@singe.bsky.social
Hacker at Orange Cyberdefense's SensePost Team https://hello.singe.za.net/
Turns out you can communicate across containers via 63-bits of available space in a shared lock you acquire on /proc/self/ns/time that all processes have access to.
No networking required. The post has a demo of a chat app communicating across unprivileged containers.
h4x0r.org/funreliable/
I chatted with @hex-rays.bsky.social about how I found my place in the security industry, how @blackhoodie.bsky.social came to be, what our goals are and why community matters so much. hex-rays.com/blog/blackho...
18.11.2025 18:02 β π 7 π 6 π¬ 0 π 0HOPE has been banned from St. John's University. www.2600.com/content/hope...
18.11.2025 18:21 β π 87 π 64 π¬ 10 π 18The new kids use uv, so:
uv run raw.githubusercontent.com/sensepost/CV... !
Hereβs a free scanner for that FortiWeb CVE-2025-64446 I made for you.
18.11.2025 17:07 β π 1 π 1 π¬ 1 π 0
The clever folks at Grumpy Goose Labs have published even more ways to identify unauthorized IP KVMs across your environment, with some great memes to boot! Be KVM, Do Fraud - blog.grumpygoose.io/be-kvm-do-fr...
15.11.2025 00:00 β π 8 π 5 π¬ 0 π 0
No Sleep Again
Full version: youtu.be/zK9HSXrvUMg
#γγγη΅΅ #pixelart
ocean tides πβ¨
#pixelart
slide with a burning flag, the text "join a union", and a picture of parliament burning on guy fawkes day with the text "i got Radicalised at kawaiicon 2025"
10.11.2025 11:08 β π 26 π 7 π¬ 1 π 4
You can change the world Plant trees so others can enjoy their shade for generations to come So what you're able to make things easier for those around you so they can do the same for you. The only real power is the friends we made along the way.
@ellearmageddon.bsky.social wirh some words of inspiration at #kawaiicon
We can change the world, we do it in small steps, making each thing just a little better
NEW: Paragon spyware hit a key Italian campaign manager / political strategist.
Super concerning case & a reminder that Italy has a growing pile of unexplained infections with Paragon's Graphite spyware.
D3 viz of Symbiote malware call graph created with @binaryninja.bsky.social. Interactive, and makes pewpew sounds. The pewpew sounds are naturally the most important analysis feature, duh. Code going public soon.
07.11.2025 01:52 β π 13 π 3 π¬ 3 π 0
Heeey, ncurses/terminfo has a small virtual machine! And if there's a VM, there are CTF challenges :)
hackarcana.com/public-exerc...
hackarcana.com/public-exerc...
(third one coming next week, will be a bit harder)
shifttymikeβs weaponised infrared remote no touch sensor trigger turned into a key fob. These were the speaker gifts.
Tβwas 0xC0N Jozi today. That makes number 9, finally beating ZaC0Nβs run of 8 years. Itβs such a special con because itβs small and full of passionate attendees - no corporate wage slaves there for a day off work, just a bunch of hackers new and old.
01.11.2025 15:59 β π 4 π 0 π¬ 0 π 0
Three terminals stack on top of eachother. The top is running hub.pl on the host. The middle is running pool.pl on the βhackerβ server. And the bottom shows a connection from the host through the hacked server to a target server over SOCKS.
Just added SOCKS support to this reverse tunnelling tool github.com/singe/contun...
28.10.2025 14:58 β π 1 π 1 π¬ 0 π 0
github.com/singe/contun.p⦠this was a fun nerd snipe - how do you build a listed:listen connect:connect reverse tunnel that can handle concurrent connections when you only have Perl.
27.10.2025 19:00 β π 1 π 1 π¬ 0 π 0
phone next to a speaker
I just can't get over how this track is literally about when your phone's 2G GSM signals would interfere with speakers, and they even sample the interference sound repeatedly: www.youtube.com/watch?v=gpQS... (1/2)
25.10.2025 01:58 β π 9 π 2 π¬ 4 π 0codex is much better in my exp. Found the chat super frustrating in the past.
23.10.2025 05:24 β π 1 π 0 π¬ 0 π 0@vhata.net I didnβt tag you properly in the original.
19.10.2025 11:47 β π 1 π 0 π¬ 0 π 0Rediscovering some of those factoids has been amusing.
19.10.2025 11:42 β π 1 π 0 π¬ 1 π 0
A screenshot of the mobile view of GitHub looking at a private repo for the cabbage bot with 10 plugins in the plugins folder.
I missed Spinach & was tired of writing hard code that LLMs struggled to help with. So I decided to recreate the functionality of Spinach in a discord world. And so Cabbage was born. Cabbage is private for now, but itβs been so cathartic writing something easy and fun. And vhata saved Spinachβs DB!
19.10.2025 11:29 β π 1 π 0 π¬ 1 π 0
Back in days of IRC my friend vhata maintained an ibid* bot called Spinach. Spinach had a ton of lore saved in its factoid database and was an essential part of our daily lives. From helping us with cricket scores to making major life choices with the choose plugin.
*
Seriously, I love this post so much - Good weekend timeline cleanser: "Root for Your Friends Β· Joseph Thacker"
m.cje.io/3KYvnLt
Why plant a Tradecraft Garden?
April 2025, I talked to my camera about how tradecraft may go the route we saw vuln research go years ago, red teaming's retreat to self-protective secrecy, and the opportunity I see for a public tradecraft ecosystem. This starts @ 1:16:00
vimeo.com/1074106659#t...
www.amsterdamreview.org/considering-... via @tashjoeza.bsky.social
11.10.2025 17:40 β π 2 π 1 π¬ 0 π 0Turgid with blood even.
11.10.2025 16:57 β π 2 π 0 π¬ 0 π 0Unsolicited tick pic
11.10.2025 11:49 β π 2 π 0 π¬ 2 π 1Rewatching this banger of a talk, that weβre now spoiled with two versions of; the original DEFCON 33 main stage talk, and the follow up RomHack 2025 talk with the PipeTap additions.
DEFCON https://youtube.com/watch?v=zSBf2CMKlBk
RomHack https://youtube.com/watch?v=_39UbCePFfw
Tomorrow morning I am cycling 100km from Brisbane to the Gold Coast for cancer research π΄ββοΈβ€οΈ
If youβd like to sponsor me (even small donations are super appreciated): fundraise.mater.org.au/s/120023/179...
I think about this often.
What is a real world bad guy's level of effort for cracking?
How long do they spend?
How big is their cracker?
Do they have multiple crackers?
How do they distribute the load?
