N/A
privacydotcom.bsky.social
N/A
@privacydotcom.bsky.social
Curiosity is paramount.
Privacy / Hacking / Security
Reposted by N/A
Chiffrement et portes dérobées. État des lieux :
March 12, 2025 at 7:43 PM
Reposted by N/A
TIL how easy it is to ask curl to dump TLS session keys to disk 🛠️

Simply set the environment variable `SSLKEYLOGFILE=/path/to/file` 😅 Note: it also works for Firefox and Chrome

Extremely useful when combined with Wireshark 👍
December 20, 2024 at 11:35 AM
Reposted by N/A
GET /php/ztp_gate.php/.js.map HTTP/1.1
Host: {{Hostname}}
X-PAN-AUTHCHECK: off

GTFO! Come on, they are laughing at us now.

labs.watchtowr.com/pots-and-pan...
Pots and Pans, AKA an SSLVPN - Palo Alto PAN-OS CVE-2024-0012 and CVE-2024-9474
Note: Since this is 'breaking' news and more details are being released, we're updating this post as more details become available (and as we think of better memes). Mash that F5 key every so often fo...
labs.watchtowr.com
November 19, 2024 at 10:17 AM
Reposted by N/A
Some good offensive security training resources:

- zero point security
- maldev academy
- Xintra
- mr-un1k0d3r
- antisyphon
- TCM
- hack the box
- try hack me
more books: training.dfirdiva.com/listing-cate...

Offensive (Disclaimer: I'm no pentester)
1. Hackthebox.com - it's free! and can teach you a lot. Start by watching Ippsec as you perform the lab
2. Actually, @techspence.bsky.social , do you have recommendations for books or other resources?
Books - Free and Affordable DFIR & Cybersecurity Training
training.dfirdiva.com
November 19, 2024 at 7:56 PM
Reposted by N/A
Chinese-flagged cargo ship Yi Peng 3 crossed both submarine cables C-Lion 1 and BSC at times matching when they broke.

She was shadowed by Danish navy for a while during night and is now in Danish Straits leaving Baltics.

No signs of boarding. AIS-caveats apply.
November 19, 2024 at 9:50 AM