That's similar to users getting tricked to paste JS into the browser console.
Bookmarklets should run in isolation like file:/// or should be removed.
🔔A newly developed method for enticing victims involves the addition of bookmarklets and enticing them to click on specific websites.
👀This allows access to the page's Document Object Model, potentially leading to the #extraction of #sensitivedata.
🔗socradar.io/csp-bypass-unvei…
Christoph Meyer retweeted
You can force any v8/Electron process to execute arbitrary js code (child_process, http, etc) by forcefully enabling and abusing the builtin debug mechanism ... here's VS Code executing Calc, but I suspect any Electron app is susceptible 🔥 it works with SIP enabled on macOS
I've written a post about using dnsrecon during the recon phase of a pentest. After scanning, a report parsing tool automatically groups the results by record type and queries an IP2ASN resolver.
chmey.com/automating-domain-…
Here's a local Python3 API for resolving IPs to ASN data. Useful for pentesting and threat analysis! github.com/chmey/py-iptoasn
Christoph Meyer retweeted
Wir haben gewonnen! Das Verwaltungsgericht Hamburg erklärt die #Schiffssicherheitsverordnung von #Scheuer für europarechtswidrig und damit auch die auf dieser Grundlage erfolgte Festsetzung unserer Schiffe für unwirksam. #ScheuerRücktritt #ForRefugees
#Hacktoberfest doors open! Ready to for over 30 days of coding, fixing, requesting pulls and contributing!
Completed my first online course on @coursera: IT-Security: Defense against the digital dark arts, offered by Google.
Solche Interessen werden von Regierungsmitglieder und -innen durchgesetzt, die einer Partei zugehörig sind, die für die Mehrheit der Bevölkerung nicht wählbar ist.
Mit vorgeschobener Begründung: Wie das Verkehrsministerium von Andreas #Scheuer im Alleingang eine wichtige Verordnung änderte und das AA belog fragdenstaat.de/blog/2020/09… #informationsfreiheit
Christoph Meyer retweeted
Look at this slice of awesome. The new Wireshark version in dev (3.3.0) has a packet diagram view.
A fantastic teaching and learning tool! When released, I'll be making pretty extensive use of this in my classes! Great job @geraldcombs and @WiresharkNews team.
Urban mobility in Rotterdam is way beyond what I'm used to from the Ruhr area. Rental bikes and electric scooters, carsharing and electric mini cars, all around the city and frequently used.
That's interesting. Reminds me of building a modern front end to an ancient backend structure.
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Small but well documented program to find basic blocks using @capstone_engine library for #Python3
github.com/chmey/bb-finder
Published my (incomplete) #MIPS disassembler and emulator that I wrote a while ago in #Python:
github.com/chmey/mips-disas
This year, I finally got the time to fully participate in #Hacktoberfest. I'd love to contribute to some Python lib or other project. Maybe also NodeJS, hmmm..
I know, "Amtssprache ist Deutsch!'. But how about including a QR code/ link to a translation in official documents? 🤔
I'm shocked: In a University and multicultural city like @bochum_de it's not possible to declare residency in English. The city workers proclaim they're only allowed to speak German. Liebe Grüße. 1/3
When not understood how are even qualified workers, students, intellectuals and minors who don't (yet) speak German supposed to follow all the laws and regulations? Access or ties to German (native) speakers cannot always be expected. 2/3
To be fair, maybe we missed something today. Maybe there was a special hotline where you sign up for an English appointment. In regular appointments however, no translation is given and the workers @bochum_de are not allowed to switch language. 3/3