penteststuff

Pentest, hacking and locksport stuff.
Aiming for a high Signal/Noise ratio.

[penteststuff @penteststuff]

@wh1t3h4ts Personnally? I aliased "DIDIFUCKINSTUTTER" to "sudo !!"

[penteststuff @penteststuff]

@vibingmonk That's... Unironicly very readable ?

[penteststuff @penteststuff]

@sweis Thanks, I hate it xD

[Steve Weis @sweis]

In Germany, everyone uses `ßh` instead of `ssh`.

[Craig Rowland - Agentless Linux Security @CraigHRowland]

Getting a lot of responses on my Tor/VPN/Anonymity comments. I'll just explain my reasoning and background in a quick vid vs. responding to all the doubters and haters. Believe what you want, but being anonymous on the Internet is very hard.

[penteststuff @penteststuff]

@graninas Agree to all of the above, would also add "Stop auto-extending ongoing text selections to arbitrary uncancellable boundaries like whole paragraphs or lines".
And then I'd start my rant about unreadable delimitation-less flat design. 🙃

[Isaac King 🔎 @IsaacKing314]

Anyone who tests AI on their area of expertise rapidly realizes that AI is an idiot.

Unfortunately, it is becoming clear to me that many humans do not have an area of expertise.

[︎ @0xocdsec]

Vids from @radareorg con are up

Chameleon, polymorphic shell engine | gum3t https://t.co/NcZZkjbgH4 via @YouTube

https://t.co/D3SgeuZB3Q

[Maximus @gladiatx0r]

@Flangvik A couple viable alternatives to AWS API Gateway detailed here
https://t.co/GVawgkBsqX

and
https://t.co/AjKlt2hX5U

[penteststuff @penteststuff]

@Jhaddix Even better, il you use the "llm" command (https://t.co/uyeAyJL0Ep) , you can tie it to a variety of different ai providers both cloud and local, and quickly recall manners of presets, system prompts or other confs...
Have your logs analyzed, captchas solved, videos summarized...

[Ahmad @TheAhmadOsman]

dear diary,

it’s been 12 hours since aws-us-east-1 vanished into the void

half the internet apparently shares one data center lease

and none of their computers are answering calls

iʼm starting to think the that cloud was just someone else’s basement all along

[TrustedSec @TrustedSec]

Service triggers can be a pentester’s secret weapon, letting low-priv users quietly fire up powerful services. In our new blog, @freefirex2 breaks down the types of service triggers that exist and how they can be activated with little to no code required. https://t.co/C2va5umFR7

[penteststuff @penteststuff]

@tritlo Gotta defeat time correlation attacks somehow don't ya?
:P

[penteststuff @penteststuff]

@haydendevs You paid for access to the whole Internet, you can use the whole Internet 😤

[penteststuff @penteststuff]

@struppigel A bit on the other side of the coin (if there is such a thing), but https://t.co/O6DZkHFzsp has very interesting articles about the techniques you might encounter used.

[penteststuff @penteststuff]

@GrahamHelton3 How about Gron?
https://t.co/ZD05H9YNCM

[rekdt @rekdt]

Are you in charge of writing Cybersecurity incident reports and need to spice up the language so the report isn’t so boring??

Try this, instead of saying we suffered a breach due to the compromise of a 3rd party:

> we got fucked in the aaS

Follow me for more pro writing tips

[Matthew Rogers @Matthewrogers]

They took this from us, now things are dumber and harder to use? Why? We need to go back to Windows 2000.

[[email protected] / EDRmetry / PurpleLabs @cr0nym]

Pretty solid offensive #Linux combo: ptrace-inject for proc injection + Sneaky_remap for hiding from /proc/pid/maps + TLS callback shared object for encrypted reverse shell with silly process masquerading as "ps aux". I am just connecting the dots, huge thanks to Artemis21 and @magisterquis https://t.co/3Dk97ZSWyX / https://t.co/r355odA999 / https://t.co/YX9nrFW1gL It would be awesome to have similar injector capability available as BOF in bof-launcher or any other C2 framework supported on Linux https://t.co/SxAk3Y9Hn9 LET'S GO!

[penteststuff @penteststuff]

@GrahamHelton3 I'm more surprised that AI is of any use for actual offensive work at all 😅