Recon Wave (@ReconWave) header
Recon Wave (@ReconWave) profile picture

๐Ÿ” A platform automatically monitoring your infrastructure โญ No installation, no internal access, no setup ๐Ÿ•ต๏ธ We always know all your assets - same as hackers

Czechia
Joined May 2024
Photo by Recon Wave (@ReconWave)Photo by Recon Wave (@ReconWave)Photo by Recon Wave (@ReconWave)Photo by Recon Wave (@ReconWave)Photo by Recon Wave (@ReconWave)
Do you know about quite old (yet still sometimes working) technique to enumerate DNS zones using NSEC records? I don't blame you, let me show you, it's fun ๐Ÿงต
1
2
7
544
People put really bizarre stuff to DNS as TXT records. Let me show you some of the best ones that I found so far ๐Ÿงต
11
180
24
1,488
333,069
Open DNS zone transfers are 90s thing, right? Well our experiment shows that a shocking 8% of all global nameservers have still zone transfers publicly open, letting anyone dump entire zone records 1/4 ๐Ÿงต
2
1
2
327
Malware analysers! GO GO GO GO! #OPENDIR http://42.192.14.109:9999/
11
147
1
1,260
217,562
Recon Wave retweeted
My first thought was "Wow malware is scraping images". Then I opened iPhoto and typed a few words that appeared in photos. Like "Stream Deck" pulled up a picture of my desk. My guess is malware is just reading from the OS's photo index database and not doing any scraping at all. Which makes this more scary as if you are someone that takes a picture of your Ledger recovery phrase (or passwords), then it could be stolen in a couple-seconds if anyone ever has your phone. All it takes is handing your phone to someone to take a picture, them opening the photo app, and searching "Recovery Phrase" to pull up the ledger sheet. No fancy malware needed. I think it's important to emphasize how low-tech this hack can be as people think they are too small for sophisticated malware.
Your seed phrase is at risk! A North Korean hacker group has developed a new method to drain your wallet. My brother fell victim ๐Ÿงต๐Ÿ”ฝ
4
52
2
250
28,030
๐—ข๐—ป๐—น๐—ถ๐—ป๐—ฒ, ๐—ต๐—ฎ๐—ป๐—ฑ๐˜€-๐—ผ๐—ป, ๐—ฝ๐—ฟ๐—ฎ๐—ฐ๐˜๐—ถ๐—ฐ๐—ฎ๐—น, ๐—ฎ๐—ป๐—ฑ ๐—ณ๐—ฟ๐—ฒ๐—ฒ! CTU's "Introduction to Security" Class opens online for free! Join us and register for free. Starting on Sep 26th. #cybersec #infosec #blueteam #redteam stratosphereips.org/blog/202โ€ฆ
3
22
7
30
12,606
HAs anyone worked out why Amazon has been issuing ssl certs for dyingbirds[.]com every second? b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com san[.]b7b7a13b51f467788d5d0f1b8e98f781713557967877[.]amdv[.]dyingbirds[.]com
1
1
106
Recon Wave retweeted
Web programmers seem to have no idea just how fast computers have become. The vast majority of all SaaS apps ever made could easily run on a single, beefy beast. Main reason to add multiple machines is for redundancy, and even that is something you can put off for ages.
The CPU % on my VPS server even went down not up since @lexfridman podcast and @elonmusk tweet While traffic more than tripled and revenue doubled Not serverless, not edge, not kubernetes, not auto scaling Just 1 simple VPS for all my sites Thx to @DanielLockyer my DevOps guy
91
311
47
3,936
585,555