threatactor.club

For the #Mastodon #server instances out there, is there a guideline on drive space that anyone could recommend? If I ran an instance it would be a user base of just a handful, but I’m curious about storage limits. The other issues with being an #administator I think I can track down, but this is alluding me.

Dumb Question, and I'm sure it's been asked before, but is there a repo somewhere of trivially exploitable *nix binaries for testing/demo purposes? Preferably with Makefiles that disable all of the fancy mitigations.
#appsec #exploitation #exploitdev #binaries

@joern Alles locker im Docker.

Free #ctf idea: use ECDSA wrong by signing a message directly instead of a hash. ECDSA on P-256 for example will only sign the first 32 bytes, the rest you can change however you want.

(original source https://www.inforisktoday.com/twitter-two-factor-authentication-has-vulnerability-a-20475, but that was me confirming it)

I'm absolutely losing it

Must remember not to open twitter anymore
Must remember not to open twitter anymore
Must remember not to open twitter anymore
Must remember not to open twitter anymore

I feel like I need something for my blood pressure after that.

Anyhow, how is everyone doing?

"This issue is Volume One, Issue One, released on November 17, 1985."

http://www.phrack.org/issues/1/1.html

Don't mind me, just storing my account recovery codes here because we're all friends.

Dropbox

sqa7 brix
vwaf k2qm
oyda bgck
blmg hhsy
l93f trww
z1cp 0c1l
6vlt 320e
l5hn rwq1
kdnf nmky
9ddn vh61

Facebook

7147 3084
6298 3780
2148 1878
5145 7791
3876 0444
8851 9256
2864 9061
3518 2411
1516 0291
2696 9257

Reddit

154891
915269
271083
393744
451820
516234
773634
233741
018590
502965

Google

8092 1121
9389 5246
3872 9286
4760 8952
2566 5417
5864 8282
3296 8476
4689 7152
0387 3760
4304 5896

Boost this toot if you're planning on sticking around Mastodon whether or not it becomes more popular than the birdsite.

Idea for the Windows bug bounty.. I call it the "Prove it" award. If we classify your bug as a DOS or not exploitable and you resubmit the bug with a working exploit that proves us wrong. We pay you 10x (or some large number) the original bounty. thoughts? #bugbounty

We're about 15 seconds away from someone getting Elon to open devtools, type in a console command, and have his creds exfilled

nobody:

absolutely nobody:

yubikey: cccjgjgkhcbbcvchfkfhiiuunbtnvgihdfiktncvlhck

Huge if true

We are hiring - great opportunity to work with the team behind @metasploit as a Lead Security Researcher to address Emergent Threats - more details here: https://www.rapid7.com/careers/jobs/detail/?jid=R5574 #infosec #infosecjobs #cybersecurity

Hey #InfoSec Fedi,

I am looking for a new Job!

I would be interested in an offensive Security Position, preferred Red Teaming.

100% Remote is OK, but I need to be employable in Austria!

I have two years of professional Pentesting Experience + Trained Trainees IT Basics/programming, 5+ years Linux System Administration, 7+ Year CTFs.

I will make another post later where my CV will be available.

If you have questions, PM me!

Boost appreciated!
#lookingforwork #work #job #search