ein

NFC hacking, web pentest, physical security enthusiast

[ein @usr_ein]

@0xTRIKKSS @Sh0ckFR We’ll never know because those dumb dumb blew it up “just in case it contained explosives”

[scientific realm 🇪🇺🇬🇧 @scientificrealm]

@itsJeffTiedrich

[ein @usr_ein]

Big Tech has OpSec figured out, only undertrained employees of small companies ever post pictures of their badges.. wait #opsec #OSINT #forensics #recon #CyberSecurity

[ein @usr_ein]

@Andrew___Morris @seclilc @corg_e Kerberoasted

[ein @usr_ein]

@corg_e RSA slightly dumb little brother

[Peter Yang @petergyang]

I am the documentation

[ein @usr_ein]

@InsiderPhD There is no ultimately safe way, but I made a script that converts every page into PNG through GhostScript and checks that it’s the latest version. I think that prevent most of the bad stuff: https://t.co/vsbiQiH9S6

[ein @usr_ein]

@vict0ni @hakluke Bad server headers can lead to cache poisoning which even CloudFlare was vulnerable to. You can DoS a whole website just from poisoning the main js file

[ein @usr_ein]

@DarkDotFail Your PGP key (B019 72C5) has expired on 2022-09-04. You should rotate it on /pgp-sigs.txt

[ein @usr_ein]

Made a small tool to sanitize PDFs.
If you ever encounter wild PDFs that you don't trust to open, pass them through this tool first: https://t.co/vsbiQiGC2y

[Luke Hinds @decodebytes]

I made my first meme for #KubeConEU

[ein @usr_ein]

@joetomasone @herrmann1001 It looks like it’s a DormaKaba/Saflok system

[ein @usr_ein]

Just encountered a super weird hotel NFC system: it seems able to detect a Proxmark being used and locks up the compromised keys!
GG on having such a level of security.
#NFC #proxmark @herrmann1001

[ein @usr_ein]

@DuchyRE @herrmann1001 I tried fuzzing the data on it and yep, the UID isn’t the only thing being read

[ein @usr_ein]

@RayRedacted @JackRhysider your stickers traveled far and wide it seems!

[ein @usr_ein]

@cooper_ai4hc Hey! I found a note about your puzzle in #Stanford food court, solved it and now I'm wondering what is this maze about. Any clue for late students? https://t.co/0WzFEXK8gY
PS: brownies
#ctf

[ein @usr_ein]

@thingskatedid You can also record yourself for like 20 seconds, put that in OBS, loop it and use the virtual webcam as your video input.
Then when you want to speak, just swap back to the real webcam in OBS 👍🏻

[Rachel Tobac @RachelTobac]

🚨ATTENTION🚨
Apple found two 0-days actively in use that could effectively give attackers full access to device.
For most folks: update software by end of day
If threat model is elevated (journalist, activist, targeted by nation states, etc): update now https://t.co/BUEn08260X

[ein @usr_ein]

That googley eye idea was pure genius #DEFCON30

[ein @usr_ein]

@technick awesome badge