What can you do with a stolen browser cookie?
Everything:
Log in to Gmail, Office365, Slack, etc.
Skip MFA
Stay invisible (no failed logins)
Maintain access long after user changes password
Cookies are credentials.
Treat them like gold.
When I was 17 years old (2016) I built a mobile app called Wordle… it was downloaded about 100k times before I gave up on the project
It sat in my apple developer account, until in 2021 another developer named Josh build a web app game, also called Wordle
Josh’s game went viral globally. A lot of people searching for his game went to the appstore and downloaded mine instead
A lot of other app developers tried to copy the game but Apple removed them all… except mine because it was the OG built before any other Wordle existed
Apple wiped out all the competition. I was the only “Wordle” on the appstore
My little mobile app ended up being downloaded over 10M times in the span of a few weeks
It changed my life forever.
Wireshark Filters and their meaning
ip.addr == 10.0.0.0/24
Show all traffic to and from any address in 10.0.0.0/24
ip.addr == 10.0.0.1
Show all traffic with 10.0.0.1 as either source or destination.
!(ip.addr == 10.0.0.1)
Exclude all traffic to or from 10.0.0.1
icmp.type == 3
Show ICMP "destination unreachable" packets.
tcp or udp
Show TCP or UDP traffic.
tcp.port == 80
Show TCP traffic with port 80.
tcp.srcport < 1000
Show TCP traffic with source port range.
http or dns
Show all HTTP or DNS traffic.
tcp.flags.syn == 1
Show TCP packets with SYN flag set.
tcp.flags == 0x012
Show TCP packets with both SYN and ACK flags set.
tcp.analysis.retransmission
Show all retransmitted TCP packets.
http.request.method == "GET"
Show TCP packets associated with HTTP GET.
http.response.code == 404
Show packets associated with HTTP 404 response.
https://t.co/Jow6rrUERD == "https://t.co/2XDeB9WypG"
Show HTTP traffic matching the Host header field
tls.handshake
Show only TLS handshake packets.
tls.handshake.type == 1
Show client Hello packet during TLS handshake.
https://t.co/fNxe05fuxa == https://t.co/lHn160kuOZ
Show DNS responses with name field of "https://t.co/lHn160kuOZ"
frame contains keyword
Show all packets that contain the word "keyword"
frame.len > 1000
Show all packets with total length larger than 1000 bytes.
dhcp and ip.addr == 10.0.0.0/24
Show DHCP traffic for 10.0.0.0/24 subnet.
dhcp.hw.mac_addr == 00:11:22:33:44:55
Show DHCP packets for client MAC address.
ip.src == 10.0.0.1 && ip.dst == 10.0.0.2
Show all traffic from 10.0.0.1 to 10.0.0.2.
The Debian Publicity Team will no longer post on X/Twitter. We took this decision since we feel X doesn't reflect Debian shared values as stated in our social contract, code of conduct and diversity statement. X evolved into a place where people we care about don't feel safe.
Normal English vs Cybersecurity Speak!
Next time you use #cybersecurity jargon (when not speaking to industry colleagues ONLY) and assume everyone will understand what you're saying...think again.
I think we underestimate how hard it is to meet ppl that you could see yourself being in a relationship with .. especially as adults.. that’s not easy to find at all
Quit acting all surprised when people compliment you, look up to you, love your work, or see you in a good way. YES, you are desirable. YES, you are good. YES, your work speaks for itself. YES, people see your potential & your power. Now it's time for you to believe it!!! ✨