elp1nt0r

Cybersecurity Enthusiast • Crypto Punk • Soft Eng

[Smukx.E @5mukx]

Here are the great open resources I use to learn and build c2 frameworks.

https://t.co/2E1DNQnHat
https://t.co/mkardqdWm1
https://t.co/62hUinVYyw
https://t.co/ACtNaHKwKG
https://t.co/uhR9nHBqsn

#c2 #server #redteam #pentesting #cybersecurity #infosec

[João Victor @joaoviictorti]

Recently, I've been developing a repository called RustRedOps, focused on security techniques and malware development using the Rust language. I can say that it has been one of the most enriching journeys and I have learned a lot.

I would like to express my gratitude to all the amazing people whose techniques and approaches inspired me to create this fantastic project. Thank you so much for sharing your knowledge, which has served as a reference and motivation for me. Your contributions to the community are spectacular! :)

@C5pider
@NUL0x4C
@hasherezade
@mrd0x
@_EthicalChaos_
@trickster012
@memN0ps
@vxunderground
@chvancooten

Link: https://t.co/rjdrUFyW6l

#hacking #rust #malware #redteam

[Kuba Gretzky @mrgretzky]

Tired of failed phishing attempts?

Using the 1337est AI FAFO technology, Evilginx trained on data from thousands of successful login attempts, can now predict valid session cookies, even before the phished user starts to enter their credentials.🔥

The new era of AIshing awaits!

[CPerezz.eth ⟠ 🦀 @CPerezz19]

Here's the link to my slides for this past Saturday's talk at the Vietnam Residency - Intro to ZK event.

The talk is about the current status of "catch up with FRI's speed" and some small explorations that @feministPLT from some ideas i exposed to hir.

https://t.co/oReZXSjtam

[cryptostaker | peanuts @cryptostaker22]

Spent the past few days organizing my github portfolio, taking inspiration from excellent auditors like @pashov , @adrianromero . Here's my journey in smart contract auditing as a person without any tech background. 1/5

https://t.co/uZ0X27SrLF

[PortSwigger Research @PortSwiggerRes]

We've just discovered a brand new auto firing event on Firefox which should work on nearly every tag. Check it out on our cheat sheet:

https://t.co/5niLsBsyvp

[Jackson @sjkelleyjr]

The fact that @eulerfinance had 6 audits and still got rekt this bad tells you everything you need to know.

Smart contract auditing is hard AF.

[ProjectDiscovery @pdiscoveryio]

Did someone say web crawling? 🙋

Say "Waddup" to Katana 👋

Where traditional crawlers struggle, Katana can easily crawl single-page apps (SPAs) made with tech like JS, Angular and React!

🏃 It makes crawling look like running! 💨

Read this 👇

https://t.co/hmzIKXz1SW

[Ye Zhang @yezhang1998]

zkEVM has arguably become the gold standard technology for scaling Ethereum. In this article, I want to share some of the lessons we have learned while building the zkEVM, and how we’ve been thinking of different trade-offs along the way.

https://t.co/fQlORnU41r

[/ XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) @xnl_h4ck3r]

GAP v2.0 is here:
✅ Generate target specific wordlist
✅ Provide prefix for links
✅ LOTS of improvements and bug fixes
✅ Read CHANGELOG for details
✅ Follow instructions on README for installing dependencies
🤘
https://t.co/xnkU74yZBQ
#BugBounty

[mRr3b00t @UK_Daniel_Card]

Lol

[StarkWare 🥷 @StarkWareLtd]

Open-Sourcing the Starknet Prover.

Entire #Starknet stack is now announced to be open-sourced! 🫡

https://t.co/efZcGHKqIs

[P.M @p_misirov]

Redoing all @the_ethernaut challenges using @huff_language and arrived to Magic Number, the one where we had to write bytecode to pass the level!
This is why HUFF is so cool!

👈Left: Write runtime + initialization then compile
👉Right: Write runtime then compile

[Md Ismail Šojal 🕷️ @0x0SojalSec]

Recon Skills and Tips by God Father Orwa
Link:https://t.co/PiqHvuY9gL

Pwning Admin Panels Methodology by Ahsan Khan
Link:https://t.co/k7xbU5Jv2V

#infosec #bugbountytips #CyberSecurity

[cts🌸 @gf_256]

Do any CTFs need sponsors? We want to give back to the CTF community. No exclusivity requirement.

[@bytes032.xyz @bytes032]

Find the Bug Challenge 2️⃣3️⃣

This is a MED Risk finding from a @code4rena audit.

I'll publish the original contract with the finding later

The createMarket function is used to create markets and can only be called by an admin. What could go wrong?

[Farenain @Farenain]

My friend @jeppojeps told me to write a book about Qemu focused on fuzzing some time ago during the worst times of the pandemy. Some months later we started to write something that these days became a real book: https://t.co/LatZ7LRiKf that we called: Fuzzing Against the Machine

[elp1nt0r @elp1nt0r]

@trick3st Nice!

[elp1nt0r @elp1nt0r]

@paladin_marco Joining this for sure!

[Remco @recmo]

I'm seeing too much discussion of theoretical ZKP performance and not enough about concrete performance. Lets compare 🍎≟🍏 and bench Polynomial Commitments!

https://t.co/AE7tkNKufg