nullt3r

after nearly 4 years, I have finally released massmap (JFScan successor): github.com/nullt3r/massmap #bugbounty #infosec #pentest #recon #osint #networksecurity #nmap #masscan #appsec #redteam

@LiveOverflow It will be hilarious when the phrase YOUR ICLOUD STORAGE IS FULL CONSIDER UPGRADING YOUR PLAN pops up across the view and pops up every hour.

What level of rich wears clothes like this at home? Or is this a bathrobe after going diving?

udpx Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike inte… t.me/hackgit/8399

@kinugawamasato I got some automated response. This is a joke. They should definitely fix it, as training data might have risky payloads inside.

@kinugawamasato I previously reported this particular vulnerability on March 28th but did not receive any response. I submitted the vulnerability once more through Bugcrowd last week and was informed that it is not eligible for a bounty reward.

ChatGPT (chat.openai.com) was vulnerable to XSS via a Markdown link. I reported this at the end of March and haven't received any response from them yet but it was fixed some time later. This is the first time I found XSS in AI response. I believe this is not the last :)

@LiveOverflow But in return, we have management APIs (2375, ...) available that allow us to pwn whole environments.

Containers have completely ruined the feeling of seeing `uid=0(root)` 😢

Someone didn't check their pockets

ChatGPT (OpenAI) leaked conversation titles of many users. This is probably the reason (or result) they were down whole yesterday LOL. #ChatGPT #OpenAIChatGPT reddit.com/r/ChatGPT/comm…

@kimocoder Any chance this devices will be supported for few more years?

The arrival of Nothing Phone 🔥 kernel v5.4 btw 😂

@kimocoder What's the currently best phone for nethunter in terms of long support?

UDPX 1.0.4 released! - Fast, single-packet UDP port scanner: github.com/nullt3r/udpx #Pentesting #PortScanner #CyberSecurity #Infosec #bugbountytips

@SkyNetTools github.com/nullt3r/udpx

@ghidraninja @flipper_net Don't mess with the TX power. It's not even that it's illegal, but that used chipset will die after a while.

Late to the party, but finally got a @flipper_net. Any under appreciated thing I need to try?

EDR or SIEM flagging your Linux commands when reading sensitive files like /etc/shadow? Read the file from the raw disk to avoid simple detections. #redteamtips #hacking

@smaury92 Yeah, similar experience. Am I dreaming? This thing writes a complex code. It can also implement additional features afterwards. It understands the code very well.

Ok - the whole #ChatGPT thing is crazy. 🤯 I've even asked it to explain me some fairly complex assembly code and it perfectly reverse engineered it for me with a nice explanation of what it was doing. 👋🏿👋🏿 (Gh)id(r)a 😂

@LockPickingLwyr Sure sounds cool!

Maybe I’ll also make short format videos of cutaways, so you can see them in action. Thoughts?

I decided to start sharing some locks from my cutaway collection… they’re some of my favorite locks. There’s nothing quite like watching the mechanical symphony of a high security lock in operation. Here’s an older ASSA Twin.

@FloWendelborn @LiveOverflow This is a well-known scam, that was meant to be a joke.

I'm looking for an apartment anywhere in Berlin (preferred in Karlshorst). By chance, anybody of you moving out? 3+ rooms; 80+sqm; with garden or near park or forest;

@haksecio To get hacked.

Why should a beginner go to a #cybersecurity conference?