The proud owner of two brain cells. HTB with @barctf | OSCP, CRT, CRTL
Joined January 2019
- Tweets2K
- Following298
- Followers4.4K
- Likes2.5K
optional retweeted
This is Knap. It's a new language I created that turns data into Markdown. The syntax should feel familiar and comes with wonderfully pleasant features to modify and format plain text.
Knap is open source. Over a million people already use Knap directly or indirectly because it started as the templating language I made for Obsidian Web Clipper. Now any tool can use it.
You can add Knap to your app or use it via CLI. Create a batch of Markdown files from JSON or CSV, or pipe Defuddle directly into Knap to generate Markdown from HTML/URLs.
The Knap site is color-coded to help beginners understand the relationship between variables (blue), filters (orange), and logic (green). I've tried to document it as comprehensively as I can.
Try the Knap Playground so you can see how fun the syntax is to use!
Knap is pronounced /knæp/ (with a hard k). It's named after knapping (with a silent k): the process of shaping stones to form arrowheads, scrapers, and other tools.
Enjoy!
optional retweeted
What I wanted to say yesterday is that we hit 25M active users and to celebrate we have now reset usage for all paid subscriptions for ChatGPT Work and Codex.
See you soon for more news from The Reset Company.
optional retweeted
We unfortunately have decided that we cannot continue providing access to our models through Cursor and are ending our partnership. It boils down to trust and we’ve asked that this takes effect on November 12 to give you some time to plan.
Many have used the GPT models through Cursor and here are options we know should work in the future:
- We will continue to allow using your own OpenAI API key and similarly will continue to provide access through our IDE extensions for Cursor.
- We will keep working with the broadest range of tools and harnesses, some of which are OSS, but also many many closed-source ones.
We are as committed as ever to continue supporting developers and the flourishing ecosystem of tools, harnesses and products. We will also continue to invest in our own open-source initiatives and believe in broad optionality for developers.
You can read more about our decision in the blog:
openai.com/index/our-decisio…
We’re ending our partnership with Cursor following its acquisition by SpaceX. Under our proposal, Cursor’s direct access to our models would end on November 12.
We know that the people most affected by this decision are the developers who rely on OpenAI models in Cursor. We care about their experience in this transition and we’re ready to go above and beyond to support them.
openai.com/index/our-decisio…
optional retweeted
I've been fairly quiet about recent events for good reasons, but this popped up on my radar - netspi.com/mdsec-security-al…
I don't have much to say except some companies will forever lack class. For anyone looking for a new pentest, red team or c2 product vendor, there are many great ones out there and do your homework - the ones I am personally familiar with and would wholeheartedly recommend are @AmberWolfSec, @remotethreat, @SpecterOps, @OutflankNL and @TrustedSec ❤️
optional retweeted
Today we're also opening the weights for Muse Glimmer, a great 30B parameter dense model that can run locally. Soon we'll also release the weights for Muse Spark 1.2, our latest foundation model. Meta is a strong supporter of open source and I'm proud of these releases. Congrats to @alexandr_wang and the MSL team for all your great work on these models.
optional retweeted
Unfortunately most of the execs at these bug bounty platform fail to understand one thing:
Your platform isn't your product... your hackers are. 🤷🏽♂️
optional retweeted
built a web interface for Obsidian.md so you can access your vault from any browser using cloudflare tunnels + your own hostname.
No more being stuck with notes on one machine, no installing clients on work computers you don't control 👀
👇
github.com/PatrikFehrenbach/…
optional retweeted
Breaking: Microsoft plans to load Copilot inside File Explorer on Windows 11.
References in preview builds point to “Chat with Copilot" and “Detach Copilot" in File Explorer.
Right now, Copilot in File Explorer shows up only when you right-click files and the Copilot app is installed.
However, now Microsoft wants Copilot to appear within File Explorer, rather than redirecting you to a separate app.
This move will make Copilot feel more native in File Explorer.
ALT Image for representation purposes only, not an actual UI.
optional retweeted
[RELEASE] As promised, I’m releasing the first blog post in a series. It covers the gaps still present in current stack-based telemetry and how Moonwalking can be extended to evade detection logic and reach “on-exec” memory encryption.
Enjoy ;)
klezvirus.github.io/posts/Mo…
optional retweeted
Venom C2 tool drop! 🐍
During a recent red team engagement we needed a simple python agent that needs no dependencies to setup persistence on some exotic boxes we landed on.
Some had EDR so we didn't want anything off-the-shelf.
The server, agent, and client were made mid-engagement and kept our foothold for weeks. I have no use for this anymore, so thought i'd share it instead of letting it evaporate into the /dev/null.
Link to boku7/venom GitHub repo : github.com/boku7/venom
optional retweeted
AWS quietly updated T&Cs to ban “Fireprox”style use of API Gateway closing a handy pentest trick. @ZephrFish and @turvsec already rolled alternatives such as Omniprox and Flareprox. Banning tools only hampers legit testers, attackers will proxy anyway.
optional retweeted
This release is probably going to be one of our biggest and most impactful! Kudos to the team @peterwintrsmith @modexpblog @s4ntiago_p @GigelV41464 @saab_sec 🙌
optional retweeted
PDQ SmartDeploy versions prior to 3.0.2046 used static, hardcoded encryption keys for cred storage. Low-privileged users could potentially access admin creds from registry or deployment files.
@unsigned_sh0rt unpacks his testing in his latest blog post. ghst.ly/4mjyuvw
optional retweeted
Here’s my slides from today’s “Regex For Hackers” talk at DEFCON with @NahamSec, bookmark this for some exciting news in the near future docs.google.com/presentation…
optional retweeted
Had an awesome time at #DefCon 33. Lots of new discoveries, first time speaking at the #redteamvillage along with @zer0phat and met lots of cool people. Looking forward to the next one!
optional retweeted
💻 ModuleOverride – Changing a Tyre Whilst Driving – @zer0phat & @kreepsec teach process injection using existing memory sections to run malicious shellcode. Hands-on demos and detection strategy discussions at @redteamvillage_ during @defcon 33! ⚡
