BlueC0re

Security Engineer. This stream is a personal stream and the opinions expressed here are mine.

[Felix Wilhelm @_fel1x]

Gregor Samsa: Exploiting Java's XML Signature Verification https://t.co/DRo5LGB04O

[Vulncode-DB @vulncodedb]

Release v1.0 is live at https://t.co/7u7kLIm1DS! You can now register/login with your Google / GitHub account and propose changes to vulnerability metadata.
We'll work on enabling code annotations for proposals next. Happy about your feedback.

[Vulncode-DB @vulncodedb]

Vulncode-DB – A vulnerable code database
https://t.co/mBH18sirmL

This might become another useful tool in your security tool belt.
Looking forward to hear your feedback and your potential use-cases!

[BlueC0re @bluec0re]

Popular elint-scope (3.7.2) and elint-config-elint (5.0.2) npm packages published today contain malicious code: https://t.co/r0u6Ex8nEe maintainers who installed node packages today should revoke their npm access tokens #npm #nodejs

[BlueC0re @bluec0re]

nodejs and vscode fixed some critical vulnerabilities. Devs and electron based apps should update if they run stuff in debug mode: https://t.co/mIcmtKr8h6 https://t.co/M9JdFRXqDw

[Micah @WebBreacher]

Want to mess with your network monitoring team today? Change you MAC to be 00:20:91:... That is NSA's OUI. Thx

[Daniel Miller ✝ @bonsaiviking]

Hacking Team hacked: real hackers do use @nmap https://t.co/pHlNNnWKGI

[Mari0n @pinkflawd]

Ouuh dear.. All that software I will diff to death now.. relentlessly.. BinDiff available for free :) :)
https://t.co/x2BPxq0Xk8

[eevee 💨 @eevee]

favorite stack overflow question https://t.co/i4REbKOSvp

[BlueC0re @bluec0re]

Using printf as brainfuck-type interpreter #32c3 #printf-oriented-programming

[Burp Suite @Burp_Suite]

New blog post: XSS in Hidden Input Fields https://t.co/Eaouhl4aNn by @garethheyes

[Niklaus Schiess @_takeshix]

FireEye tried to silence researcher after responsible disclosure (German): http://t.co/Cq0v1PRV21 #playingwithfire

[BlueC0re @bluec0re]

@talynrae catched by a xss? ;-)

[BlueC0re @bluec0re]

Worst decision regarding permissions on android - http://t.co/rVVsFoLjXB

[Jethro Dull @DrWolfgangD]

This...

[BlackArch Linux @blackarchlinux]

New BlackArch Linux ISOs will follow soon including the 762 tools and many bugfixes. If you have wishes ping us via twitter or IRC. RT pls.

[Niklaus Schiess @_takeshix]

Take some time to submit your USB devices to http://t.co/Mr0ClyiJjh. Here's an additional tool to do it: https://t.co/g9tHt7Kr3x Contribute!

[Niklaus Schiess @_takeshix]

Just updated my/the official #heartbleed NSE script with support to dump leaked memory (to stdout or file): https://t.co/cYe288CjDm

[Mari0n @pinkflawd]

also in response to se trolls: DIFFRAY BUG BOUNTY - anyone who reports a bug gets invited for a beer at the next con. for real.

[Mari0n @pinkflawd]

in response to some arbitrary trolling our diffray tool now underlies the WTFPL http://t.co/Uzd8P1Pvxa enjoy.