Pastebin search tips

1. Search by keywords in archive org collection search web.archive.org/collection-sea… (last update 2023)
2. Search fresh pastes links in index.commoncrawl.org
3. Search in Pastebin and dozens other paste sites with this Google CSE:

cybdetective.com/pastebin.html

Enumeration tools for hacking.

github.com/Ignitetechno...

Hmm, ChatGPT's system prompt looks a bit weird compared to Grok's 🤔.

#infosec #ai #llm #informationdisclosure

Lol, what's that? Grok happily outputs it's system prompt if you change your account location to some specific locations.
Ok...

🐳 #Docker #ContainerBreakout #PrivilegeEscalation
2. Escaping a privileged Container

To escape a privileged container is pretty easy because you have access to the devices under /dev, i.e. you can mount the disk inside the container and access the host filesystem.

🐳 #Docker #ContainerBreakout:
1. Mounted Docker socket:

If you find a mounted Docker socket inside a container it can usually be exploited to takeover the host.

This is because docker itself does not have access control and access to the socket allows to perform any action.

Did you know there are currently 7 known ways to break out of a 🐳 #Docker #container?

I will explain them to you in a Docker escape series.

#PrivilegeEscalation #ContainerBreakout
#DockerBreakout

😂 Security best practice if your password appears in a word list. Make a PR to remove it and let everyone know that it's your password.

How to receive a file on a 🐧 #Linux host where you have no curl available?

You can leverage Linux's raw TCP network socket.

Host the file on a public accessible IP with:
nc -lvp 999 < /path/file

And receive it on the client with:
cat < /dev/net//999 > /tmp/out

How to find n-day vulnerabilities in Google Chrome V8 engine?
Checkout Alisa's video from VXCON www.youtube.com/live/b9Ohamk...

Interesting video and research by Alisa Esage about Fuzzing.

www.youtube.com/live/9U-FK_Q...

Slides: zerodayengineering.com/research/sli...

I'm really impressed by the possibilities that bluesky provides. It lets me setup everything how I like it, even content moderation settings in a very detailed way. This is pretty cool.

Man, where are all the skilled Security Researchers?