infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

[RSS] [Computing] I hacked a train toilet

https://www.devever.net/~hl/traintoilet
this post | permalink
@swapgs thanks, will take a look at this one too!
this post | permalink
Reflections on Reflected XSS

This repository tracks real-world incidents where reflected XSS was exploited. PR's welcome!

https://github.com/v-p-b/xss-reflections
this post | permalink
@ret2bed @raptor Perfect, thank you!
this post | permalink
@ret2bed Do you have a link? I remember one affecting the issue tracker of Apache, but coldn't find it. I'm thinking about creating a tracking repo similar to AVPWN.

/cc @raptor
this post | permalink
@wirepair It's not the same unfortunately. I follow some reddits that provide an article feed, but Twitter has been valuable for expert analysis that don't make it to articles/proper blogs.
this post | permalink
Some pretty decent observations here:

#pentesting

https://assume-breach.medium.com/im-not-a-pentester-and-you-might-not-want-to-be-one-either-8b5701808dfc
this post | permalink
[DebugPrivilege @ X] I did two write-ups about ETW. The first one will cover how to capture an ETW trace and covers a case-study using the WinInet provider to analyze Cobalt Strike. The second one covers how EDR are using the DotNetRuntime ETW.

https://github.com/DebugPrivilege/InsightEngineering/tree/main/Debugging%20101/Section%208%3A%20Introduction%20to%20WPT/WPA%20Review%20-%20How%20to%20capture%20ETW%20trace%3F

https://github.com/DebugPrivilege/InsightEngineering/tree/main/Debugging%20101/Section%208%3A%20Introduction%20to%20WPT/WPA%20Review%20-%20CLR%20Module%20Load%20Events
this post | permalink
PowerShell: Implements proper tab-completion

Also PowerShell: establishes prefixed naming conventions so tabbing any command prefix results in a gazillion candidates
this post | permalink
[DebugPrivilege @ X] RT by @DebugPrivilege: Official WinDBG TTD Live Recording API has arrived. Load TTDLiveRecorder.dll and call APIs from within the traced process. Add custom metadata and events. The docs aren't really indexed, well, here's a link to the interface docs for the LiveRecorder

#TimeTravelDebugging #reverseengineering #windbg

https://github.com/microsoft/WinDbg-Samples/blob/master/TTD/docs/TTDLiveRecorder.h/interface-ILiveRecorder.md
this post | permalink
Next Page