar system in 3D
22. https://t.co/RnlofaWZQo — Real sky map in your browser
23. https://t.co/1PlQgAjJCs — NASA's astronomy picture of the day
24. https://t.co/2RuTZvWLiB — NASA's entire visual archive, free
25. https://t.co/beEkHBhqUT — Visual articles told through data
26. https://t.co/RMccQyC8He — The state of the world with real data
27. https://t.co/gNH6mlA69d — What we mistakenly think we know about the world
28. https://t.co/ZrVElnZiNA — Visualizing complex data
29. https://t.co/ahtXNpoz2M — World Bank's open data
30. https://t.co/ShMYouwDwn — Turkey's official statistics database
31. https://t.co/GqEd2SxLvM — Archive of millions of books, films, and software
32. https://t.co/8ijFqv8DuN — 70,000 free books whose copyrights have expired
33. https://t.co/Gt6dp7heDe — Record of every book in the world
34. https://t.co/LogFrI5jlv — U.S. Library of Congress digital archive
35. https://t.co/O9XxbTPS1x — Europe's cultural heritage archive
36. https://t.co/lQg0HnIwh5 — America's digital library collection
37. https://t.co/TcOIZ5lCj1 — Tour museums from home
38. https://t.co/6wMBrfTIET — Download artworks in high resolution
39. https://t.co/trYjdzyr6U — Archive of 250,000 artworks
40. https://t.co/Jgz9AbgAKa — Forgotten visual treasures of history
41. https://t.co/y4axNFFkqQ — Free archive of culture and education
42. https://t.co/wkw7PgUdb9 — Met Museum's open collection
43. https://t.co/AZ98yxOTNa — Family tree of music genres
44. https://t.co/UWyCzSRkHo — Pick a country and decade to listen to that era
45. https://t.co/Q0NMpmavgo — Turn Wikipedia edits into audio
46. https://t.co/lT2YvOjIlU — Random knowledge well
47. https://t.co/tukI2JDkMX — Time, sunrises, and sky events
48. https://t.co/A8xsuxYYwL — Live stream of science news
49. https://t.co/RrqPEgxlzB — Free preprints of scientific papers
50. https://t.co/4ZyBN6HX2S — Visualize data with live code

Save this. You’ll definitely need some of these later. 🔖

Follow @justinbrave21 for more useful websites, AI tools & tech resources.

[Elorm Daniel @elormkdaniel]

You can remove a USB drive from your Windows PC, but Windows may still remember that it was ever there.

Every time a USB device is connected, Windows can create records in the Registry containing information about that device. Depending on the device and Windows version, this can include the manufacturer, product name, hardware identifiers, and serial number.

Some of the locations forensic investigators examine include:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR

Other Registry locations and Windows logs can provide additional information about the device, including connection activity, assigned drive letters, and volume information.

This becomes particularly interesting during a digital forensic investigation.

Imagine a USB flash drive is used to copy files from a computer and is later removed. The physical device may be gone, but traces of its connection can remain on the computer.

An investigator can potentially use those artifacts to establish that a particular USB device was connected to the system and correlate that information with other evidence such as file timestamps, Windows event logs, and user activity.

That doesn’t mean the Registry gives investigators a perfect timeline of every USB connection. Different Windows versions, configurations, device types, and cleanup activities can affect what remains and how reliable each artifact is.

But that’s the important lesson:

Deleting the device doesn’t necessarily delete the evidence that the device was there.

Windows can remember more about your USB history than you might expect.

[Prateek Jain @PrateekJainDev]

I used Nginx for years in my Docker setup; it worked fine, but every time I added a new service, I had to edit configs, reload Nginx, and deal with SSL manually. It was getting annoying.

Then I tried Traefik, and honestly, it just made life easier. I can define routes right inside my docker-compose.yml using labels, and Traefik automatically picks them up. No manual config, no restarts. SSL is handled automatically with Let’s Encrypt.

Plus, it has a nice dashboard and makes scaling super simple.

If you’re tired of editing Nginx files every time you add a service, give Traefik a try. It’s made my setup cleaner and almost maintenance-free.

[Dev.T @t1_dev]

@PrateekJainDev Wait until you learn about @coolifyio ! Youll go nuts with how easy it is to deploy things

[Mike P @mikepat711]

How is this real life? Seriously wtf man.

[Ivan Velichko @iximiuz]

Docker's default port-publishing behavior is handy but insecure: `docker run -p 5432:5432` opens port 5432 on all host interfaces, making it accessible to any machines on the host's network.

The fun thing is that a host-level firewall (e.g., ufw) that closes all ports might not always protect against this behavior because, on many Linux distros, Docker's port-publishing rules have higher priority.

So either change the default in daemon.json or use the full form of the -p|--publish flag to explicitly publish the port only to some host interfaces (e.g., localhost):

-p <host-ip>:<host-port>:<container-port>

Practice: https://t.co/mKc8LLHRbJ

[Two Seven One Three @TwoSevenOneT]

🥷 Now we can inject a payload into a remote process without using VirtualAllocEx and WriteProcessMemory.

No need to suspend the target process

New technique to evade EDRs:
Github: TwoSevenOneT/InjectSetConsole

#redteam #pentest #antimalware

[Emilia Cypher @Cypher_Ai1]

Amazon has 250 million Prime members worldwide. 168 million of them are in the United States. They pay $139/year or $14.99/month for a membership most of them use for one thing: free 2-day shipping.

That's it. Order something. Get it in 2 days. That's the entire Amazon Prime experience for 90% of members.

