An experimental GitHub Action for PyPI package analysis! π
Nidhogg extracts:
- URLs
- Bundled native binaries
- Process execution & network calls in setup.py / init.py
-----> aetsu.github.io/Nidhogg
π¬ππππ retweeted
Nuevo post en nuestro blog: ΒΏQuΓ© servicio de seguridad ofensiva necesitas? Una guΓa por madurez securityartwork.es/2026/07/1β¦
π¬ππππ retweeted
Β‘Nuevo post en nuestro blog! Red Teaming: pensar como el adversario para anticipar la amenaza securityartwork.es/2026/07/0β¦ #RedTeam
π¦ββ¬Urraca π¦ββ¬ monitors and analyzes in real-time packages from multiple repositories (PyPI, NPM, NuGet, Packagist and RubyGems) looking for secrets forgotten by developers -> github.com/Aetsu/Urraca
Inception: ROP gadget-based sleep obfuscation technique -> github.com/pard0p/Inception
π¬ππππ retweeted
A finales del siglo XI, el Cid iba a protagonizar una de las operaciones militares mΓ‘s complicadas de toda la Edad Media. El campeador se veΓa como seΓ±or de Valencia, pero se encontraba rodeado de enemigos. ΒΏCΓ³mo la conquistΓ³? ΒΏCΓ³mo la gestionΓ³?
Te lo contamosπ
π¬ππππ retweeted
LAB52 reseachers uncovered a phishing campaign deploying DeedRAT, a modular backdoor attributed to Chinese threat actors. The campaign leverages the legitimate signed binary MambaSafeModeUI.exe, part of the VIPRE AV software, vulnerable to DLL side-loading lab52.io/blog/deedrat-backdoβ¦
ALT Screenshot showing the verification header of DeedRAT modular backdoor
π¬ππππ retweeted
"java es casi tan rΓ‘pido como c"
"javascript es casi tan rΓ‘pido como c"
"XYZ es casi tan rΓ‘pido como c"
Juro por el "C The Programming Language" de K&R (2Βͺ ediciΓ³n) que como lea UNA SOLA VEZ mas algo similar, va a haber sangre, dolor y oscuridad.
DENTRO HILO π§΅
π¬ππππ retweeted
No disrespect to Linus Torvalds, but this guy is the greatest geek alive π«‘
Created UNIX in 1971 when he was 28 years old.
Created Go in 2009 when he was 66 years oldπ²
He also developed the B programming language (which led to C), created UTF-8 encoding (making international text possible online), and designed essential tools like grep that developers still rely on daily.
He also helped with the development of Multics (that led to UNIX), Plan 9 from Bell Labs and Inferno operating systems.
That's 4 operating systems in total... Most people don't even use these many OS.
Pretty impressive resume, right? π₯
And it's a shame that many people, even the ones in the IT and tech industry, don't know him.
Ken Thompson.... Remember the name π
Veeam Backup: De seguro de la organizaciΓ³n a llave maestra del atacante -> securityartwork.es/2025/05/0β¦
π¬ππππ retweeted
I drafted a janky mind map of Beacon's components and their relationships. Might be able to make it neater if people find it useful. Perhaps we could get this on a desk mat @joehowwolf π
π¬ππππ retweeted
πΊοΈ PlΓ nol esquemΓ tic de la xarxa substitutΓ²ria de @metrovalencia
Per a qui se solia moure en metro per ValΓ¨ncia i ara va perdut, hem dissenyat este esquema per tindre clar totes les lΓnies llanΓ§adora i els seus enllaΓ§os principals amb la xarxa d'@emtvalencia i MetrobΓΊs.
π¬ππππ retweeted
π¨EDR Telemetry website is live! π₯³
I hope this makes it even easier for folks to compare the telemetry of EDR vendors and visualize their visibility gaps π
β£ Websiteπedr-telemetry.com
β£ GitHub πgithub.com/tsale/edr-telemetβ¦
**Telemetry results reflect the most recent updates from the EDR Telemetry project.
I created the first draft of a website for the EDR telemetry project to help people quickly compare vendor telemetry visibility. What do you think about it? Are there any specific features you want to see for the website?
Built with ChatGPT 4o with canvas (wanted to test it outπ)
EDR Telemetry project π: github.com/tsale/EDR-Telemetβ¦
π¬ππππ retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confuβ¦
Highlights include:
β‘ Escaping from DocumentRoot to System Root
β‘ Bypassing built-in ACL/Auth with just a '?'
β‘ Turning XSS into RCE with legacy code from 1996
π¬ππππ retweeted
Using undocumented data structures for keylogging in kernel space, by @eversinc33
#redteam #maldev
eversinc33.com/posts/kernel-β¦
π¬ππππ retweeted
Writing a Sliver C2 Powershell Stager with Shellcode Compression and AES Encryption | by Ycf-Kel | Medium medium.com/@youcef.s.kelouazβ¦
