liam

Learn more, do more.

[liam @liamsomerville]

@_netdoggy @garethheyes got one, thanks!

[Joseph Thacker @rez0__]

This video changed how I used vim forever. And I’m super thankful for it. @TomNomNom @stokfredrik. Tomorrow I’ll be posting a (very small) follow-up use case of some tricks in this video combined with ai. https://t.co/EIgm8vcYCx

[Bishop Fox @bishopfox]

Featuring Bishop Fox's Kelly Albrink talking about #FlipperZero! (which you can potentially win tomorrow as part of our #DEFCON livestream 📻)

[Josh @passthehashbrwn]

Come check out @sanjivkawa's Arsenal talk on SQLRecon!

[James Kettle @albinowax]

One cool thing I didn't mention in the presentation is that you can also use the single-packet attack via Burp Repeater, even in the free edition. This should make testing & creating replication steps for triagers a bit easier!

[Sanjiv Kawa @sanjivkawa]

Come visit me, @retBandit, @capt_red_beardz, @djhohnstein and @h4wkst3r at the @XForce booth!

[Bishop Fox @bishopfox]

Attention @BlackHatEvents attendees! 🚨

@2600AltF4 and David Vargas from Bishop Fox present their #security research TODAY; don’t miss “Badge of Shame: Breaking into Secure Facilities with #OSDP” starting at 11:20 AM today in South Seas CD, Level 3. https://t.co/MK1iZebjFi

[James Kettle @albinowax]

@Rhynorater @ctbbpodcast Server-side spreadsheet injection: https://t.co/bEsRdagusr

[Caleb Gross @noperator]

A deep dive into crypto vulnerabilities my team discovered that enabled @bishopfox's security research + exploit development in FortiGate firewalls 🔥🧱 https://t.co/GKNeSpHB4h

[Bishop Fox @bishopfox]

We are over the moon to announce that Senior Security Engineer Tom Hudson (@tomnomnom), the mastermind behind popular #opensource gems like jsluice and gron, is gracing our #DEFCON 31 edition of #BFLive! 🚀

Get ready to dive into the secrets of his exceptional #hacking tools and uncover the methodologies fueling them – and hear his unique #offensivesecurity perspective as well. https://t.co/59JMzUmwFT

[liam @liamsomerville]

https://t.co/DAswOk7COS

[liam @liamsomerville]

https://t.co/sAuxRVuUWd

[Intigriti @intigriti]

4⃣@TomNomNom and @BishopFox release JSluice a new tool to extract URLs, paths and secrets from Javascript files https://t.co/e23nfrytBx

[Clint Gibler @clintgibler]

🛠️ jsluice

A command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code

By @bishopfox's @tomnomnom

#bugbountytips #pentesting

https://t.co/aRBKx6X2fH

[Ben Lincoln @0x00C651E0]

One week until this talk. I got a preview of Jon's section on building an exploit for a FortiGate CVE and it will be great. Plus, hear the tale of how I accidentally found vulns in Windows and InTune while looking for the same type of issue in a product we assessed.

[Caleb Gross @noperator]

My brilliant team at @bishopfox developed a safe, no-crash vulnerability check for the recent CVE-2023-27997 heap overflow in FortiGate firewalls allowing RCE. You can try the tool out yourself at https://t.co/X8Fg73RQgF. Check out the blog, too! Clever technique, worth a read.

[liam @liamsomerville]

@TomNomNom Also, you only install it once. You may refer to usage instructions far more often.

[liam @liamsomerville]

@TomNomNom I like Usage, because it sort of fleshes out what the tool does. Then, when you've had a chance to see whether it meets your needs, install instructions