joernchen 
.
@joern,
Wissen ja die wenigsten:
Profile for
joernchen :cute_dumpster_fire:.
Username @joern, threatactor.club.
Role: admin
About
Your mom's favorite hacker!
My other account is @joernchen
Joined on Nov, 2022.
348 posts.
Followed by 951.
Following 232.
Recent posts
joernchen
.
@joern,
joernchen
.
@joern,
Considering giving a talk titled: „I made my hobby my profession so I needed a new hobby. Now I’m cuddling grown men in pyjamas trying to choke them out or break their limbs - for fun“
joernchen
.
@joern,
Against earlier statements it looks like I'll be at the CCC Camp with my family. See you all there!
joernchen
.
@joern,
Last Christmas I popped a shell¹ on http://hg.mozilla.org
Here's the fix:
https://hg.mozilla.org/hgcustom/version-control-tools/rev/0b02dd442661b4ada84e4c6dea58ab62cb8fbaca
Can you explain the bug?
FAQ:
- This is an authenticated vuln
- I'll post a writeup in the next days
- Yes, RTFM helps ... as usual
¹) actually it was two shells
joernchen
.
@joern,
What could possibly go wrong?
![$ python -c 'import yaml;y = yaml.safe_load(open("lol.yaml"));print(y["A"])'
Aaaaah
$ ruby -ryaml -e 'x = YAML.safe_load(File.read("lol.yaml"));puts x["A"]'
LOL!
$](https://threatactor.club/fileserver/016C9XGNWH2G8F4WAXXE00JYE9/attachment/original/01F5PYQBM7RZ2B8KA51W9RHYHW.png)
joernchen
.
@joern,
Unpopular take: .zip domains were a marketing gag targeting security people.
joernchen
.
@joern,
It’s that time of the year again
joernchen
.
@joern,
good old 19:15 double espresso
joernchen
.
@joern,
Stuff one finds buried in a shelf when moving ….
joernchen
.
@joern,
OR: Hot Single Sign Ons in your Collision Domain!