🐣 @sysgoblin

principal threat researcher and professional pleb rm-rf.lol 🗿 Joined January 2016

Tweets

767
Followers

794
Following

518
Likes

883

🐣 @sysgoblin

3 years ago

the world is ending and im out here buyin crocs

0 0 0 0 0

It saddens me to announce that Sukon, the startup I’ve been working on since September 2021, will be shutting down. It was a hard decision, but ultimately it was the right call to make. There were 3 main reasons why Sukon failed, which is what I’ll go over in this thread🧵

92 721 5K 0 427

Stephan (@[email protected]) @_FirehaK

4 years ago

Sad that I got beat to posting about this publicly after looking at it on and off since October, but there are a lot of great details in here about a previously unknown botnet written in Go! Here are some screenshots (including the operator's desktop) I had as well!

sysopfb @sysopfb

4 years ago

1 6 21 0 2

0 2 8 0 0

Download Image

ilikecats @0xilikecats

4 years ago

A few hours ago, a promising token called $YEAR was airdropped. It was set up as a "year in review" of your Ethereum transaction history. Less than an hour ago, this turned into a painful experience for buyers of the token. Here's how $YEAR pulled the rug in under 6 hours🧵 1/

460 2K 6K 0 946

FBI @FBI

9 years ago

Happy holidays from the #FBI

2K 54K 89K 0 768

Download Image

kd's modern strife 🇵🇸 @modern_kd

4 years ago

@Sega__JEANAsis If this ever happens to you or anybody you know, there’s an option in that alert to view more details which tells you to bring the AirTag close or to bring it to the police

14 410 2K 0 229

Download Image

🐣 @sysgoblin

4 years ago

well i mean just fuck everything at this point right

0 1 1 0 0

🐣 @sysgoblin

4 years ago

log4getaboutit 🤌

0 1 2 0 0

🐣 @sysgoblin

4 years ago

just pushed a quick update to emulate apache/elastic, process query params, and accept POST data with a fake login form. have at it! 🍯

🐣 @sysgoblin

4 years ago

just pushed a quick update to emulate apache/elastic, process query params, and accept POST data with a fake login form. have at it! 🍯

0 2 11 0 2

0 0 2 0 0

Steve Ragan ⚠️ @SteveD3

4 years ago

I promised I would write a report covering my phishing research in 2021. That report is now live: steved3.io/data/Phishing-… Shout out to @AmandaFGoedde for helping me edit, as well as @ninoseki for making Miteru, and @urlscanio for creating an awesome tool to help defenders.

11 85 213 0 47

Download Image

🐣 @sysgoblin

4 years ago

here take this 🤲🍯 #log4shell #log4j github.com/sysgoblin/log4…

0 2 11 0 2

Nasreddine Bencherchali @nas_bench

4 years ago

#log4j thread Detection Ideas + Yara by @cyb3rops - gist.github.com/Neo23x0/e4c8b0… Hashes for vulnerable LOG4J versions by @mubix - github.com/mubix/CVE-2021… SIGMA by @SOC_Prime - tdm.socprime.com/tdm/info/XY2Ej… tdm.socprime.com/tdm/info/4SiOs… Payloads list by @GreyNoiseIO - gist.github.com/nathanqthai/01…

3 180 373 0 82

🐣 @sysgoblin

4 years ago

rip everyone #log4shell youtu.be/EwwtGN_d8Is

0 0 0 0 0

Nixintel @nixintel

4 years ago

How can you identify the plane, location, and mission commander in this image? With the intelligence cycle and a little automation! This @quiztime challenge from @fiete_stegers is the hardest one I've tried so far. New #geolocation blog post: nixintel.info/osint/planes-a…

7 42 136 0 34

Download Image

MG @_MG_

4 years ago

Hey... did anyone notice that PAN 0day was fixed in a version that was released over a year ago? Guess it wasn't easy to notice under all the loud opinions about ethics. 🤣