Sebas @0xroot

- 🦊 Senior Security Consultant at @BishopFox - 📚 Curated Security Pills Newsletter https://t.co/c1XhZLXTZS newsletter.securitypills.news Joined April 2010

Tweets

9K
Followers

4K
Following

466
Likes

495

JNS @_devJNS

3 months ago

Vibe coders after realizing they'll still have to dance on TikTok to market their SaaS.

287 611 9K 486K 695

View Details

Sebas @0xroot

4 months ago

We're back. See you Monday: newsletter.securitypills.news Drop your email, we won't phish you.

0 0 4 2K 0

View Details

I've pushed a few updates to github.com/assetnote/reac…. Vercel and Netlify are no longer flagged as vuln. Offsite redirs not followed. Custom header support in case you need auth or custom UA. Redir test cases are more accurate now (both base path and redir tested).

2 26 167 17K 84

View Details

Sebas @0xroot

a year ago

@galnagli Are those AWS creds exposed intentionally? :P

0 0 0 372 0

View Details

Seongsu Park @unpacker

2 years ago

According to the National Intelligence Service, around 8,400 individuals are employed in cyber warfare in North Korea. Previously, there were 6 hacking groups and 17 support organizations backing cyber attack activities, but this number has now increased by nearly 20%. - Korean: donga.com/news/Politics/… - English: donga.com/en/article/all…

2 31 73 11K 13

View Details

Sebas @0xroot

2 years ago

My article regarding Poisoned Pipeline Execution attacks on CI/CD pipelines has just been published 🔗bishopfox.com/blog/poisoned-…

Bishop Fox @bishopfox

2 years ago

Dive into our blog on the surge of app security attacks on CI/CD pipelines. Discover how to shield against poisoned pipeline executions and real-world remote code execution scenarios. More here: bfx.social/3IHtwGJ #AppSec #DevOps #Cybersecurity

0 10 32 16K 18

1 20 74 14K 34

View Details

Sebas @0xroot

2 years ago

🕵️‍♂️ Deluder 🔍 A tool for intercepting traffic of proxy unaware applications, supporting multiple networking libraries: * OpenSSL * GnuTLS * SChannel * WinSock and Linux Sockets + more! github.com/Warxim/deluder

0 0 1 502 0

View Details

Sebas @0xroot

2 years ago

🛠 pphack: A Client-Side Prototype Pollution Scanner Scan for prototype pollution using chromedp, customize payloads and JavaScript with this powerful tool 👤 @edoardottt2 github.com/edoardottt/pph…

1 3 5 777 1

View Details

Sebas @0xroot

2 years ago

⚔ Visualizing ACLs with Adalanche A tool for enumerating and visualizing ACLs in Active Directory, helping to identify misconfigurations and potential attack paths By @lsecqt lsecqt.github.io/Red-Teaming-Ar…

0 6 15 2K 5

View Details

Sebas @0xroot

2 years ago

🛠️ proctools: Extract information & dump sensitive strings from Windows processes: 🔍 procsearch: find sensitive strings in process memory ℹ️ procinfo: display file version info 📝 procargs: extract command line args ❌ prockill: terminate processes github.com/mlcsec/proctoo…

0 0 1 272 0

View Details

Sebas @0xroot

2 years ago

🛠 Debug your GitHub Actions via SSH with action-tmate A GitHub Action that allows users to debug their GitHub Actions by using SSH or a web shell to access the host system on which the actions run 👤 Max Schmitt github.com/mxschmitt/acti…

0 0 0 246 0

View Details

Sebas @0xroot

2 years ago

🤖 LLM-powered fuzzing via OSS-Fuzz A framework that uses LLMs to generate fuzz targets for C/C++ projects and benchmarks them on the oss-fuzz platform. 👤 @google github.com/google/oss-fuz…

0 2 6 571 0

View Details

Sebas @0xroot

2 years ago

🛠️ graphrunner A post-exploitation toolset for interacting with the Microsoft Graph API It provides different tools for: * Reconnaissance * Persistence * Pillaging of data from a Microsoft Entra ID (Azure AD) account 👤 @dafthack github.com/dafthack/Graph…

0 0 3 274 0

View Details

Sebas @0xroot

2 years ago

🛠 Jira-Lens: Fast and customizable vulnerability scanner for JIRA Perform 25+ checks including CVEs and multiple disclosures on a provided JIRA instance 👤 @mayank_pandey01 github.com/MayankPandey01…

0 0 5 395 0

View Details

Sebas @0xroot

2 years ago

Receive the latest security news each Monday: 🛠️ Appsec ⛓️ Blockchain 🛡️ Blue Team ☁️ Cloud Sec 🐳 Container Sec 🤖 ML ⚔️ Red Team 📦 Supply Chain 🕵️Threat Hunting Join 2,000+ security professionals newsletter.securitypills.news/subscribe Follow me ( @0xroot ) for more content like this

0 0 0 155 0

View Details

Sebas @0xroot

2 years ago

🔖 Security Pills #55 🛠️ A Recipe for Scaling Security @ddworken 🛡️ Detect threats using Microsoft Graph logs @fabian_bader ☁️ All Google Kubernetes Engine Risk @roinisimi ⚔️ electroniz3r @_r3ggi 📦 Forging signed commits on GitHub + more! newsletter.securitypills.news/p/security-pil…

2 3 7 2K 3

View Details

Sebas @0xroot

2 years ago

@TheIceRoot If you have enjoyed this content, please help us by: 1️⃣ Joining over 2000 security professionals to get the latest trends in security. 2️⃣ Following me (@0xroot) for more content like this. Visit securitypills.news for more information.

0 0 0 176 0

View Details

Sebas @0xroot

2 years ago

☁ Google Cloud Incident Response Cheat Sheet * Common Attack Paths in GCP 🧧 * Logs for Threat Hunting & Incident Response 🧙‍♂️ * GCP Attack Matrix 📊 * Service Accounts 🔑 Includes documentation with + details for each TTP 👤@TheIceRoot & Wes Guerra medium.com/google-cloud/g…

1 3 8 655 3

View Details

Sebas @0xroot

2 years ago

☁️ Cloud Threat Landscape A cloud threat intelligence database, providing details on actors, tools and attack vectors Dive into @wiz_io's public database: 🚨107 incidents 🎭96 threat actors ⚔️100+ attack techniques wiz.io/cloud-threat-l…