James Wang

[James Wang @jameswang6969]

@Cobratate Try to shave your beard

[@bytes032.xyz @bytes032]

These heuristics should be part of the toolset of every auditor.

https://t.co/a6744h6JMr

[Owen | Guardian @0xOwenThurm]

As you progress in your journey as a smart contract auditor it's vital to have a deep understanding of DeFi primitives.

Perhaps the most important of these is the AMM (automated-market-maker).

Here's the ultimate guide to the AMM just for you 👇 🧵

[0xor0ne @0xor0ne]

Cool collection of Linux kernel exploits:

https://t.co/nF8oH11mZR

#Linux #kernel #cve #infosec #cybersecurity

[James Wang @jameswang6969]

Interesting ..

[Yanir Tsarimi @Yanir_]

Found a few SSRFs in a Node.js application.

Apparently the request package (18M+ Weekly Downloads) allows you to access Unix sockets without needing to change the protocol.

http://unix:/var/run/docker.sock

🤨

[James Wang @jameswang6969]

Malware devs too broke to purchase 3.8 and too lazy to turn virtualization on crucial functionality 😂😂

[Dan Kelly @int0x00]

If you pack your malware with VMProtect and we meet, I'm packing your mouth with fist. For the same length of time it takes to unpack. FYI that's 30 minutes. That is all.

[Ahmet Ahmedov @0xahmedov]

If understanding smart contracts starts with blockchain then understanding DeFi also starts with something - CeFi. An exellent course - https://t.co/I6HKRucLr4

[James Wang @jameswang6969]

Never thought of how chatgpt would come to use in the web3 hacking space

[Ben @mrbaessler]

For Web3 Auditors, I highly recommend using ChatGPT/GPT-4 to help you read audit reports.

I started using it recently and managed to find some great prompts that help me understand vulnerabilities 10x faster.

🧵 Here's my strategy: