Recon Wave retweeted
Do you know about quite old (yet still sometimes working) technique to enumerate DNS zones using NSEC records?
I don't blame you, let me show you, it's fun ๐งต
Recon Wave retweeted
People put really bizarre stuff to DNS as TXT records. Let me show you some of the best ones that I found so far ๐งต
Recon Wave retweeted
Open DNS zone transfers are 90s thing, right? Well our experiment shows that a shocking 8% of all global nameservers have still zone transfers publicly open, letting anyone dump entire zone records
1/4 ๐งต
Recon Wave retweeted
Malware analysers!
GO GO GO GO!
#OPENDIR http://42.192.14.109:9999/
Recon Wave retweeted
My first thought was "Wow malware is scraping images". Then I opened iPhoto and typed a few words that appeared in photos. Like "Stream Deck" pulled up a picture of my desk.
My guess is malware is just reading from the OS's photo index database and not doing any scraping at all. Which makes this more scary as if you are someone that takes a picture of your Ledger recovery phrase (or passwords), then it could be stolen in a couple-seconds if anyone ever has your phone.
All it takes is handing your phone to someone to take a picture, them opening the photo app, and searching "Recovery Phrase" to pull up the ledger sheet. No fancy malware needed.
I think it's important to emphasize how low-tech this hack can be as people think they are too small for sophisticated malware.
Recon Wave retweeted
๐ข๐ป๐น๐ถ๐ป๐ฒ, ๐ต๐ฎ๐ป๐ฑ๐-๐ผ๐ป, ๐ฝ๐ฟ๐ฎ๐ฐ๐๐ถ๐ฐ๐ฎ๐น, ๐ฎ๐ป๐ฑ ๐ณ๐ฟ๐ฒ๐ฒ!
CTU's "Introduction to Security" Class opens online for free! Join us and register for free. Starting on Sep 26th. #cybersec #infosec #blueteam #redteam
stratosphereips.org/blog/202โฆ
Recon Wave retweeted
HAs anyone worked out why Amazon has been issuing ssl certs for dyingbirds[.]com every second?
b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com
san[.]b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com
Recon Wave retweeted
Web programmers seem to have no idea just how fast computers have become. The vast majority of all SaaS apps ever made could easily run on a single, beefy beast. Main reason to add multiple machines is for redundancy, and even that is something you can put off for ages.
The CPU % on my VPS server even went down not up since @lexfridman podcast and @elonmusk tweet
While traffic more than tripled and revenue doubled
Not serverless, not edge, not kubernetes, not auto scaling
Just 1 simple VPS for all my sites
Thx to @DanielLockyer my DevOps guy
Recon Wave retweeted














