You'd be surprised how much top-ranked websites make this deadly mistake! If there's more than one API, you must try @filedescriptor's #BugBountyTip! ...

作为分母转发一下

RT AppSecVillage: The New Year's Eve party and the hangovers are behind us. Thank you @Mrs_Skelli for almost single-handedly leading and making this @...

三万了，不用吃屎了

RT miss jackalope: Miss last night's #DEFCONNYE set? I'm gonna do a replay Sat 1/2/21 at 1pm PST (-8 GMT) on my

RT Worcester DEFCON Group: Next meet on Zoom on the 31st January at 7pm. • DeathsPirate (@DeathsPirate) will present “How To Reign In The Cloud. AWS...

//@整点电影:绝了，码住//@韦斯莱家的红头发：//@徐铭远Meinn:怎么做到的？？？//@IbaraES逐光:绝了，马住//@果子狸爬大树 :哇哦//@当时我就震惊了 :科技感无敌了！！//@当红小花 :牛批//@qiupulsar :这个怎么做到的啊，也太好看了吧。

Re @LiveOverflow

It's already cold , chilling  & stormy weather outside - somebody needs to be rescued 🤗

破案了 DNT donottag

通过F码下了个单，这次我再不搞root了，一路正常升级。为啥换？一堆破烂体制内APP已经完全不支持上一个手机，只好借媳妇的苹果对付，不是个事儿。

纵观市面上的这些自动化 渗透平台，无论是exploit pack，metasploit还是core impact，其核心技术都在于攻击流程的编排和工具调度，而不是传说中依靠0day。当然，流程编排和工具调度的合理性，体现了开发者的针对入侵渗透的理解，开发者对渗透理解的越深入，流程编排和工具的调度越合理。这三款工具其实 ...全文

回复@某高老师:如果这样当然更好，比那些野阿訇瞎几把传播暴恐思想好很多//@某高老师:你们不懂，投资了以后就会按照我们要求的思路传教了，否则都是地下阿訇//@RevengeRangers:我现在改信伊斯兰教还来得及吗？//@神棍敌人杰:要严查这种恩养宗教的行为！

陈北雁所在学校有一些家校课堂，家长听完后要填反馈表，我家这种事都是爹做娘不做。上一期对主讲人的腔调做派有些烦，但忍着没喷，不曾想第二期还是她，这次不忍了。喜欢听那种老派资深小学教师讲话，会想起我的三任小学班主任们。

你这不爱国啊//@将记忆深埋:视频里的两个Atlas 优化得太灵活了，比2年前的版本优秀太多。

洋人>外籍华人>港澳台>//@中国元:活该一群舔狗//@李铁军-备胎2号:好心换做驴肝肺//@神棍敌人杰:

我现在改信伊斯兰教还来得及吗？//@神棍敌人杰:要严查这种恩养宗教的行为！

Re @_lemon @DemoOrDie Of course seems to be USA only anyway, which is fine for me. Almost tempting, it would be more so if I had a record player and w...

Re @ct0br0 Threat Actors work full-time jobs on these things. AVs are not as simple as Infosec makes them out to be & this is coming from a Malware ho...

Re @ankit_anubhav @bofheaded I seen Infosec nerds complain 'Person X and/or Company Y, said they did not need security, then they waited until it was ...

看到很多人在总结过去一年做的事。我前阵子在 X-Talk 上讲了 HD Moore 的例子。他的个人资产现在大约相当于 770 亿人民币。下面是他 2020 年在 Github 上的代码提交记录：

坚持了1600天的扇贝单词

背景是这个：微博正文 //@开水族馆的生物男:绿发会真的是肆无忌惮丧心病狂//@花落成蚀:各退一步难道不是绿发会承诺不再募捐到内蒙找云豹？

赞同微博正文 //@唐史主任司马迁:关于特斯拉降价，完全在预期中。将来还会继续降，降到大家觉得电车比油车香为止。 特斯拉是福特，其使命是如福特击败马车一样击败油车。

靠正能量取暖

@李铁军-备胎2号 听口音我说怎么那么熟悉

Re @m0rb Probably not, no 👀

Join #virus on  This IRC channel has been alive/around since approx. 1995. It was the place where many famous VX groups hung out. 26 years of VX chat!...

Deploy an SSD cloud server at DigitalOcean. Get $10 Free Credits

Oblivion - Data Leak Checker And OSINT Tool

Re @kmkz_security cc @_ForrestOrr

Re @bitsadmin @kmkz_security No. It's literally by @_ForrestOrr. It says it in the website name.

Charles

IDA PRO 7.5 KEYGEN

RT HTTPie: PUT /2020/behind HTTP/1.1 🥳

Re @mrgretzky What's fun in playing games if we can't hack it .. ? Rules are always made to be broken to reconstruct with some more timely secure ones

Reverse Engineering Source Code of the Biontech Pfizer Vaccine (Part 2) :  Reverse Engineering the source code of the BioNTech/Pfizer SARS-CoV-2 Vacci...

TabFS : mount your browser tabs as a filesystem :

Running Debian on a 32MB RAM (6$) Single Core ARM SBC :

Too many nostalgic moments run fresh of those days when in free time we started to hack farmville on fb almost before a sabbatical🤗

RISC-V Assembly for Beginners :

ACE : Apple Type-C Port Controller Secrets (Part 1) :

Re @holme_sec Amazing achievements! Proud of you @holme_sec 😎

Re @ZephrFish Whichever is good for you.

Re @ZephrFish Thanks for the review. Feel free to DM me details of which modules you felt were light, or via the feedback submission on Canvas.

Microsoft Internal Solorigate Investigation Update (SolarWinds hackers were able to access Microsoft source code) :

Reversing Golang Binaries - Part 2 :  Part 1 :

Sploit – Binary Analysis and Exploitation with Go :  Repo :

How to Unpack Ramnit Dropper - Malware Unpacking (Part 2) :  How to unpack FlawedAmmyy (Part 1) :

WinPwn : Automation for internal Windows Penetrationtest / AD-Security :