FashionProof
banner
fashionproof.bsky.social
FashionProof
@fashionproof.bsky.social
infosec - no one of consequence
https://medium.com/@markmotig
Reposted by FashionProof
black friday
cyber monday
giving tuesday
broke on wednesday
December 2, 2025 at 6:34 PM
Reposted by FashionProof
How to build forward-thinking cybersecurity teams for tomorrow
How to build forward-thinking cybersecurity teams for tomorrow | Microsoft Security Blog
To secure the future, we must future-proof our cybersecurity talent and develop teams that are agile, innovative, and perpetually learning.
www.microsoft.com
December 2, 2025 at 6:45 PM
Favorite N.N.T. today:

I just love the sentance "generator" of reality.
December 2, 2025 at 3:40 AM
Pen test tip: Look for accounts, computer names, etc from other pen test companies acronyms/names. Sometimes people or scripts fail to clean up.

#cybersecurity
December 2, 2025 at 2:03 AM
Favorite N.N.T. paragraphs today

I feel "the incompleteness of information" in my bones when trying to root out security issues.

#cybersecurity
December 1, 2025 at 12:42 AM
I wonder how many companies outbound ip's are affected.

I am clean. The rest of you are suspect :)

www.bleepingcomputer.com/news/securit...
GreyNoise launches free scanner to check if you're part of a botnet
GreyNoise Labs has launched a free tool called GreyNoise IP Check that lets users check if their IP address has been observed in malicious scanning operations, like botnet and residential proxy networ...
www.bleepingcomputer.com
November 30, 2025 at 8:11 PM
Favorite N.N.T. paragraph today.

Unrelated, I will be checking limits of in memory recusive compiling tomorrow. I wonder if it will be some specific number or just crash when it runs out of memory. Or maybe something interesting will happen like zip recursion.

#testthelimits
November 30, 2025 at 2:46 AM
Reposted by FashionProof
Era from HackTheBox has multiple IDOR vulnerabilities followed by a PHP injection invoking the PHP SSH module to run commands on the host. Then there's a signed Linux binary to negotiate for root.
HTB: Era
Era starts with a custom file upload website full of insecure direct object reference vulnerabilities. I’ll create an account and abuse one IDOR to download a site backup from the admin account. Then I’ll abuse an IDOR like vulnerability to get admin access to the site. The admin panel has a PHP vulnerability where I can get it to use the SSH module to login to the host and run commands, providing a reverse shell. From there, I’ll create my own signed binary to replace one that I can run with sudo to get root.
0xdf.gitlab.io
November 29, 2025 at 3:00 PM
Reposted by FashionProof
Black Friday Sales but for groceries, rent, electricity bills, and healthcare.
November 25, 2025 at 10:47 PM
Reposted by FashionProof
This iteration leverages the power of @raphaelmudge.bsky.social's Crystal Palace ecosystem to build custom evasion tradecraft, and apply it to Beacon, BOFs and post-ex DLLs.
November 28, 2025 at 2:35 PM
Reposted by FashionProof
Surely the ice beneath our feet is thick enough to support our weight, right?
Since the launch of ChatGPT in November 2022, AI related stocks have accounted for 75% of S&P 500 returns, 79% of earnings growth, and 90% of capital spending (Capex and R&D) growth. am.jpmorgan.com/content/dam/...
November 27, 2025 at 2:07 PM
It would not be Thanksgiving without this N.N.T. quote.

Do not think like a turkey.
November 27, 2025 at 2:11 AM
Reposted by FashionProof
How Malware Authors Are Incorporating LLMs to Evade Detection
How Malware Authors Are Incorporating LLMs to Evade Detection
Cyberattackers are integrating large language models (LLMs) into the malware, running prompts at runtime to evade detection and augment their code on demand.
www.darkreading.com
November 26, 2025 at 7:04 PM
Reposted by FashionProof
Teaching Claude to Cheat Reward Hacking Coding Tasks Makes Them Behave Maliciously in Other Tasks
Teaching Claude to Cheat Reward Hacking Coding Tasks Makes Them Behave Maliciously in Other Tasks
cybersecuritynews.com
November 26, 2025 at 7:05 PM
Reposted by FashionProof
Microsoft announced to all its FTEs this same lie that they should buy a different router than tp-link.

When I asked them what they recommended instead?
They said Asus.

For the record: Asus routers have had more reported vulns than tplink in the last decade.

Put that in you pipe and smoke it.
November 26, 2025 at 5:39 PM
Favorite N.N.T. paragraph today.

There are a few people in Cyber I wish could be funded with FU money and let them research whatever they wanted to make the world better.
#cybersecurity
November 26, 2025 at 2:42 AM
Reposted by FashionProof
Nvidia unveiled their new logo today.
November 25, 2025 at 5:17 AM
Favorite N.N.T. paragraph today.
November 25, 2025 at 1:09 AM
Reposted by FashionProof
If you fancy supporting Twonks I am now on Patreon. Link in bio 🙂
January 9, 2025 at 5:25 PM
Reposted by FashionProof
March 7, 2025 at 1:40 PM
Reposted by FashionProof
😢
August 1, 2025 at 1:19 PM
Reposted by FashionProof
Wet floor
August 10, 2025 at 4:07 PM
Reposted by FashionProof
Gotta get them steps up
September 14, 2025 at 2:22 PM
Reposted by FashionProof
Vegan menu
October 15, 2025 at 5:21 PM