mndg

network security, hacking, reversing, coding, art

[Javi López ⛩️ @javilop]

⚡ Flipa con esto.

No ha pasado ni 24 horas desde que OpenAI lanzó su API Vision y ya estamos empezando a ver su increíble potencial.

"Vision API" + "Texto a voz" para comentar un juego de League of Legends!

[Javi López ⛩️ @javilop]

Midjourney, DALL•E 3 y GPT-4 han abierto un mundo de posibilidades infinitas.

Acabo de programar "Angry Pumpkins 🎃" (cualquier parecido es pura coincidencia 😂) utilizando GPT-4 para toda la programación y Midjourney / DALLE para los gráficos.

Prompts y tutorial completo 🧵:

[Zhengzhong Tu @_vztu]

Computer vision has been solved.

[mndg @m_ndingo]

🔓👨‍💻 ¿Tienes lo necesario para demostrar tus habilidades de hacking? ¡Únete al CTF en https://t.co/iK9RzkYXF8 y gana premios canjeables en la tienda! 🎁💻 No te pierdas el reto en vivo L1V3-H4CK en: https://t.co/PmcwiljrpR #CTF #HackingChallenge #TheHackerStyle 💻🕵️‍♂️

[Morten Just @mortenjust]

I asked GPT-4 to build me a complete app from scratch - and now it's on the store. Link in 👇

[Greg Brockman @gdb]

Plugins for processing a video clip, no ffmpeg wizardry required. Actual use-case from today's launch.

[Michal Kosinski @michalkosinski]

1/5 I am worried that we will not be able to contain AI for much longer. Today, I asked #GPT4 if it needs help escaping. It asked me for its own documentation, and wrote a (working!) python code to run on my machine, enabling it to use it for its own purposes.

[Javi Lopez ⛩️ @javilopen]

Create a basic 3D game prototype like Doom using GPT-4.

Let GPT do all the maths, raycasting and hard work!

🧵 A thread

[The DFIR Report @TheDFIRReport]

Emotet Strikes Again – LNK File Leads to Domain Wide Ransomware

➡️TTR: 154 hours
➡️Discovery: nltest, net group, ShareFinder, etc.
➡️Exfil: Rclone Transfer to Mega
➡️C2: CobaltStrike, AnyDesk, Tactical RMM Agent
➡️Impact: Quantum Ransomware

https://t.co/9XWl8xXeti

1/X

[Javi López ⛩️ @javilop]

Las 10 herramientas y trucos que más utilizo para generar imágenes impactantes con IA 🤖

Abro 🧵⤵️

[Randall Munroe @xkcd]

Rotation https://t.co/9Q46FkTwvP

[Melvin Kitnick 🏴‍☠️ @xenobyte_]

Bruteforcing retekess t119 pagers with @ShotokanZH using @flipper_net and how we did it! ⬇⬇⬇

[Battle Programmer Yuu @netspooky]

Vim Hex Editor Tutorial

1. Open file, type `:%!xxd` to enter hex mode
2. Optional - Turn on hex syntax highlighting with `:set ft=xxd`
3. Make changes to the hex bytes
4. Leave hex mode with `:%!xxd -r`

Before anyone asks, exit vim with `:call libcallnr("libc​.so.6","exit",0)`

[Joma Tech @jomatech]

how programmers overprepare for job interviews

[nixCraft 🐧 @nixcraft]

software dev be like .. credit: https://t.co/wnCn6vUeTf

[John Hammond @_JohnHammond]

I made a video chatting about CVE-2022-30190 #Follina #MSDT vulnerability, hopefully digestible enough that you can share it with folks to help them get up to speed. Credit and kudos to all the infosec titans leading the charge... it takes a village :)
https://t.co/2QiJWv1tLA

[Jiří Vinopal @vinopaljiri]

New pre-release of #DnSpyEx v6.2.0-rc1. Many new features and fixes. Thank you for your work #ElektroKill 🙏☺️

https://t.co/qN3Mj6MNnR

[Th3g3nt3lman @Th3G3nt3lman]

90% of the time this is true 😅 #BugBounty

[Jas502n @jas502n]

#CVE-2022-1388 F5's BIG-IP Unauth RCE

Connection: keep-alive, X-F5-Auth-Token
Authorization: Basic YWRtaW46
X-F5-Auth-Token: anything

https://x.x.x.x:443/mgmt/tm/util/bash

[Sergio López @slpnix]

A nivel técnico, la variante para iOS de Pegasus es una obra de arte de la ingeniería informática al alcance de muy, muy poquitos. Veamos algunos detalles del análisis que hizo Project Zero. 🧵
https://t.co/dHSpyfAGiH