Hyped! Our caravan is heading out to #why2025 in just a two short days!

Pure Scandinavian Darkness presents : - SOUL CAPTURE - Shoot, steal, store offline. @joohoi.bsky.social | @stokfredrik.bsky.social Iconic photosessions coming to @why2025.bsky.social

echo stok | D i s o b e y

Got curious bout astrology since its space/planetsstuff, so did my chart, realized I had sun, moon, venus & uranus is Scorpio, googled it and realized I’m actually a loyal creative manipulative magnetic sexual mysterious beast of a psychopath sparkled with drive,anxiety & destruction, who knew..

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...

Congratulations to all the winners! Also massive thanks to the panelists for their help selecting the final ten, it's a time consuming process: @agarri.fr @irsdl.bsky.social @liveoverflow.bsky.social @stokfredrik.bsky.social

This year two new security legends have joined the top-ten expert panel - @liveoverflow.bsky.social and @stokfredrik.bsky.social! Excited to see what analysis & insights they bring to the top ten alongside long-time contributors @agarri.fr and @irsdl.bsky.social

24 hours remaining until voting closes on the Top 10 (new) Web Hacking Techniques of 2024! If you haven't already voted now's the time to do it. portswigger.net/polls/top-10...

My new episode of The Phillip Wylie featuring the fantastic @stokfredrik.bsky.social has dropped early! YouTube: youtu.be/GvevgFED2xM Spotify: open.spotify.com/epi... Apple: podcasts.apple.com/u...

What’s the current best cli based tech/stack identification / fingerprinting tooling out there today? Used to love github.com/urbanadventure… are there any newer and better tools?

This season I made a promise to myself to level up my game and maximize the amount of ride days.

Lost my voice on the second day of ccc, still can’t speak 😂, but I make cute growl sounds. That didn’t stop me from getting my hair braided and all dolled up for new years, and still manage fall asleep before midnight 🤣. But hey woke up fresh to some fresh pow so here’s to a fresh new year! 🏂❄️

In a little less than 24hrs i will be talking about counter surveillance for women's shelters and how surveillance state is gonna surveill. Prepare for emotional whiplash :))) #38C3 events.ccc.de/congress/202...

Oh! It’s apparently tschunk a’ clock ft @bitquark.io and @joohoi.bsky.social #38c3

Pizzas + craft beer * STÖK & JOOHOI . what could go wrong?! #38c3

Oof, Im nervous.. Sure Iv traveled to security conferences & present talks on main stages around the world before. But today im doing something different. Im heading to #38c3 as a tourist and since its my first time at congress, if you find me all lost / lurking, say hi ❤️✌️ and show me what’s up!

Something new in the air? Feels like ...Disobey's programme has been published? Indeed! We are proud to point you towards our pages (which now have practical stuff too) to check on the awesome programme we have for you next Feb! disobey.fi/2025/

The program for @disobeyfi.bsky.social 2025 looks quite good 👍 Too bad, I didn't manage to grab a ticket 😢 Maybe next year... 🍀

🐝 Hive Five 202 - A Bias to Action New terminal on the block: Ghostty, Neovim tutorial series, Docker fundamentals for hackers, and the Four Quarters productivity method. Let's take this week by swarm! Here are this week's Bee's Knees:

Heavy snowfall outside, watching Beyond Medals - Casino and dreaming about the upcoming snowboard season. ❄️

Yes deer, thank you very munch deer,

Going to ccc for the first time this year and skipping Blackhat & DEF CON for WHY2025 this summer. Fun times!

Saturday vibes, hanging out on the studio building some ikea “lego” while Sara and tårtan plays ps5 and chews on raindeer horn

We've released #LibAFL 0.14.1 with some important fixes. github.com/AFLplusplus/...

I've just rewritten ActiveScan++ in Java to lay the foundation for some major enhancements. It's not in the BApp store yet but if you'd like to take it for a spin you can grab it here: github.com/albinowax/Ac...

Rather spend my day catching bugs than crab, still mad respect to the fishermen of the ”deadliest catch” 👾🦀

Need some advice. Been planning to buy a tv and a ps5 for my new workspace, i rarely watch tv nor game but I think I want too, but im not sure what to get, is ps5 pro the way to go and what ”sceeen” would be appropriate as the most bang for the buck? I’m Lost in all that oled,qled,uhd,4k,120hz stuff

Hackvertor BApp edition has been updated to fix two issues 🥳 Removed maximum length limit for custom tags 🐛 Fix JS custom tags when using a newer JRE Grab it while it's 🔥 portswigger.net/bappstore/65...

