Fr3sh

Incident Response Analyst | Vulnerability Researcher | X Development

[Fr3sh @fr3shnuts]

@ThePrimeagen How can non-technical teams pushing vibe code to prod rigorously review the code? His reply to this concern was amazing

[Fr3sh @fr3shnuts]

@siunam321 I use llm for write ups, sometimes im on a challenge for 6 weeks and got nowhere and llm solves it and I have it break it down what I missed. These are for ctf Challenges that no one does a write up afterwards. You learned nothing means you knew how to beat the challenge already?

[Fr3sh @fr3shnuts]

@vxunderground Im the Kali baremetal plays steam on it kinda guy 😌

[Fr3sh @fr3shnuts]

@sec_hub93028

[Fr3sh @fr3shnuts]

@YourAnonNews The only time i agreed with "if you dont like this country, just leave" is when confedate states seceded and took their own advice. Then we demolished those traitors and took our shit back.

[Sam Curry @samwcyo]

New blog post with @infosec_au:

We found a vulnerability in Subaru where an attacker, with just a license plate, could retrieve the full location history, unlock, and start vehicles remotely.

The issue was reported and patched.

Full post here: https://t.co/QPzRIqqx9t

[Fr3sh @fr3shnuts]

@vxunderground @1336_0ff_by_0ne Buffer Overflow!

[Lukas Henkel @QVHenkel]

I'm designing a modular and easily repairable open-source Linux smartwatch. This system is based on the open-source SiP I've designed and will be able to run custom firmware in a Linux and Android environment

[Coffin @lostsec_]

you can try this Cloudflare rocketloader nuclei template for SSRF and Finding Origin ip behind WAF helpful in WAF Bypass..
https://t.co/IiXhjwxKTn

[mgeeky | Mariusz Banach @mariuszbit]

🔥 Super excited to soon present my lifetime project publicly🤩

- 4yrs of R&D + 1y in commercial sale
- Weaponization of 95+ file types
- 140kLOC
- 20+ tools
- 10+ shellcode exec techniques (ts)
- 8 MSI ts
- 20+ LNK ts
- 30+ script/macro ts

⚡ Battle tested, low-profile arsenal

[Fr3sh @fr3shnuts]

@vxunderground This'll be a cool fuzzing project

[The Hacker News @TheHackersNews]

In case you haven't tried it yet...

Linux/FreeBSD users can use this open-source vulnerability scanner to identify vulnerable software installed on a system.

https://t.co/sEcMV27lkx

It uses multiple vulnerability databases, including NVD, JVN, OVAL, RHSA/ALAS/ELSA/FreeBSD-SA.

[Fr3sh @fr3shnuts]

@_stigward Thanks for the insight on your journey, I related to it. 👍

[exploits.club @exploitsclub]

📣 Introducing... https://t.co/RlbxAiJvIL 🧵👇

[Mohit Mishra @chessMan786]

Linux Performance Observability Tools Cheatsheet

[Fr3sh @fr3shnuts]

@vxunderground That cracked me up

[Fr3sh @fr3shnuts]

@IceSolst @vxunderground Lol

[Tib3rius @0xTib3rius]

Friendly reminder I have created what I (non-humbly) consider the greatest SQL injection cheatsheet of all time:

https://t.co/KDpvOnoM2L

Unlike others, it contains payloads for 5 main database variants, and doesn't use weird quote chars (IYKYK 👀).

[Fr3sh @fr3shnuts]

@cyb3rshi3ld Hi

[Fr3sh @fr3shnuts]

@KevinForsstrom I know youre amazing Kevin. I'll be looking for people to reach out with any opportunities to hit you up. Let me know if you need anything 👍