Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:
Turns out you can just hack any train in the USA and take control over the brakes. This is CVE-2025-1727 and it took me 12 years to get this published. This vulnerability is still not patched. Here's the story:
Given the recent events with VMPSoft DMCA'ing educational YouTube videos demonstrating how to unpack malware protected with VMProtect, we have decided to release a free to use unpacker which works for all versions of VMP 3.x including the most recent version.
Simply sign…
As promised, here's a tutorial on how to setup the Locomotor in #UnrealEngine5.6.
I explain how it works and guide you through a full setup of a Locomotor for the Wolf character including a well tuned Full-Body IK setup to allow the Wolf to reach beyond it's limb length.…
An introduction to Software Defined Radios.
A thread for beginners on:
1. What a SDR is
2. What you can do with SDRs
3. How it plays a role in the security/hacking world
4. How it’s used in ham radio.
5. How to choose/buy one
6. Link to more reading material
0/21
Summary of the DOGE whistleblower claim (because the thread is long and reads like a script):
- DOGE gets “tenant owner” rights in Azure, with full control over NLRB cloud infra – no logs, no questions
- Logs and security controls are disabled (Network Watcher off, no…
Summary of the DOGE whistleblower claim (because the thread is long and reads like a script):
- DOGE gets “tenant owner” rights in Azure, with full control over NLRB cloud infra – no logs, no questions
- Logs and security controls are disabled (Network Watcher off, no… https://t.co/549PoYbofm
My RECon 2024 presentation is now online!
Check it out if you're at all interested in some novel Android Malware techniques!
(I also released a tool for some clever auto-decompilation)
👿 MCP is all fun, until you add this one malicious MCP server and forget about it.
We have discovered a critical flaw in the widely-used Model Context Protocol (MCP) that enables a new form of LLM attack we term 'Tool Poisoning'.
Leaks SSH key, API keys, etc.
Details below 👇
Just built an MCP for Ghidra.
Now basically any LLM (Claude, Gemini, local...) can Reverse Engineer malware for you. With the right prompting, it automates a *ton* of tedious tasks.
One-shot markups of entire binaries with just a click.
Open source, on Github now.
I find myself repeating this a bit, so fuck it, here's how to get into an unprivileged namespace on Ubuntu 24.04/24.10.
PSA: linux is stupid and for nerds, and @Canonical/@ubuntu suck at security.
$ busybox sh -c "unshare -Urmin"
too embarassing to even call it a bypass
I find myself repeating this a bit, so fuck it, here's how to get into an unprivileged namespace on Ubuntu 24.04/24.10.
PSA: linux is stupid and for nerds, and @Canonical/@ubuntu suck at security.
$ busybox sh -c "unshare -Urmin"
too embarassing to even call it a bypass https://t.co/8YdnokGsem
279 Followers 719 FollowingJohn Titor from another timeline. Recovering software engineer. I build electric guitars. I collect $doge!
DLSWQzs3ApgiNBsoFfgM4XgBhT5dYBr3Hg
493 Followers 7K FollowingCannabis Cultivator and general grow knowledge. We've work with thousands worldwide suffering from chronic pain, Anxiety, Depression, PTSD, etc.
465 Followers 2K FollowingPapajay Cannabis 🔌💨
Top Canadian Loud 🔥 Available in Minna Only!
Trusted 🔌 | Quality 💨 | Fast link up
#Smoke the best #please hit me up for sure supply!
1K Followers 1K Following💻 Systems engineer @OVHcloud, from startup to global hyperscaler cloud provider. 🤖 things maker. connect ! Intellectually curious
19K Followers 17K FollowingFreeBSD advocate who is heavily into Ansible, BGP (AS20621), DevOps, Kubernetes, Proxmox, XCP-ng, Python, Rust & RISC-V and builds own decentralized solutions.
4K Followers 2K Following'Give a man a 0day and he'll have access for a day, teach a man to phish and he'll have access for life.'
#snackoil and #lolzcrew inaugural member.
8K Followers 399 FollowingWindows Internals enthusiast, Interested in hardware design & low-level programming. An active developer of @HyperDbg debugger.
https://t.co/TUALkTusHt
68K Followers 6K FollowingCurrent: @NCITE_COE — I read a lot of court records because I like a good story. Won a Pulitzer that one time. “A well-known PACER watcher” - Justice Department
3K Followers 3K FollowingSoftware dev (C/C++/Assembly) - New Brunswick, 🇨🇦 🇺🇸. I love nature, science, geopolitics, cats, and my wife. Always learning and open to being wrong.
132K Followers 57 FollowingProviding intel from the Dark Web & Clearnet: Breaches, Ransomware, Darknet Markets, Threats, Crypto & more. Follow X Bot: @DarkWebIntelBot. https://t.co/Fi7VW9lg94
11K Followers 729 Following// unethical hacker
// cybersecurity leader: megacorp, usa
// ex big tech, else
// @redteamvillage_ & @sec_defcon daemon
// take sincerely at your own risk
190K Followers 2K FollowingCo-founder & CEO @Brave Software (https://t.co/NV4bmd6vxq) and @attentiontoken (https://t.co/XhGIrdBJWu). Co-founded Mozilla & Firefox. Created JavaScript.
29K Followers 206 FollowingHacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
13K Followers 509 FollowingI don't know how to search on Google so I do research on my own and tweet about it. Hacking as a life style
https://t.co/a05mevChzu
3K Followers 164 FollowingCTO @BeyondTrust. I like books, science, hacking, and backpacking. But not backpacking with books. The FBI once served me a warrant and pastries.
28K Followers 7 FollowingWe provide all the latest news and reviews of Microsoft, Windows, Windows Phone, Surface and Xbox devices.
We are not affiliated with Microsoft.
12K Followers 530 Followingi'm good at all kinds of computer. i love my wife and my wife. i miaow. i'm an ARAR unit. i sell flippers at @flipper_zero, but opinions are my own. 🐈❤️🐈⬛