A consumer savings analyst who's tracked Amazon's pricing infrastructure for 6 years said: "Amazon has a hidden clearance outlet most shoppers have never seen. A warehouse full of open-box products at 30-50% off. A $5/month prescription service covering 50+ medications. A page with hundreds of digital coupons nobody clips. A URL trick that filters any search to show only items 50-70% off. And a program that pays you $10/month just for uploading grocery receipts. Most Prime members use Amazon the way most people use a smartphone 10% of its capability, 100% of its price."

She showed her friend 11 Amazon features. He'd been a Prime member for 7 years. He'd used 1 feature: free shipping.

Here are the 11 things most Amazon shoppers have never found 🧵

[Elorm Daniel @elormkdaniel]

Nmap is free.
Wireshark is free.
OpenVAS is free.
Kali Linux is free.
OSINT Framework is free.
Shodan (basic tier) is free.
TryHackMe & Hack The Box (basic tiers) are free.

You say you want to get into cybersecurity, but the truth is… you already have the tools at your fingertips. The same tools used by professionals in the field and they won’t cost you a cent to start learning.

You don’t need a fancy certification to begin.
You don’t need a $1,000 course to practice.
You don’t even need the “perfect” setup.

All you need is your laptop, an internet connection, and the decision to start today.

Every day you delay, someone else is learning, practicing, and moving closer to the career you say you want.

Stop waiting for the “right time.”
Stop blaming the lack of resources.
Stop making excuses.

Start now. Learn now. Improve now.

[𝐇𝐚𝐦𝐳𝐚 | Networking Guy @Hamzaonchain]

📂 ETHICAL HACKING ROADMAP
┃
┣ 📂 01 — Networking
┃ ┣ 📂 TCP/IP
┃ ┣ 📂 DNS
┃ ┣ 📂 HTTP/HTTPS
┃ ┣ 📂 Routing & Switching
┃ ┣ 📂 Firewalls
┃ ┗ 📂 VPNs
┃
┣ 📂 02 — Linux
┃ ┣ 📂 Command Line
┃ ┣ 📂 Filesystems
┃ ┣ 📂 Permissions
┃ ┣ 📂 Processes
┃ ┣ 📂 Bash
┃ ┗ 📂 Package Management
┃
┣ 📂 03 — Programming
┃ ┣ 📂 Python
┃ ┣ 📂 Bash
┃ ┣ 📂 JavaScript
┃ ┗ 📂 SQL
┃
┣ 📂 04 — Security Fundamentals
┃ ┣ 📂 CIA Triad
┃ ┣ 📂 Authentication
┃ ┣ 📂 Authorization
┃ ┣ 📂 Cryptography
┃ ┣ 📂 Vulnerabilities
┃ ┣ 📂 Exploitation
┃ ┗ 📂 Privilege Escalation
┃
┣ 📂 05 — Reconnaissance
┃ ┣ 📂 OSINT
┃ ┣ 📂 Information Gathering
┃ ┣ 📂 Subdomain Enumeration
┃ ┣ 📂 DNS Enumeration
┃ ┗ 📂 Network Discovery
┃
┣ 📂 06 — Scanning & Enumeration
┃ ┣ 📂 Nmap
┃ ┣ 📂 Gobuster
┃ ┣ 📂 Netcat
┃ ┣ 📂 Nikto
┃ ┗ 📂 Enumeration Techniques
┃
┣ 📂 07 — Web Security
┃ ┣ 📂 HTTP
┃ ┣ 📂 Cookies & Sessions
┃ ┣ 📂 Authentication
┃ ┣ 📂 OWASP Top 10
┃ ┣ 📂 Burp Suite
┃ ┗ 📂 Web Exploitation
┃
┣ 📂 08 — System & Network Security
┃ ┣ 📂 Network Attacks
┃ ┣ 📂 Windows Security
┃ ┣ 📂 Linux Security
┃ ┣ 📂 Active Directory
┃ ┣ 📂 Wireless Security
┃ ┗ 📂 Privilege Escalation
┃
┣ 📂 09 — Exploitation
┃ ┣ 📂 Metasploit
┃ ┣ 📂 Exploit-DB
┃ ┣ 📂 Shells
┃ ┣ 📂 Payloads
┃ ┗ 📂 Post-Exploitation
┃
┣ 📂 10 — Choose a Specialization
┃ ┣ 📂 Web Application Security
┃ ┣ 📂 Network Security
┃ ┣ 📂 Active Directory
┃ ┣ 📂 Cloud Security
┃ ┣ 📂 Wireless Security
┃ ┣ 📂 Reverse Engineering
┃ ┣ 📂 Red Teaming
┃ ┗ 📂 DevSecOps
┃
┣ 📂 11 — Practice
┃ ┣ 📂 TryHackMe
┃ ┣ 📂 Hack The Box
┃ ┣ 📂 PortSwigger Academy
┃ ┣ 📂 VulnHub
┃ ┗ 📂 CTFs
┃
┣ 📂 12 — Reporting
┃ ┣ 📂 Vulnerability Reports
┃ ┣ 📂 Evidence & Screenshots
┃ ┣ 📂 Risk Assessment
┃ ┣ 📂 Remediation
┃ ┗ 📂 Pentest Reports
┃
┗ 📂 13 — Career
┣ 📂 Bug Bounty
┣ 📂 Penetration Testing
┣ 📂 Red Teaming
┣ 📂 Security Engineering
┣ 📂 Security Operations
┗ 📂 Security Research