Just finished a red team for a fintech that burned millions on Falcon + SentinelOne AI stacks. Got domain admin in under 15 mins from the guest WiFi.
Walked into the kitchen, saw the shiny Samsung “enterprise” smart fridge on the same VLAN as everything important. Still on old firmware.
Default creds on the admin panel.
Classic unauth RCE in the diagnostics endpoint.
Shell within minutes.
From there it had cached corp creds for SAP sync and outbound allowed.
Their EDR had the fridge IP whitelisted as “normal IoT behavior” because of the MQTT pings.
Dropped a Reynolds-style BYOVD (that NSecKrnl one everyone’s using now), killed the hooks on a DC, and exfil’d test data back out the fridge’s own channel.
SOC barely blinked.
CISO’s reaction when I showed him live: “It’s just a fridge though…”
Man, 2026 and we’re still getting wrecked by IoT crap facilities bought on Amazon. Same story as the 2014 Proofpoint fridge botnet or Target’s HVAC.
Nothing changes.
Death of the Outsider (2017)
A sophiscated Dishonored standalone expansion.
Many of you finished The Bank Job mission by waking up one guard and dropping the vault to achieve "The Perfect Crime", but do you know you don't actually need to wake anyone up for a perfect crime?
Built my own Home-Server
- Pi-hole for ad blocker
- Jellyfin for streaming
- Nextcloud for cloud storage
- Kuma for monitoring
- Tailscale to access without WiFi
10 Networking Pillars for DevOps 🌐
1⃣ The OSI Model:
This is your diagnostic map. If a connection fails, you need to know which layer is broken:
→ Layer 3 (Network): IP addresses and routing.
→ Layer 4 (Transport): TCP (handshakes/reliability) and UDP (streaming).
→ Layer 7 (Application): HTTP, DNS, and TLS.
2⃣ IP Addressing & Subnetting (CIDR):
Every resource needs an address and a boundary.
→ Public vs. Private: Keeping internal traffic off the open web.
→ CIDR (/24, /16): Defining the size of your network.
→ DHCP vs. Static: How IPs are assigned to instances.
3⃣ DNS (Service Discovery):
The phonebook that Kubernetes and Cloud providers use to find services.
→ A, CNAME, & TXT Records: Mapping names to IPs or other names.
→ TTL (Time to Live): How long a record is cached before updating.
→ Internal DNS: How microservices talk to each other by name.
4⃣ Routing & Gateways:
Defining the path data takes to reach its destination.
→ Default Gateway: The exit point for local traffic.
→ Route Tables: The "GPS" that tells packets where to go inside a VPC.
→ NAT Gateways: Letting private servers access the internet securely.
5⃣ Load Balancing (L4 vs. L7):
Distributing traffic so no single server gets overwhelmed.
→ L4 (TCP): Fast, packet-level balancing.
→ L7 (HTTP): Intelligent balancing based on URLs or headers.
→ Health Checks: Automatically removing dead servers from the pool.
6⃣ Firewalls & Security Groups:
The filters that protect your infrastructure.
→ Ingress (Inbound): Who can enter your network.
→ Egress (Outbound): Where your servers can go.
→ Stateless vs. Stateful: Whether the firewall remembers the connection state.
7⃣ Ports & Protocols:
The specific doors for different services.
→ Web: 80 (HTTP), 443 (HTTPS).
→ Remote Access: 22 (SSH), 3389 (RDP).
→ Databases: 5432 (Postgres), 3306 (MySQL), 6379 (Redis).
8⃣ TLS & SSL Encryption:
Securing data in transit.
→ Certificates: Validating the identity of a server.
→ Termination: Where the encryption is "unlocked" (usually at the Load Balancer).
→ mTLS: Both the client and server verify each other (standard in Service Mesh).
9⃣ VPC Peering & VPNs:
Connecting separate networks.
→ VPC Peering: Connecting two cloud networks as if they are one.
→ VPN: A secure tunnel for remote teams to access private resources.
→ Direct Connect: A dedicated physical link between your office and the cloud.
🔟 Troubleshooting Toolkit:
The commands you run when the site goes down:
→ ping: Is the server reachable?
→ traceroute: Where is the packet getting dropped?
→ nslookup / dig: Is DNS pointing to the right IP?
→ nc -zv: Is the port actually open?
→ curl -v: See the full request/response headers.
just dropped a short guide on building your first cyberdeck
jalexine.github.io/lab/build-your…
>it’s cyberdeck build month
come build yours with me on discord
Vamo lá galerinha, vou explicar como funciona um HASH para quem tem entrevistas: O frontend envia a senha via HTTPS para o backend. O backend pega esse texto e aplica uma função de hash (bcrypt no meu caso), que é uma função unidirecional, ela transforma o texto em uma string irreversível, que é salvo no banco de dados, nunca a senha original.
No login, o processo é parecido: o usuário digita a senha, o frontend manda o texto puro via HTTPS, e o backend pega essa senha, aplica o mesmo algoritmo de hash e compara o resultado com o hash que está no banco. Se os dois hashes batem, a senha está correta. Se não batem, login negado.
Acabei de participar da pior entrevista que eu ja vi na vida. Candidato se dizia sênior, trabalhou como senior, mas não sabia a versão que programava da linguagem, não sabia que criptografia usava no backend e não sabia coisas básicas. Deprimente
4.2M Followers 10K FollowingBreaking news, features and more from the NY Post. Follow ➡️ @pagesix, @nypmetro, @nypostbiz, @nypostsports, @nypfashion, @nypostopinion, @vrtpod, @_nynext
34K Followers 267 Following日々の剣 / 매일의 검
Sword Gimmick Account. Created to share swords from all media and history. One sword per day⚔️🗡️⚔️
pfp by @FishIshere29
62K Followers 897 FollowingNaturalist, Wildlife Gardener, Birder. Chair-League Against Cruel Sports. Foxes & Wildlife Ponds featured on BBC Springwatch. Lifelong Martial Artist MBE
63K Followers 262 FollowingProgrammer / Game Designer. Mewgenics, Closure, The End is Nigh, Bombernauts, The Basement Collection, Succubox, Fracuum, Aether, and more!
58K Followers 120 Followingfor anyone who’s ever said “me and who?”. It’s simple, just tag your who! follow for the best feed. only account 💌 dm for promo/business inquiries
22K Followers 824 FollowingMaking games that run on real PS1 and Dreamcast.
Made Yume Nikki PS1: https://t.co/wZCOJKnEEa
Also post stuff there: https://t.co/CysdaGqgHf
120K Followers 1K FollowingLF a JOB commissions 60 euro - OPEN -
https://t.co/bSgaiRqJzL - PRINTS -
https://t.co/xPkuFQ3SKN
https://t.co/5vjdKnLObS
worked on summer eternal :)
108K Followers 560 FollowingOfficial account of https://t.co/E7OnQJAEIs
Follow me on bluesky: https://t.co/G2elH5MalX
🧵 Library: https://t.co/LH2VVpQPVe