HackerByHobby

AI Enthusiast 24x7, hacker by hobby

[Poonam Soni @CodeByPoonam]

Anthropic has released Free AI courses on:

- Prompt Engineering
- Building agents
- Best practices for Agentic Coding
- Collaborate with AI systems

.... and so much more!

9 best guides you don’t want to miss:

[Horizon3 Attack Team @Horizon3Attack]

And finally, a technical analysis on how @JamesHorseman2 and @hacks_zach reversed the patch and developed the POC for CVE-2022-1388:

https://t.co/REdv9gPxqY

#f5 #CyberSecurity

[James Kettle @albinowax]

If you miss the speed/simplicity of the Spider from Burp Suite 1.7, this mode offers something similar

[James Kettle @albinowax]

The recordings from #BHEU have just landed on youtube! If you're going to watch just one, I'd recommend "Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond" by @_danielthatcher/@intruder_io
https://t.co/mw5NPi83WE

[kalendsi @kalendsi]

CVE -2022-21882,Easy to Exploited

[Suraj @PwnFunction]

Beginner hacking tutorials be like: 😶

[Tabitha Sable @TabbySable]

DevOps is just explicitly emphasizing what was always true:

System administration is better when you do it with friends.

[Burp Suite @Burp_Suite]

Burp Suite now runs natively on Apple M1 machines. And yes, it's FAST.

[Devansh (⚡, 🥷) @0xAsm0d3us]

Template Injection in Action: 2-hour workshop on Template Injection (SSTI)

https://t.co/OQbbujaAkx

#ssti #hacking #cybersecurity #bughunting

[Youstin @iustinBB]

Cache Poisoning at Scale:
Identifying and Exploiting over 70 Cache Poisoning Vulnerabilities

https://t.co/cjkx8zsqb2

[Florian Roth ⚡️ @cyb3rops]

Find evidence of log4j usage on Linux servers with these 3 commands

ps aux | egrep '[l]og4j'
find / -iname "log4j*"
lsof | grep log4j

Find places to which your applications write logs

lsof | grep '\.log'

#log4shell #log4j

[James Kettle @albinowax]

I've added Log4Shell detection to ActiveScan++. Grab v1.0.23 from here: https://t.co/wbAglT5Uez

[Branden @BJHoopaz]

@CiscoDaveIT @MsftSecIntel You’ll never get paid more for what you do if you never do more than what you get paid for. Truth.

[James Kettle @albinowax]

I don't normally aim to drop 0-day, but pre-recording makes it tricky. If you've got an Apache front-end that supports HTTP/2 and enforces any important security rules, please watch this talk.
https://t.co/L7B15eThH7

[Rémi Escourrou @remiescourrou]

▶️ Time to harden your AD CS HTTP interface to fully block this path, a pretty good recommendation in @SpecterOps paper (take a look at page 113) https://t.co/ZL05lemNOO

[Rémi Escourrou @remiescourrou]

Finally finished testing it, it's quite brutal! Network access to full AD takeover... I really underestimated the impact of NTLM relay on PKI #ESC8 😱The combo with PetitPotam is awesome !
Everything is already published to quickly exploit it ...

[HackerByHobby @hackerbyhobby]

@infination @DanielMiessler What’s LMGTFY? (trolling 😉)

[Kolleen @littlewhitty]

In Texas, Lake Highlands High School valedictorian, Paxton Smith, switched out her approved speech to talk about abortion rights.