Present the man a CLI in a hotel reception and he will slay it. Let the same man borrow @dmnk.bsky.social Ukulele and the results will be the same. Hats of you talented maddafakka @tomnomnom.com

When it’s -10c outside and crispy air, it feels good to be able to get some focused work done in the studio. then commute the 15m from ”work” to ”home” and unwind in front of a warming fire.

Alright, new platform so I'm going to start sharing some things that I'm excited about to keep the momentum flowing! Rn, I think the 403 Bypasser Caido plugin from Bebiks is freaking amazing. This is a tool to automate the bypassing of walled-off endpoints. This plugin does 3 things right:

I can highly recommend Shazzer from @garethheyes.co.uk, such a great tool for XSS research!

Another fun vim thing: if you omit the 'search' part of a search and replace (e.g :%s/search/replace/), it uses the last thing you searched for. Coupled with being able to use * to search for the thing under your cursor can make for quicker replacements :)

The "bug bounty hunters and content creators" starter pack is now up to 60 users! Follow this to get instantly connected to the bug bounty community & let me know if I've missed you off! go.bsky.app/GD7hKPX

Needed a couch. So ”Borrowed” four pallets from a local business, had two unused beds and some angle iron, smashed em together, good enough. Stashed some pillows in a linen bedsheet, tried it out, sweet, then fell asleep on said couch. 🛋️💤

I've just updated Shortscan to support reading a list of URLs to scan from a file (and included a minor bugfix). Feedback welcome! The latest version is v0.9.2 and can be found on Github: github.com/bitquark/sho...

Bug bounties helped us break free from the 9-to-5 monotony, and some of us decided to start our own companies. If you're considering this path, I recommend reading "Calling all hackers" by pwn.cat phrack.org/issues/71/17...

Not sure what to make of this plattform, loving it’s rawness, lack of dms and that people I used to know are here, but as a ”semi public person” I struggle with what to share and curate. I just wish I could share things that excite me in my life, rather than hacking content.

Back on the open road again, -12c this crispy morning. Spent the night at Ekshärad ski slope. It’s closed for the season but seems to have a few decent big jumps, would be fun to get back here and ride when the snow hits and the park opens. ❄️🏂

Buzz & Boost ft. @shenet.works Each issue features an innovator living life on their own terms, sharing: 🐝 Buzz: 5 game-changing recommendations 🚀 Boost: Their most exciting current project

Earlier this year, Assetnote's Security Research team discovered a vulnerability in Sitecore XP (CVE-2024-46938) that can lead to pre-authentication RCE. Order of operations bugs are one of my favorite types of bugs :) Write up and exploit script here: assetnote.io/resources/re...

In case you missed it...the DEF CON video of my talk 'Splitting the Email Atom' is finally here! 🚀 Watch me demonstrate how to turn an email address into RCE on Joomla, bypass Zero Trust defences, and exploit parser discrepancies for misrouted emails. Don’t miss it: youtu.be/JERBqoTllaE?...

This is still one of my favorite vids for understanding and finding IDOR vulnerabilities by @stokfredrik.bsky.social. It was the video that inspired me to dive in and get the basics of the idea! www.youtube.com/watch?v=3K1-...

Any bug bounty people around? I'm creating a starter pack of people to follow but it's pretty brief currently! Let me know if you'd like to be added: go.bsky.app/GD7hKPX

Must resist the urge to simply destroy all them logs….

If you are in cybersecurity repost this so we can all follow each other 😬

After being shutdown for 3 years the skiresort 5 mins from my house is starting backup up again and I can hear the snow cannons roar! Im so hard Gonna get myself a new snowboard kit as a belated birthday gift.

Reposting my evergreens.🎄 Instead of using SSRF to peer inside a local network, I used an internal vulnerable server to proxy out traffic to the internet to turn my blind XXE into root-level file read access. Read my write-up on honoki.net/2018/12/12/f... #bugbounty #writeup #xxe #ssrf

"XXE-scape through the front door: circumventing the firewall with HTTP request smuggling" - read my write-up about a pretty cool way in which I bypassed a firewall stopping me from exploiting an XXE vulnerability. honoki.net/2020/03/18/x... #bugbounty #writeup #xxe

miss these guys