Yuri

As your shadow follows your body. You become what you think. Be wise. Focus

AFK.conf (

[@gustavorobertux @gustavorobertux]

🐛 Bug Bounty Tip #6/30

JavaScript files are goldmines.

Before manually clicking around the app, extract and analyze all JS files:

katana -u https://target[.]com -jc | grep -E "api|key|token|secret|admin"

Leaked API keys, hidden endpoints, internal paths — all sitting in plain text in minified JS.

Most hunters miss this. 💎

#BugBounty #JavaScript #Recon

[Orange Tsai 🍊 @orange_8361]

Just dropped a new blog post! 🔥

https://t.co/OeVWg1Abw5

[Allele Security Intelligence @alleleintel]

Entender exploração de vulnerabilidades em binários está cada vez mais importante. Particularidades dos casos do PHP e do Node.js demonstraram que a experiência do profissional utilizando LLMs continua sendo um fator importante. Confira no artigo os detalhes e como a experiência do pesquisador fez a diferença.

php2shell e node2shell: por que entender exploração de binários importa mais na era das LLMs
https://t.co/HYqan0eG7T

[Elastic Security Labs @elasticseclabs]

Microsoft wants EDR out of the Windows kernel. We checked the binaries

They even come with public symbols. Full write-up from @zodiacon : https://t.co/9w3mFPIufM

Microsoft's answer is the Windows Endpoint Security Platform (WESP). It's undocumented, but it already ships in Windows Insider builds.

What we found:
• wesp.sys: a Microsoft-built file system mini-filter at altitude 329500
• EspFilterPort: the filter communication port it uses to reach user mode
• espclient.dll: 120 Esp* exports for rules, filters and event queues

[Offensive AI Con @OffensiveAIcon]

Your EDR Has Boundary Issues.

@harmj0y and @tifkin_ of @SpecterOps explore how adversarial machine learning can evade EDR detection- and how LLMs are accelerating the reverse engineering behind it.

Watch their Offensive AI Con talk below. 👇
https://t.co/cwnirhS595

#OAIC #OffensiveAI #Cybersecurity #EDR

[Allele Security Intelligence @alleleintel]

Have you ever wanted to get started with Linux kernel exploitation? We wrote a 4-part blog series aimed at newcomers, going from setting up the environment to bypassing SMEP and KASLR. We exploit a real Linux kernel vulnerability step by step, debugging every crash along the way.

Introduction to Linux Kernel Exploitation: Vulnerability and Environment – Part 1
https://t.co/tephfqrvqD

Introduction to Linux Kernel Exploitation: Triggering the Vulnerability – Part 2
https://t.co/QEWCat60VA

Introduction to Linux Kernel Exploitation: Exploitation – Part 3
https://t.co/qqL6IPAUk3

Introduction to Linux Kernel Exploitation: Mitigation Bypass (KASLR and SMEP) – Part 4
https://t.co/O3bgNpU5wI

[Renato Alencar @cajuinaoverflow]

tô buscando novas oportunidades e colaborações.

tenho 11+ anos com software e experiência em OCaml, Python, TypeScript/JS, PostgreSQL, compiladores, sistemas distribuídos e blockchain.

gosto de resolver problemas difíceis e construir sistemas robustos.

[Yuri @g0ttfrid]

@lucas_ 🥲

[hasherezade @hasherezade]

Washing the dishes doesn't exercise your brain or deepen your understanding of the problem. Solving technical problem by yourself does. Once you stop practicing, you loose the ability to think certain way, and you won't be good to even supervise the machine or question it. I am all for using LLMs, but let's be honest, promoting is too easy to even be called a skill. If this is our core education, humanity will degrade.

[bohops @bohops]

4 unmitigated/unpatched "App Control for Business" (WDAC) bypasses in the list.

Are we even trying anymore?

https://t.co/2AhEtQ2IHy

[Hack The Planet 💾 @HackedPlanet]

This is https://t.co/JKVQVSWCH9

[Yuri @g0ttfrid]

@glhrm_ac https://t.co/iaz48N6Wfs

[JS0N Haddix @Jhaddix]

Today we are releasing a 1 page version of “Hacking Your Career”

https://t.co/Ca8AUDayJ9

We get a bunch of students and early career-seekers looking for resources and advice of getting their 1st gig.

This resource gives all those and more; free trainings, free certificates for your résumé, advice on résumé design, information on career verticals, small sections on interviewing and the hiring process, and more! 🫶🫶

[@gustavorobertux @gustavorobertux]

Everything on here is starting to look the same.

Same AI-generated thumbnails. Same generic posts. Same recycled ideas.

Use AI as a tool, not as your entire creative process.

[@gustavorobertux @gustavorobertux]

Defcon 34 Badge & Doom #redwolves #defcon34 #doom

[Anderson Nascimento @andersonc0d3]

Happy Birthday Nmap!🥳

[Adam Chester 🏴‍☠️ @_xpn_]

When anyone tells you "don't bother learning programming" or "don't bother, LLMs do all of that now", they are attempting to remove their competition, betting on a future where you give up and they dominate. I promise you, knowledge trumps dependency 100% of the time!

[tmp.0ut @tmpout]

We are pleased to release tmp.0ut 5 Volume!

Get your viruses, rootkits, strange ELFs, weird machines, tiny files, cool art, and phresh beats here!!

https://t.co/tZLM50HOc0

[TrustedSec @TrustedSec]

AI doesn't let attackers walk through walls, but it does make finding the cracks more efficient. In our new blog, @HackingLZ cuts through the hype and explains what #AI-driven offense really looks like and why hard technical controls still work. Read now! https://t.co/ZVdeCKBwSZ

[nyxgeek @nyxgeek]

Hacking rewards obsessive personalities. I'd really say, it's baked into the culture.

The classic trope of hackers staying up late, relentlessly pursuing their target. Goal oriented. Driven.

David Lightman in War Games, hunting down Protovision because he NEEDS TO SEE THOSE FUCKING GAMES.

Learning the ins and outs of systems, exploring them. Wanting to know how every piece works, so you can master it. That's obsession. That's hacking.

Careful tho. Here be dragons. The 'ability' to obsess helps drive research, but it has a cost. And there are NO refunds on your time.

Be mindful of your time and the balances in your life. It's easy to lose track. Time is fleeting, and your life can change in an instant. Make memories today. Do real things with people you love, in-person.

Thanks to @_xpn_ for sharing and for being so open. 🫶

[vx-underground @vxunderground]

I sat down and did some schizo ranting for my attempt at a book I might name "Malware 4 Noobs" (no idea yet).

Here is my introduction segment, part zero (no reforms or changes made yet).

If you're noob, please read and give feedback.

https://t.co/h3p0gVpeRR