这个行动轨迹也算是妹给哈尔滨丢人………

小时候看着那一桌子的菜，总想着我们长大了做不出来岂不是会饿死。现在我们两个搭个伙也能做出来，饿死看来是不会了 祝大家中秋快乐[五仁月饼新][五仁月饼新][五仁月饼新]

Re @TeslaOwnersEBay @TeslaGong @inspiration4x Definitely upgraded toilets :) We had some challenges with it this flight.

Re @carsonight Not super surprising, given that internal combustion engine cars literally have “combustion” in the name

Re @TeslaGong @inspiration4x Yeah, a little oven for heating food & Starlink wifi

Just met with the @Inspiration4x crew in Florida to congratulate them in person. Such great people!

……姐姐您说啥呢？我好惊惊！//@biudths:这他妈不是偷换概念？？？？你见过几个男性，就算是女性也不会天天在那：吃个桃桃？好凉凉？？？你在这儿偷换什么概念呢？

#摘星揽月过中秋# 各位PWN友中秋快乐[玉兔]

参考阅读：【女人靠自己奋斗更好还是直接嫁富二代好？】网页链接 //@宝树: 建议大家在银行卡活期里放五百万以备不时之需//@冬亚:Repost  查看图片

RT 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲: Fun fact: Text entered into Windows' Run dialogue automatically gets sent to Microsoft's telemetry. This happens ...

Re @TheHuntinex @voorivex @alins_ir @AmirMSafari Congratulations! 🎉 This is to finding many more! 🍻

👩‍🍳 Lately I've been into cooking! 🧾 But I needed a way to store all my recipes 👨‍💻 So I started writing some code 🔎 Can you spot ...

RT smelly__vx: 1/2 @qu3st1on_ and I are releasing our Node Module Infector. Electron apps use an Index.js file to load modules. Often times applicatio...

Re @AlannahGuo @transi_store The artist is @Nico_n_art

Shout out to Tupac Shakur for repping the vx-underground swag.

New vx-underground merch is live.

CrowdSec - An Open-Source Massively Multiplayer Firewall Able To Analyze Visitor Behavior And Provide An Adapted Response To All Kinds Of Attacks

PS2EXE - Module To Compile Powershell Scripts To Executables

Re @ray4tesla Tesla has not yet decided on a fourth Gigafactory location

DejaVu is an open-source deception framework which can be used to deploy decoys across the infrastructure. See a demo of how it works at #BHEU Arsenal...

Bitdefender Offers Free Universal Decryptor for REvil/Sodinokibi Ransomware :

AzureHunter  : A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365 :

XPEViewer 0.02 :  PE file viewer/editor for Windows, Linux and MacOS :

Apple M1 : Crowd-Sourced Reverse-Engineering Doc Published :

Analysis of the Babuk Golang Encryptor (Source Code) :

Hacking CloudKit – How I accidentally deleted your Apple Shortcuts :  Ref : We Hacked Apple for 3 Months : Here’s What We Found :

RT Objective-See: Wondering exactly how remote attackers were able exploit a zero-click 0day to infect Apple devices ...and how Apple patched it?   Re...

RT Abdelhamid Naceri: Microsoft finally decided to patch lock screen bypasses. I did a simple write-up here -

RT Frans Rosén: Took more than 2 years, but just released the postMessage-tracker Chrome Extension!  Look at the functions receiving postMessages dir...

Unauthenticated *Remote Code Execution in Motorola Baby Monitors (Patched*) :

Windows & Active Directory Exploitation Cheat Sheet and Command Reference :

Obfuscating Malicious, Macro-Enabled Word Docs :

Deus x64 : a new series of binary exploitation challenges by RET2 Systems :

How to attack cloud infrastructure via a malicious pull request :

Beyond rubber ducky : evil mass storage POC with AT90USBKEY2  (malware-tool for offline system. USB composite device with keyboard + mass storage + ex...

RT chompie: this is a neat kernel bug I found in io_uring that is exploitable for LPE. was fun learning about and breaking another Linux kernel meme

RT Jamie Bishop: If you’re using a Virgin Media router and a VPN, there’s a pretty good chance you’re vulnerable to a bug that exposes your real IP...

Attacking the DevTool, a nice article by @david_erceg introducing an interesting high-privileged JS code execution vector in Chromium.

GitHub - Phuong39/PoC-CVE-2021-30632: PoC CVE-2021-30632 - Out of bounds write in V8 -

RT CyCatz: #bugbountytip #bugbounty CVE-2021–24741 Support Board is a  Multiple SQL Injection (Unauthenticated) in Support Board #WordPress plugin   ...

Re @AustinTeslaClub To be precise, completely & immediately reusable orbital rockets are the fundamental breakthrough needed to make life multiplaneta...

Re @teslaownersSV @Tesla Which games did they like most?

我倒是希望狼像《狼图腾》里说的那样野性不可驯，可惜到底还是变成狗了。

In this #BHEU Briefing @jmartijnb shows how they gained root by inserting a malicious USB device that exploits a forgotten vulnerability in the USB st...

Speakers present a new methodology for identifying how HTTP headers are modified to achieve header smuggling using a small number of requests & how th...

[2004] maybe I can just edit this HTML myself... *fast forward 17 years* > why am I sat in a sprint planning meeting, I just wanted to edit my MySpace...

我高中的时候在一家私立学校，而我初中最好的朋友在哈尔滨最好的重点高中，他爹是那所高中某年级的主任（我记不太清职位了）。有一年，我们期末考试，不知道学校用了什么手段，我们学校决定用那所高中的期末考试卷考试。当时大概是97-98年前后，电脑还没这么广泛地用于日常工作，老师办公室也只有一两 ...全文

Re @magnologan Valeu meu querido 🤩

I'm translating my training to english 😃

This interactive Training will teach security professionals how to use data science techniques to quickly manipulate and analyze network and security ...

