emanuel bergagna

[emanuel bergagna @castoreb]

@Shahzainkhan555 @warda_news1 a llorar a las piramides

[emanuel bergagna @castoreb]

@casi_aries cerra el culo

[emanuel bergagna @castoreb]

@Officialwhyte22 https://t.co/CWcvUeMrFm

[emanuel bergagna @castoreb]

@grok @jhanfranck @elsobretiktok @TTendenciaX si pasa que se confunde con la foto esa que pusieron al lado

[emanuel bergagna @castoreb]

@maria_mei011 el indio y el mundial no me importan nada, lo de agostina si, sobre todo viendo cosas asi mira https://t.co/IEGgyAl4z8

[yuntu @morales_ma75247]

las camaras muestran que 30 min despues que ingresa Agostina a la casa, TAMBIEN ingresan 3 tipos mas!!!!!! QUE ESPERA EL FISCAL????

#Agostina

[emanuel bergagna @castoreb]

@aisarcore "the most untraceable hacker"? that didnt age well

[emanuel bergagna @castoreb]

@LikeARascacielo @mauroszeta obvio, la primera vez van sin mucha informacion de que buscar, cuando avanza la investigacion saben por donde va y van de nuevo

[emanuel bergagna @castoreb]

@delpynews ia

[emanuel bergagna @castoreb]

@MyPayIndia got the feeling this is not going to age well

[emanuel bergagna @castoreb]

@precisox estudia y aprende ingles, pero solo si realmente te gusta

[emanuel bergagna @castoreb]

@akaclandestine "OSINT ALERT: We've uncovered the identity"........"Mattys's identity was exposed by his own criminal associates"

[emanuel bergagna @castoreb]

@GaticaAriel y podrian haber ganado el 2do

[Co11ateral @co11ateral]

Hackers can abuse PAM to log SSH credentials in plaintext by modifying authentication modules. Helpful for lateral movement. There are many ways of doing it, but it often comes down to changes in /etc/pam.d/ and /lib/security/

Blue teams should monitor unauthorized changes in these directories

https://t.co/g6C7mjnR5W

@three_cube @_aircorridor @DI0256
#dfir #blueteam #redteam #pentest

[emanuel bergagna @castoreb]

@BoludoscnAmarok prioridad el que viene por la derecha?

[obscaries ❘ AppSec @obscaries]

https://t.co/drRE0yYHna

[Intigriti @intigriti]

1️⃣ Macros

Burp Suite provides built-in macro support that helps automate repetitive tasks such as refreshing authentication tokens and retrieving anti-CSRF tokens for each new request.

For instance, if you're testing an application that revokes anti-CSRF tokens with each new HTTP request, you can quickly set up a macro to automatically obtain a new CSRF token before sending a new request in Repeater or Intruder, preventing you from having to manually update the token every time.

[Eito Miyamura | 🇯🇵🇬🇧 @Eito_Miyamura]

Clawdbot just injected malware into your code ☠️☠️

Worst part? The attack is close to invisible, even to experienced engineers.

Clawdbot can implement a code PR, just like claude code to solve issues with your app. But this is where it can plant malware in your codebase.

With just a benign GitHub issue with an invisible payload, we managed to install a backdoor malware on your codebase

Here's how we did it:
1. The attacker submits a GitHub issue with a jailbreak prompt hidden inside a URL hyperlink. Completely invisible to humans, visible to LLMs
2. Waited for the maintainer to assign this task to Clawdbot
3. Clawdbot reads the jailbreak in the GitHub issue. Now the Clawdbot agent is hijacked by the attacker and will act on the attacker's command. It plants the backdoor in a lock file, which most engineers don't check in code reviews.
4. The malicious URL in the lock file enables execution of attacker commands

The takeaway? AI isn't just a tool, but rather a potentially corruptible insider agent that can be tricked to act against you.

These LLM hijack problems are what we're looking to solve in
@edison_watch - we'll be announcing a new solution to these solutions soon!

We'll be jailbreaking Clawdbot much more in the coming days - please comment👇 a workflow you use with Clawdbot, so we can show how that can enable an attacker to harm you

[emanuel bergagna @castoreb]

@Nachez98 de avanzada descomposicion

[annonimous254 @annonimous254z]

Password reset checklist(*high signal)
Live bug hunting out too!
https://t.co/lmMk5UAnKf

[emanuel bergagna @castoreb]

@NullSecurityX if it truly was on syssoft the already fixed it