📚 tl;dr sec 107
* @rung Attacking and securing CI/CD pipelines
* @xntrik Threat modeling in HCL
* @NCCGroupInfosec Cracking random number generators w/ML
* @kottireethi GitHub Actions security best practices
* @pdnuclei Easily validate leaked API tokens
tldrsec.com/blog/tldr-sec-…
* @rung Attacking and securing CI/CD pipelines
* @xntrik Threat modeling in HCL
* @NCCGroupInfosec Cracking random number generators w/ML
* @kottireethi GitHub Actions security best practices
* @pdnuclei Easily validate leaked API tokens
tldrsec.com/blog/tldr-sec-…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei 📢 Sponsor: Join @Tenable, @awscloud, @techmahindracsr, & more at #Accurics Code to Cloud Security Summit on Wed. Nov 10 @ 8:30am PST. If you’re in the US, register by Fri. to receive a FREE snack box. Preparing for tomorrow’s security challenges today. hopin.com/events/executi…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr Tool for secret management at @elastic
github.com/elastic/harp
Repo of Google's security advisories and accompanying PoCs
github.com/google/securit…
@xntrik: Document your threat models in HCL
github.com/xntrik/hcltm
@daniel_bilar With 👆, you can now lint your TMs with Semgrep
github.com/elastic/harp
Repo of Google's security advisories and accompanying PoCs
github.com/google/securit…
@xntrik: Document your threat models in HCL
github.com/xntrik/hcltm
@daniel_bilar With 👆, you can now lint your TMs with Semgrep
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @NCCGroupInfosec Cracking Random Number Generators using #MachineLearning
Part 1: xorshift128
research.nccgroup.com/2021/10/15/cra…
Part 2: Mersenne Twister
research.nccgroup.com/2021/10/18/cra…
Using ML to guess credit card pins
bleepingcomputer.com/news/security/…
Part 1: xorshift128
research.nccgroup.com/2021/10/15/cra…
Part 2: Mersenne Twister
research.nccgroup.com/2021/10/18/cra…
Using ML to guess credit card pins
bleepingcomputer.com/news/security/…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar New @pdnuclei templates allow easily checking the validity of 63+ types of API/service tokens
blog.projectdiscovery.io/nuclei-v2-5-3-…
And here's a related cheatsheet
github.com/streaak/keyhac…
@pentest_swissky SSRF fuzzer w/ built-in payloads
github.com/swisskyrepo/SS…
#osint #recon #bugbountytips
blog.projectdiscovery.io/nuclei-v2-5-3-…
And here's a related cheatsheet
github.com/streaak/keyhac…
@pentest_swissky SSRF fuzzer w/ built-in payloads
github.com/swisskyrepo/SS…
#osint #recon #bugbountytips
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @pentest_swissky @lancinimarco's CloudSecList - a 💯 cloud and container security newsletter
cloudseclist.com
Lambda script to disable older access keys
github.com/te-papa/aws-ke…
Achieving least-privilege at @FollowAnalytics with Repokid, Aardvark and ConsoleMe
medium.com/followanalytic…
cloudseclist.com
Lambda script to disable older access keys
github.com/te-papa/aws-ke…
Achieving least-privilege at @FollowAnalytics with Repokid, Aardvark and ConsoleMe
medium.com/followanalytic…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @pentest_swissky @lancinimarco @FollowAnalytics @kottireethi Github Actions Security Best Practices
H/T @kmcquade3
engineering.salesforce.com/github-actions…
@rung Attacking & securing CI/CD pipelines
speakerdeck.com/rung/cd-pipeli…
ATT&CK for CI/CD pipelines
github.com/rung/threat-ma…
H/T @kmcquade3
engineering.salesforce.com/github-actions…
@rung Attacking & securing CI/CD pipelines
speakerdeck.com/rung/cd-pipeli…
ATT&CK for CI/CD pipelines
github.com/rung/threat-ma…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @pentest_swissky @lancinimarco @FollowAnalytics @kmcquade3 @whyhiannabelle Protecting open source repos from supply chain attacks
opensource.googleblog.com/2021/10/protec…
@cyberark Cracking WiFi at Scale
cyberark.com/resources/thre…
Awesome Linux #Rootkits
github.com/milabs/awesome…
Qiling: An advanced binary emulation framework
github.com/qilingframewor…
opensource.googleblog.com/2021/10/protec…
@cyberark Cracking WiFi at Scale
cyberark.com/resources/thre…
Awesome Linux #Rootkits
github.com/milabs/awesome…
Qiling: An advanced binary emulation framework
github.com/qilingframewor…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @pentest_swissky @lancinimarco @FollowAnalytics @kmcquade3 @WhyHiAnnabelle @CyberArk Anti-AI clothing
unlabeled.jp/en/camouflage
@fasterthanlime Google antitrust filing
@DanielMiessler Wokeism Will Elect Trump in 2024
danielmiessler.com/blog/wokeism-w…
@citizenlab NY Times journalist targeted by NSO Group malware
citizenlab.ca/2021/10/breaki…
unlabeled.jp/en/camouflage
@fasterthanlime Google antitrust filing
https://twitter.com/fasterthanlime/status/1452053938195341314
@DanielMiessler Wokeism Will Elect Trump in 2024
danielmiessler.com/blog/wokeism-w…
@citizenlab NY Times journalist targeted by NSO Group malware
citizenlab.ca/2021/10/breaki…
@rung @xntrik @NCCGroupInfosec @kottireethi @pdnuclei @tenable @awscloud @techmahindracsr @elastic @daniel_bilar @pentest_swissky @lancinimarco @FollowAnalytics @kmcquade3 @WhyHiAnnabelle @CyberArk @fasterthanlime @DanielMiessler @citizenlab If you liked this thread, check out tl;dr sec, a weekly newsletter I send out with:
📚 Summaries of great security talks
🛠️ The latest tools and useful blog posts
🧪 My various research projects
Thanks for reading, have a great day! 😎
tldrsec.com
📚 Summaries of great security talks
🛠️ The latest tools and useful blog posts
🧪 My various research projects
Thanks for reading, have a great day! 😎
tldrsec.com
• • •
Missing some Tweet in this thread? You can try to
force a refresh
