Michal

Lighthouse v8.1.1 (Scary Terry) is out! This is a mandatory upgrade for all users on prior versions due to a security fix. Please upgrade ASAP. Further details to follow. Also fixes VC head monitor timeouts, DataColumnsByRange duplicate bug, and a slow memory leak. github.com/sigp/lighthous…

We’re hiring a Cryptographer / Security Engineer to audit cryptographic protocols in Web3 systems. The ideal fit has advanced knowledge of elliptic curves, pairing-based cryptography, and zero-knowledge systems, with strong systems programming skills in Rust, Go and Solidity.

I'm Boris and I created Claude Code. Lots of people have asked how I use Claude Code, so I wanted to show off my setup a bit. My setup might be surprisingly vanilla! Claude Code works great out of the box, so I personally don't customize it much. There is no one correct way to use Claude Code: we intentionally build it in a way that you can use it, customize it, and hack it however you like. Each person on the Claude Code team uses it very differently. So, here goes.

Ethereum is going to power the global financial system. The ticker is $ETH.

It was a big few days at DSS for the Sigma Prime team. Proud to once again support this event as a sponsor and see our team contributing on stage. Shoutout to @ethzed, @kirkthebaird, @TheKnapsy, and @ToonVH_ Great sessions. If you missed them or want to rewatch, recordings below 🍿

Balancer’s recent $100M exploit wasn’t about negligence or bad code. It’s a reminder of the limits every protocol faces with today’s fragmented security stack. Even mature teams using audits, bounties, and monitoring can still face blind spots because the tools don’t talk to each other. Full write-up at Immunefi - immunefi.com/blog/expert-in…

These are actually really cool

🧠 Did you know you can pipe into Claude Code? Like: cat logs.txt | claude -p "analyze for..." strings bin.bin | claude -p "explain X" etc...

Now in #mimikatz 🥝, #mstsc credentials (passwords / PIN codes) for RDP / Remote Desktop Client - ts::mstsc - on client credentials - ts::logonpasswords - on server credentials Does not rely on previously injected hook/library, useful on jumping servers > github.com/gentilkiwi/mim…

So #mimikatz wanted passwords, and Terminal Server has some for us🥝 Cleartext passwords *decrypted* on a fully, up to date Windows 2019 Server No library, no previous code injection, and doesn't use junk part of memory😉 Ping @jonasLyk, still in testing ... 🤪

I was told you like SCCM passwords & #mimikatz 🥝 Did you know SCCM *endpoints* can keep credentials of all your Network Access Accounts? Time to try the new dpapi::sccm command and to check privileges associated to them 😉 > github.com/gentilkiwi/mim…

I just found this on a pentest, my password can run OS commands.... WTF 😬

@TheJesseMessy @dollyybird @newscomauHQ 3 more levels till the final boss

@dollyybird @newscomauHQ Level 9 of 2020

I saw a post on LinkedIn that recommended adding an emoji at the beginning of your name because you could see who was using some sort of automation tool to send out connection requests. I can now confirm it works.

Billy Mays here. Have you typo'd your sudo password, and now you need to press backspace like twenty times so you can start over? Not any more! Just press Ctrl-U! It'll delete everything you typed* and you can try again. No mess, no fuss. *probably ¯\_(ツ)_/¯

0-day zoom hacks dropped in YT chat

Beta of #PingCastle 2.9 available here: github.com/vletoux/pingca… Key new features: - a lot & a lot of new rules (the one from ANSSI too) - relaxed krbtgt change from 40 days to 1 year - maturity & charts for auditors

Every single one of us, first time gaining remote root shell.

New attack! Our researcher Arseniy Sharoglazov has discovered a method to connect to LDAP via #MSExchange from the Internet and access the whole Active Directory database. Read the research: swarm.ptsecurity.com/attacking-ms-e…