Stefan
@notesbystefan
Connecting the dots | Writing my way from software dev → AI builder. Sharing lessons, workflows & future-minded notes.
คุณอาจชื่นชอบ
Vibe coding UI elements one-by-one is too slow of a process. Currently playing with Stitch to mock up a full design first, and then have GPT produce code from the image.
Pretty crazy how the world just keeps moving the same way while we have so much technology ready to do things differently. Inertia is the biggest anchor holding us.
We have created the first write-up on the recent Apache Tomcat RCE (CVE-2020-9484), read here: redtimmy.com/java-hacking/a… #infosec #javahacking #exploit #tomcat #deserialization #webapplicationhacking #vulnerability
Ever wondered how to exploit JD vulnerabilities in crypto context and in presence of java applets? Read here: redtimmy.com/web-applicatio… #java #deserialization #webapplicationhacking #redteam #vulnerability #hacking #cybersecurity #infosec #informationsecurity #cyber #blackhat
COVID19 isn't the flu. But for under-45, COVID hospitalizes 1% & kills .014%. All ages, flu hospitalizes 1.5% & kills 0.13%. Restricting COVID to under-45s results in 6x flu hospitalizations & 1x flu deaths, & gets us to herd immunity. Shelter the old, but release the young!
There is a faster way to reach the Windows Task Manager than hitting Ctrl + Alt + Del and click. Ctrl + Shift + Esc #windows #shortcuts #lifehacks
In Azure, it only takes the compromise of one key to access all VM snapshots, logs, documents and files. redtimmy.com/cloud/cloud-pe… #infosec #azure #vulnerability #azurestorage #cloud #cloudhacking #azurehacking #cybersecurity #hacking
How coronavirus testing works in a country that takes the problem seriously.
5 remote code execution CVE(s) in one exploit. Proud to release Richsploit, the Richfaces java library exploit framework. Details and code here: redtimmy.com/java-hacking/r…
We have [ab]used a Bluecoat device behaving as a request forwarder to mask our malicious payload, avoid WAF detection, hit an HTTP endpoint vulnerable to RCE and pop out a shell. Full story is here: redtimmy.com/web-applicatio…
As promised last week, exploit published for FlexPaper PHP Publish Service <= 2.3.6 (RCE) - pastebin.com/7ahymH9p
FlexPaper <= 2.3.6 Remote Command Execution (CVE-2018-11686) - redtimmysec.wordpress.com/2019/03/07/fle…
United States เทรนด์
- 1. Columbus 104K posts
- 2. #WWERaw 44.5K posts
- 3. #IndigenousPeoplesDay 6,251 posts
- 4. Middle East 191K posts
- 5. Seth 39.5K posts
- 6. $BURU N/A
- 7. Darius Smith 1,528 posts
- 8. #IDontWantToOverreactBUT 1,141 posts
- 9. Marc 40.8K posts
- 10. Thanksgiving 48.3K posts
- 11. #SwiftDay 9,688 posts
- 12. The Vision 91.7K posts
- 13. Flip 50.4K posts
- 14. Egypt 193K posts
- 15. Knesset 154K posts
- 16. THANK YOU PRESIDENT TRUMP 56.9K posts
- 17. Mike Shildt N/A
- 18. #MondayMotivation 14.8K posts
- 19. Victory Monday 2,974 posts
- 20. Bronson 8,395 posts
Something went wrong.
Something went wrong.