js0nn @_js0nn

grug brained | intern@codewhitesec /tmp Joined June 2022

Tweets

23
Followers

36
Following

147
Likes

189

FFmpeg @FFmpeg

2 months ago

Professionals don't use FFmpeg and FFprobe. They use extremely expensive software that runs FFmpeg inside (and that vendor contributes nothing back)

Arvin @yzn56210

2 months ago

Professionals don't use FFmpeg and FFprobe. They use extremely expensive software that runs FFmpeg inside (and that vendor contributes nothing back)

10 0 75 604K 19

152 1K 15K 934K 993

I hope everyone got some rest after @DownUnderCTF this weekend. My colleague @hash_kitten wrote up a blog post on a novel technique for SQL Injection in PDO's prepared statements, required to exploit the “legendary” challenge, which only got one solve: slcyber.io/assetnote-secu…

0 49 237 10K 99

js0nn @_js0nn

3 months ago

I really enjoyed the way @SinSinology taught his very hands-on 1-day .NET-exploitation yesterday. Sadly without pizza but definitely worth it nonetheless ;)

0 0 6 200 0

ThePrimeagen @ThePrimeagen

3 months ago

the vibe coder knows what the code is doing at all times. They know this because they know what the code isn't doing. By subtracting what the code is doing from what it isn't doing, or vice versa (depending on the energy in the room), they derive a difference, or vibe…

283 453 7K 470K 929

CODE WHITE GmbH @codewhitesec

7 months ago

Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) apply-if-you-can.com/walkthrough/20…

1 21 63 5K 22

CODE WHITE GmbH @codewhitesec

12 months ago

BeanBeat has been aquired by Kurts Maultaschenfabrikle! You don't know what that means? Head over to apply-if-you-can.com to find out in challenges that, without exception, stem from real-world vulns #uncompromisingRealism #finestHacking

0 16 43 6K 12

teej dv 🔭 @teej_dv

a year ago

Thanks Neovim

89 255 4K 333K 287

Download Video

CODE WHITE GmbH @codewhitesec

a year ago

Today, CODE WHITE turns 10 🥳 Over the past decade, we've hacked our way through 120+ large corporations' defenses, caused headaches for Blue Teams and disclosed numerous 0days to vendors. Proudly grown from a few motivated hackers in 2014 to an established team of 50+ today 💪

2 14 78 8K 2

Download Image

Johann Rehberger @wunderwuzzi23

2 years ago

👉Hacking Google Bard: From Prompt Injection to Data Exfiltration A nice example of a high impact prompt injection attack that led to chat history exfiltration (delivered via forced Google Doc sharing) 🔥🔥🔥 #bard #llm #infosec #bugbounty embracethered.com/blog/posts/202…

5 72 348 258K 245

Jiska @naehrdine

2 years ago

Want to know how Apple's Satellite features work internally? Watch this #OBTS talk by @Sn0wfreeze and me! youtu.be/1BN8G4l2L1c

1 39 127 21K 49

Download Image

Frans Rosén @fransrosen

2 years ago

What was the best reply you ever got from a program on a bug report? This one is up there:

35 15 311 66K 26

Download Image

Fabian @testert01

2 years ago

[RELEASE] EvtPsst a small mute tool developed by me, that abuses exposed SYNCHRONIZE and Token handles in order to get a process handle to the EventLog Process with more access. Blogpost over the techniques will follow in the next days. github.com/nothingspecial… #redteam

0 14 21 3K 4

CODE WHITE GmbH @codewhitesec

2 years ago

The return of Kurts Maultaschenfabrikle: have fun with our all new applicants challenge at apply-if-you-can.com #CTF

0 18 31 7K 9

CODE WHITE GmbH @codewhitesec

2 years ago

It was time to ACT! for @frycos when he discovered a custom .NET remoting implementation in the popular ACT! CRM but had no way to get a trial version. Read about his journey leading to unauthenticated #RCE at code-white.com/blog/2023-07-f…

0 53 124 26K 28

atc1441 @atc1441

2 years ago

Teardown of the Disneyland entry band, friendly donation by you know who you are❤️ FCC: Q3E-MB-R1G2 First stage disassembly is quite easy via 2 screws but comes to a sonic welded inner part From the outside you can talk to it via NFC 🧐a battery as well? Lets look deeper! 1/N

15 161 1K 345K 262

Download Image

Stadt Ulm @ulm_donau

3 years ago

Finale der Hacker-Meisterschaft im Juli in Ulm - am 1. März startet die zweimonatige Online-Qualifikation ulm.de/aktuelle-meldu… Alles Wissenswerte zum Wettbewerb: cscg.de @C_S_C_G

0 4 15 2K 0

Download Image

KRAZAM @krazamtv

3 years ago

IETF CELEBRATES THE STANDARDS Our live performance from the @demuxed 2022 conference is now 🆙 watch: youtu.be/NAkAMDeo_NM

KRAZAM @krazamtv

3 years ago

IETF CELEBRATES THE STANDARDS Our live performance from the @demuxed 2022 conference is now 🆙 watch: youtu.be/NAkAMDeo_NM https://t.co/qRV4tG9iI9

4 5 81 0 0

Download Image

0 15 61 19K 2

Download Video

Corben Leo @hacker_

4 years ago

In 2010, WikiLeaks released a classified document. A list of infrastructure critical to U.S national security. The government listed a Trans-Atlantic cable. 3 years ago, 19-year-old me gained ADMIN access to that cable (and another; shared codebase). 🧵Here's how I found it

92 956 5K 0 1K

Download Image

John McElhone @johnmcelhone8

3 years ago

The photo of the U.S. Air Force's new stealth aircraft is on the left, taken at night, with stars in the background. We can use them to find the exact location of the jet (thread)

U.S. Air Force @usairforce

3 years ago

The photo of the U.S. Air Force's new stealth aircraft is on the left, taken at night, with stars in the background. We can use them to find the exact location of the jet (thread)

865 5K 26K 0 520

Download Image

131 2K 8K 0 1K

Sam Curry @samwcyo

3 years ago

More car hacking! Earlier this year, we were able to remotely unlock, start, locate, flash, and honk any remotely connected Honda, Nissan, Infiniti, and Acura vehicles, completely unauthorized, knowing only the VIN number of the car. Here's how we found it, and how it works: