b0rn

Hacker wannabe. | views are my own

[b0rn @codecrackin]

@SymoneBeez maybe if they were worthless. That’s not the case here, they’ve got the OSEP, OSED, and OSWE - that combination alone is a gold for most appsec roles and red team roles. Most cleared IC roles would pay near 300-400k for malware researchers, red team operators and roles alike.

[b0rn @codecrackin]

@kobi_hk how would you trigger a bypass if the status will always return 429’s? I get there’s not rate-limiting, but is the bypass an actual bypass or just that there’s no rate-limiting imposed?

[The Dividend Dream on YouTube @DreamDividend]

What’s your financial fantasy?

[b0rn @codecrackin]

@muddletoes @IceSolst that’s a pretty flawed statement. You can be generating mrr from users of your product that highlights value and some growth so that investors feel more confident about investing in your startup

[b0rn @codecrackin]

@professor_xa1 you leaked the target at the top right of your burp window 🙃

[b0rn @codecrackin]

@tyler_agg How would you best incorporate this from input coming from for instance a Twilio response webhook? Then sending output back through Twilio or SMS in general?

[b0rn @codecrackin]

@paoloanzn SYSTEM

[b0rn @codecrackin]

@cris_vels LEADS

[b0rn @codecrackin]

@Xbow Which model(s) does XBOW use? And what do the actual workflows look like. Super curious.

[b0rn @codecrackin]

@I_Am_Jakoby Curious on ways to create detections around this. Maybe decoding the ASCII and looking for specific cmdlets? Or querying for specific instances of anomalous chars in the PS command history? Trying to find a catch all detection.

[b0rn @codecrackin]

@StockOptions888 Let’s go

[b0rn @codecrackin]

@paoloanzn Clip

[SwiftOnSecurity @SwiftOnSecurity]

Imma be straight up all this stuff is entirely overwhelming

[b0rn @codecrackin]

@pmsandstad Any detections or IoC's yet?

[b0rn @codecrackin]

@parmardarshil07 @ghumare64 Just casually leaking twitter api keys in the background ;-)

[b0rn @codecrackin]

@FantasyGenius4U Nice play. - tailed this.

[🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi]

That epic Microsoft moment❤️#cve20200601 #curveball

Recently worked on #mimikatz and ECC, so yes, 10 and 2016/2019 only.
Previous versions like Windows 7 did not support personnal EC curves (only few NIST standard ones)

[Somdev Sangwan @s0md3v]

I made Silver public, mass vulnerability scanner 🔥

Github: https://t.co/jGZSPSFqnT

- Scans are resumable by default
- Get notified on Slack if a vulnerability is found
- Designed for large volume scans
- Caches vuln. data to improve performance over time
- Shodan integration