Register for highly technical hands-on Trainings at #BHEU! Interactive skill-building for both offensive and defensive hackers, taught by industry exp...

Re @tegmark Nice work!

Re @teslaownersSV @TeslaGong @WholeMarsBlog Good

Re @TeslaGong @teslaownersSV @WholeMarsBlog No, has to be turned on by car owner

Re @Jason_Hess_ @WholeMarsBlog Yes

Re @teslaownersSV @WholeMarsBlog Tesla insurance calculator will show status in real-time & tell you what actions are needed to be rated “good driver...

Re @BLKMDL3 @WholeMarsBlog 7 days after approval to log driving style

Re @starbasergv Not a tiny engine

Re @WholeMarsBlog Remarkable how few people realize this capability exists. Many think it is 5 years away! With public beta rollout in coming weeks, a...

这个文章挺好的，虽然谈到了问题但是也有点浅尝辄止。美国迪斯尼工作人员在网上哭喊凄惨遭遇也不是一天两天了。真是工业化的极致——用超冷酷繁复的规则带给客户真心诚意的自由和快乐，简直工业化到头儿了……真神秘。有人说迪斯尼乐园是“造梦机器”，这个词儿里“梦”和“机器”同样重要。

RT Lacey 🚙: I really enjoyed @notameadow’s talk -> DEF CON 29 Payment Village - Meadow Ellis - Automated Tear Machines

20 minutes til showtime :)

Tonight’s #defconmovienight selection is the 2015 documentary ‘The Wolfpack’. It’s weird, kind of wonderful and will have special resonance for pe...

早上背完单词刷了一会微博，觉得自己特浅薄，国师真多。想来想去，这就是差距。

沃尔玛里有《猎魔人》主题的几乎所有相关商品，包括书籍、游戏、漫画、手办、T恤……等等等等。但这个我确实没想到：

迪斯尼乐园是 1955 年开张的。环球影城是 1964 年开张的。前面有半个世纪的艺术工程经验，后面是一个世纪的影视主题积累。艺术工程是科技，影视主题是文化。科技你学来就是你的了。文化只能自己慢慢攒，米老鼠变不成一只耳。要做迪斯尼乐园、环球影城这类巨无霸型主题乐园，基于的文化主题得妇孺皆知 ...全文

InlineExecute-Assembly - A PoC Beacon Object File (BOF) That Allows Security Professionals To Perform In Process .NET Assembly Execution

RT GodFather Orwa: #bugbountytips #bugbountytip #tip 90% from my finds in SQL injection as  [POST Request]  1 Login page in username parameter  2 Forg...

RT Md Saikat 👻: found, {{target_url}}/core/package.json {{target_url}}/core/install.php {{target_url}}/core/phpunit.xml.dist {{target_url}}/core/ya...

Re @FiveTweetTSLA @tesla_lion @archillect Seems that way

Re @archillect Looks fine. Take 2 aspirin, call me in the morning.

Re @TheMarsSociety @NASA Some amount of cooperation would be good

Re @checkymander Haha well none of the actual drone functionality is tested yet. This is purely tasking on the team server side. So when an egress dro...

Unit testing has been so valuable in building and validating tasking Drones in different P2P configurations.

Re @bopin2020 If you use the HostBuilder and enable 'UseStaticFiles' in the IAppBuilder, you can drop any file into its working directory and it will ...

Re @zodiacon What an accomplishment!

RT marc ochsenmeier: Next #pestudio with more .NET fundamental structures #Malware #DFIR

Re @peterwintrsmith @kulinacs Who would ever need to send such ludicrously large messages 🤪

Re @peterwintrsmith debugging p2p comms is fecking awful.

Re @424f424f The listeners or "handlers" as I call them in SharpC2 are built off abstract classes.  You can create any type of egress and P2P C2 that ...

Re @424f424f Two drones on the same host talking to each other over named pipes.

Bit of work on P2P Drones in #SharpC2.

RT b33f: Our team had a demo of Nighthawk by @MDSecLabs, big thanks to @domchell & @peterwintrsmith for the tech deets. Amazing product, some next lev...

Re @0xcnagure lol you offering?

Re @buffaloverflow I like how they warn you about scams...

CSharpREPL doesn't cease to amaze.

Re @MarcOverIP What's the polite way to say "fuck off"?

This kind of behaviour absolutely astounds me.  Person goes onto website and fills in the contact form asking for information that is already on said ...

Re @HackingLZ I’ve never had a positive response from an EDR vendor. They won’t touch me with a barge pole even when I want to pay.

Re @sogonsec @thecybermentor @TCMSecurity 🦎

Re @TCMSecurity @thecybermentor

[BLOG] I wrote this last week for my Patrons, making it public now.

New merch going live soon. We have traditional "vx-underground style" dark art courtesy of @Nico_n_art as well as some more work-friendly merchandise ...

We've made a massive update to our novel malware sample collection: - Keybase - Sakula - Kriptovor - Angler EK - Pushdo - Tinba - Zeus - Escelar Check...

Re @Iordtmk Please specify the paper you want the samples from. We will find them based on the IOCs listed.

Re @Iordtmk Yes.

We've made a massive update to our novel malware sample collection: Slave, Stegoloader, Emdivi, Neutrino EK, Cryptowall, Bzy, Greywolf, Jianmo, FakeDi...

Re @campuscodi The difference between data.torrent & data.exe is large.

CVE-2021-40444 PoC - Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Exec...