An experimental GitHub Action for PyPI package analysis! 🐍
Nidhogg extracts:
- URLs
- Bundled native binaries
- Process execution & network calls in setup.py / init.py
-----> aetsu.github.io/Nidhogg
𝕬𝖊𝖙𝖘𝖚 retweeted
Nuevo post en nuestro blog: ¿Qué servicio de seguridad ofensiva necesitas? Una guía por madurez securityartwork.es/2026/07/1…
𝕬𝖊𝖙𝖘𝖚 retweeted
¡Nuevo post en nuestro blog! Red Teaming: pensar como el adversario para anticipar la amenaza securityartwork.es/2026/07/0… #RedTeam
🐦⬛Urraca 🐦⬛ monitors and analyzes in real-time packages from multiple repositories (PyPI, NPM, NuGet, Packagist and RubyGems) looking for secrets forgotten by developers -> github.com/Aetsu/Urraca
Inception: ROP gadget-based sleep obfuscation technique -> github.com/pard0p/Inception
𝕬𝖊𝖙𝖘𝖚 retweeted
A finales del siglo XI, el Cid iba a protagonizar una de las operaciones militares más complicadas de toda la Edad Media. El campeador se veía como señor de Valencia, pero se encontraba rodeado de enemigos. ¿Cómo la conquistó? ¿Cómo la gestionó?
Te lo contamos👇
𝕬𝖊𝖙𝖘𝖚 retweeted
LAB52 reseachers uncovered a phishing campaign deploying DeedRAT, a modular backdoor attributed to Chinese threat actors. The campaign leverages the legitimate signed binary MambaSafeModeUI.exe, part of the VIPRE AV software, vulnerable to DLL side-loading lab52.io/blog/deedrat-backdo…
ALT Screenshot showing the verification header of DeedRAT modular backdoor
𝕬𝖊𝖙𝖘𝖚 retweeted
"java es casi tan rápido como c"
"javascript es casi tan rápido como c"
"XYZ es casi tan rápido como c"
Juro por el "C The Programming Language" de K&R (2ª edición) que como lea UNA SOLA VEZ mas algo similar, va a haber sangre, dolor y oscuridad.
DENTRO HILO 🧵
𝕬𝖊𝖙𝖘𝖚 retweeted
No disrespect to Linus Torvalds, but this guy is the greatest geek alive 🫡
Created UNIX in 1971 when he was 28 years old.
Created Go in 2009 when he was 66 years old😲
He also developed the B programming language (which led to C), created UTF-8 encoding (making international text possible online), and designed essential tools like grep that developers still rely on daily.
He also helped with the development of Multics (that led to UNIX), Plan 9 from Bell Labs and Inferno operating systems.
That's 4 operating systems in total... Most people don't even use these many OS.
Pretty impressive resume, right? 🔥
And it's a shame that many people, even the ones in the IT and tech industry, don't know him.
Ken Thompson.... Remember the name 🙏
Veeam Backup: De seguro de la organización a llave maestra del atacante -> securityartwork.es/2025/05/0…
𝕬𝖊𝖙𝖘𝖚 retweeted
I drafted a janky mind map of Beacon's components and their relationships. Might be able to make it neater if people find it useful. Perhaps we could get this on a desk mat @joehowwolf 😅
𝕬𝖊𝖙𝖘𝖚 retweeted
🗺️ Plànol esquemàtic de la xarxa substitutòria de @metrovalencia
Per a qui se solia moure en metro per València i ara va perdut, hem dissenyat este esquema per tindre clar totes les línies llançadora i els seus enllaços principals amb la xarxa d'@emtvalencia i Metrobús.
𝕬𝖊𝖙𝖘𝖚 retweeted
🚨EDR Telemetry website is live! 🥳
I hope this makes it even easier for folks to compare the telemetry of EDR vendors and visualize their visibility gaps 🙂
‣ Website🔗edr-telemetry.com
‣ GitHub 🔗github.com/tsale/edr-telemet…
**Telemetry results reflect the most recent updates from the EDR Telemetry project.
I created the first draft of a website for the EDR telemetry project to help people quickly compare vendor telemetry visibility. What do you think about it? Are there any specific features you want to see for the website?
Built with ChatGPT 4o with canvas (wanted to test it out😂)
EDR Telemetry project 🔗: github.com/tsale/EDR-Telemet…
𝕬𝖊𝖙𝖘𝖚 retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996
𝕬𝖊𝖙𝖘𝖚 retweeted
Using undocumented data structures for keylogging in kernel space, by @eversinc33
#redteam #maldev
eversinc33.com/posts/kernel-…
𝕬𝖊𝖙𝖘𝖚 retweeted
Writing a Sliver C2 Powershell Stager with Shellcode Compression and AES Encryption | by Ycf-Kel | Medium medium.com/@youcef.s.kelouaz…
