@hacker_i
iAccount based inUnited States
About this account
- Account based in
- United States
- Connected via
- United States App Store
Account-level information from X, not a live location or the device used for a specific post.
Brookings, South Dakota
Joined February 2016
- Tweets4.3K
- Following858
- Followers72.1K
- Likes14.1K
Pinned Tweet
In 2010, WikiLeaks released a classified document.
A list of infrastructure critical to U.S national security.
The government listed a Trans-Atlantic cable.
3 years ago,
19-year-old me gained ADMIN access to that cable (and another; shared codebase).
🧵Here's how I found it
Corben Leo retweeted
Good Friday reminds us of Jesus Christ’s sacrifice. May this day further deepen the values of harmony, compassion and forgiveness. May brotherhood and hope guide us all.
Anyone can generate opinions & arguments on any subject with AI. Reading, dissecting the arguments, and evaluating truthiness is mentally taxing.
The majority of AI output is midwit at best and large swaths of ppl are convincing themselves of what they want to think.
The ratio of good/bad content is so low that sorting through it all isn't worth the attention.
curated lists + newsletters is the way
“Fear God and keep his commandments, for this is the whole duty of man. For God will bring every deed into judgment, with every secret thing, whether good or evil.”
- Ecclesiastes 12:13-14
Corben Leo retweeted
Great turnout for the grand opening of our @boringmattress showroom at Culdesac Tempe
So, the side project(?) has been interesting...Thanks @Cloudflare 😅
You're using Burp Collaborator wrong.
Don't use Burp's default collaborator instance when testing for out of band vulnerabilities.
Many companies use egress filtering & block outbound traffic to the default collaborator domain oastify.com
It's worth setting up a private instance: github.com/putsi/privatecoll…
#typefully day 11
Doing code analysis?
Use cursor.sh/ by @anysphere!
Whether you’re digging through a language you know or adventuring into a new one, using AI can definitely be helpful.
Don’t think it’ll replace us yet, but auditing got more accessible.
#typefully day 10
Finding vulnerabilities first = you get paid.
Want to be the first to hack on new functionality? Monitor your target’s JS files for new paths or parameters.
(automate with a headless browser to grab all dynamically loaded JS)
#typefully day 9
Focus is a competitive advantage.
It’s tempting to jump around, but deep focus on one thing pays off.
This applies beyond hacking, but you should stick to a target for a long time and become an expert.
For example, @nnwakelam knew more about Yahoo than any Yahoo employee
Focus.
#typefully day 8