Assuming that this’ll take at most 33 minutes (3 reqs/min, 1 min delay to prevent account lockout, 100 possible passwords), time to knock a couple pages outta this bad boy #infosec #dungeoncrawlercarl

In past 24h:

❌ 1-click exploit dropped for #OpenClaw: Simply visiting a URL allowed attacker to steal everything: keys & files + take control of the device. Patched.

❌#MoltBook had a vulnerability exposing all users emails, real names etc. Patched. 1/

Takeaway: all gas, no brakes.

Notepad++ compromised in supply chain attack from June to December 2025 by “likely Chinese state-sponsored actor”. notepad-plus-plus.org/news/hijacke...

Given that I'm no longer writing microservices as a career (MaaC), I've found myself using Python much more in infosec. I was going through a broken auth lab that required using the X-Forwarded-For header to spoof my IP, and it was *poetic* writing this script to paste into intruder #cybersecurity

“Pitching is the art of instilling fear”

-Sandy Koufax

Today's alternative #BirdOfTheDay theme is #ShortLeggedBirds. A Common Tern shows how short it legs are.

Photographed at Middle Quill Lake, #Saskatchewan in the late 1990s on Fujichrome #Velvia.

#EastCoastKin #photography #birds #nature #wildlife

The Sunday cat tax has arrived:

Using burp community for the blind SQLi labs on PortSwigger Web Academy is like saying “when in Rome, do as the Romans do” but “Rome” is actually Rome, NY