Bugtrace @bugtrace

#Security #Music #Movie #Reading #Pentest Joined February 2010

Tweets

369
Followers

221
Following

385
Likes

747

Bugtrace @bugtrace

12 months ago

@orikron Welcome to China.

0 0 1 38 0

View Details

Bugtrace @bugtrace

a year ago

@mrlesk @samlambert I'm still using it.

0 0 3 108 0

View Details

Bugtrace @bugtrace

2 years ago

@yuange75 新的征途，星辰大海，恭喜袁哥。

0 0 1 2K 0

View Details

PortSwigger Research @PortSwiggerRes

2 years ago

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2023! portswigger.net/research/top-1…

6 158 472 86K 153

View Details

# on shortification of "learning" There are a lot of videos on YouTube/TikTok etc. that give the appearance of education, but if you look closely they are really just entertainment. This is very convenient for everyone involved : the people watching enjoy thinking they are learning (but actually they are just having fun). The people creating this content also enjoy it because fun has a much larger audience, fame and revenue. But as far as learning goes, this is a trap. This content is an epsilon away from watching the Bachelorette. It's like snacking on those "Garden Veggie Straws", which feel like you're eating healthy vegetables until you look at the ingredients. Learning is not supposed to be fun. It doesn't have to be actively not fun either, but the primary feeling should be that of effort. It should look a lot less like that "10 minute full body" workout from your local digital media creator and a lot more like a serious session at the gym. You want the mental equivalent of sweating. It's not that the quickie doesn't do anything, it's just that it is wildly suboptimal if you actually care to learn. I find it helpful to explicitly declare your intent up front as a sharp, binary variable in your mind. If you are consuming content: are you trying to be entertained or are you trying to learn? And if you are creating content: are you trying to entertain or are you trying to teach? You'll go down a different path in each case. Attempts to seek the stuff in between actually clamp to zero. So for those who actually want to learn. Unless you are trying to learn something narrow and specific, close those tabs with quick blog posts. Close those tabs of "Learn XYZ in 10 minutes". Consider the opportunity cost of snacking and seek the meal - the textbooks, docs, papers, manuals, longform. Allocate a 4 hour window. Don't just read, take notes, re-read, re-phrase, process, manipulate, learn. And for those actually trying to educate, please consider writing/recording longform, designed for someone to get "sweaty", especially in today's era of quantity over quality. Give someone a real workout. This is what I aspire to in my own educational work too. My audience will decrease. The ones that remain might not even like it. But at least we'll learn something.

657 4K 19K 2.3M 10K

View Details

Bugtrace @bugtrace

3 years ago

新年快乐，祝愿每个人都有更好的人生，更加光明的未来。

0 0 0 45 0

View Details

Bugtrace @bugtrace

3 years ago

Restoration of access to Z-Library and the cessation of illegal criminal prosecution - Sign the Petition! chng.it/b56zghjD 来自 @Change

0 0 0 30 0

View Details

Frank @jedisct1

3 years ago

Remember Zmap, the super fast network scanner? After 6 years, Zmap 3.0.0 has been released: github.com/zmap/zmap/rele… - Also they have quite a few cool related projects: zmap.io

2 141 426 58K 138

View Details

TrustedSec @TrustedSec

3 years ago

Want to enhance your password cracking skills? Check out our latest blog from @nyxgeek on understanding built-in hashcat rules and how to use them to crack passwords efficiently! hubs.la/Q01MlZym0

0 45 101 24K 37

View Details

Cyber Detective💙💛 @cyb_detective

3 years ago

Awesome Cyber Skills List of places, where you can train your #pentest skills free, legally and safely: fake vulnerable website/applications hackers games/challenges CTFs open online courses and more. github.com/joe-shenouda/a…

7 169 543 59K 344

View Details

d3mondev @d3mondev

3 years ago

🔥 Puredns v2.1.0 has been released! This update comes with quality of life features: ☑ Bruteforce many domains at once ☑ Specify bruteforce location in domain ☑ Flag to use trusted resolvers only ☑ ...more! 🚨 Please RT and like for reach! ♥🤗 github.com/d3mondev/pured…

6 88 325 36K 97

View Details

Bugtrace @bugtrace

3 years ago

@henices 全局代理这个比较好，单独代理终端用有米IP比较好，那个只要代理了终端，终端下打开的子进程全部走代理，git，nmap什么的不用单独加了。

0 1 1 922 1

View Details

Luke Stephens (hakluke) @hakluke

3 years ago

Did you know @Cloudflare released an open source vulnerability scanner that is based off Nmap and Vulners? 👉 Nmap locally within a container 👉 Push results to cloud 👉 Deploy the scanner on Kubernetes It looks amazing! How did I only just find out? github.com/cloudflare/flan

6 138 495 52K 221

View Details

Swissky @pentest_swissky

3 years ago

How we broke PHP, hacked Pornhub and earned $20,000 evonide.com/how-we-broke-p…

4 47 195 44K 109

View Details

Bugtrace @bugtrace

3 years ago

"寄蜉蝣于天地，渺沧海之一粟。哀吾生之须臾，羡长江之无穷。挟飞仙以遨游，抱明月而长终。知不可乎骤得，托遗响于悲风。"

0 0 0 36 1

View Details

SANS.edu Internet Storm Center @sans_isc

5 years ago

RCE in log4j, Log4Shell, or how things can get bad quickly i5c.us/d28120

1 70 144 0 16

View Details

Bugtrace @bugtrace

5 years ago

@80vul niubilitiy

0 0 0 0 0

View Details

hashcat @hashcat

5 years ago

Official Team Hashcat write-up of this year's @CrackMeIfYouCan contest at @defcon 2021: github.com/hashcat/team-h…

1 88 252 0 31

View Details

PT SWARM @ptswarm

6 years ago

💉Advanced MSSQL Injection Tricks💉 🩸 New DNS Out-Of-Band vector in SELECT statement 🩸 Quick exploitation: Get all table data in one query 🩸 Read local files in SELECT statement and more! Read the article: swarm.ptsecurity.com/advanced-mssql…