Maksym Zaitsev

trainer, hacker, OSCP, researcher, engineer, cypherpunk : #crypto #stegano #stealth #opsec #comsec #datasec #infosec #osint #pentest #redteam #unix #hardware

[Maksym Zaitsev @cryptolok]

1000+ FOLLOWERS👍
Here are top 10 facts about my past, but to make it more interesting, one of them is fake
Thanks everyone for your support🙂

[Maksym Zaitsev @cryptolok]

Just compiled and published the Android APK mobile app for https://t.co/LrpeKHBAav project of underwater diving communication with sound:
https://t.co/TmuiWppdy9

[Maksym Zaitsev @cryptolok]

pretty nice to see that you can force 5g+ StandAlone with Free-FR even though they don't officially support it on older Pixel mobiles, which are fully capable

[Maksym Zaitsev @cryptolok]

"on nous a dit de payer 100k de rançon, on a préféré de dépenser 200k pour reconstruire, fuiter les données et continuer de payer 60k chaque année"
https://t.co/cQo7yypruB

[Maksym Zaitsev @cryptolok]

don't forget, that TPM, just like every other component, can be sniffed, to get encryption keys for instance, so don't trust it too much, like bitlocker do

[Maksym Zaitsev @cryptolok]

some french users from breachedb leak have their passwords in clear in other leaks, which are pretty much same, how ironic

[Maksym Zaitsev @cryptolok]

this is why it's never a good idea to use clear text credentials directly in command argument, since it's visible to any user in the system (on process level)
piping would still work, but could be seen in command history
stay safe #linux

[Maksym Zaitsev @cryptolok]

2025 IoT security in all its grace...

[Maksym Zaitsev @cryptolok]

did you know that you can use affordable bresser goto telescope with stellarium as a satellite dish pointer, even if the manufacturer telling that "it's impossible and you have to pay more"?

[Maksym Zaitsev @cryptolok]

yes, most of Indian people passwords for government sites look like that

[Maksym Zaitsev @cryptolok]

playing with a quantum photon generator is a lot of fun, each data transfer is signed and firmware is encryped, temper-evident, thanks to @CryptaLabs

[Maksym Zaitsev @cryptolok]

https://t.co/CQ6ZrhpZum

[Maksym Zaitsev @cryptolok]

did you know that it's still possible to execute DMA attacks directly with Thunderbolt ?

[Maksym Zaitsev @cryptolok]

dead internet => bs cyber + bs ai @viehgroup

[Maksym Zaitsev @cryptolok]

when your SQL injection filtering is not french-friendly

[Maksym Zaitsev @cryptolok]

2014 - "we're leaving Russia, there is no freedom"
2024 - "got arrested in Europe, also to avoid PlayStore wall, can grab the app from our website, has a copy on RuStore"
it's ridiculous, how leaving one country to avoid censorship, will bring you back to avoid it in another...

[Maksym Zaitsev @cryptolok]

2024 #malware mass dropping guide:
1 - make a fake ai site
2 - promote it on social media
3 - force user to download a big zip insted of image/video
4 - put "video.mp4 .exe" inside
5 - create a fake error box message
6 - profit

[Maksym Zaitsev @cryptolok]

made a small custom dll to prevent windows .NET4 generating random numbers, will always output zero
https://t.co/H6pj76Gglx

[Maksym Zaitsev @cryptolok]

well, I guess we will never be sure about random numbers...

[Maksym Zaitsev @cryptolok]

worlds first honest add about RFID blocking

[Maksym Zaitsev @cryptolok]

just in case you want a free, stealthy, universal and secure vpn hiding alternative to @ProtonVPN stealth technique, know that it existed for years https://t.co/ZCRia3314I