cloud | security | hacking | automation | emo music | faith | family | opinions are my own
Indiana
Joined August 2009
- Tweets354
- Following495
- Followers722
- Likes921
Pinned Tweet
The @ReconVillage talks are posted!
📕 Blog - brevityinmotion.com/automate…
⌨️ Code - github.com/brevityinmotion/b…
☁️ Video - youtu.be/DvZAkG8P8m0
Is anyone else using #AWS or #cloud for #bugbounty tooling? Or interest in learning? I may do a mini series of video tutorials and blogs.
💡This thread is loaded with valuable responses and is a list of commands that I’m certainly going to spend some time learning. Looking forward to the content that @NahamSec creates from this!
☁️ This has always been one of my favorite and most valuable security resources since the original release. The approach is relevant even if you do not use AWS. Great job on the updates and the entire document is worth the time to read and implement!
Check out the new AWS Security Incident Response whitepaper! It has been completely re-written from previous versions. For details on the update and a link to the whitepaper, see this blog: aws.amazon.com/blogs/securit…
Ryan Elkins retweeted
One unique thing about software as an engineering discipline is that it offers abstractions which allow ppl to start contributing in the field w/o having to understand the whole field.
To be great, though, imo understanding what’s under the abstractions is really important:
1/
The prompt# zine is always so cool and well-done! Thank you @BHinfoSecurity for such a unique resource!
My bear vs bear chase card went straight into the card saver. Now to determine where to send it to have it authenticated and graded🥇!
📚 To expand my technical knowledge, I have always asked myself, what tech question would I not want to be asked? Then I go learn it and repeat that question. I recommend this advice no matter where you are at in your career. This approach applies far beyond just tech.
Today I borrowed the hacking linux exposed and ruby programming books from the library. The librarian told me #linux is not worth my time.
🦸🏼♂️ Me explaining to my kids what I did at @defcon:
1. I played with legos.
2. I folded paper airplanes.
3. I made a tin foil hat.
4. I traded stickers.
5. I looked at cars.
🗓“You Have One New Appwntment” - Very fascinating research at @defcon being presented by @spaceraccoonsec 🔥📆
💡Have a list of URLs and want to know which ones are in a public bug bounty scope?
Install the tool:
python3 pip install goodfaith
Run the tool:
cat urls.txt | goodfaith -s bugcrowd
This functionality was just released today!
#bugbountytips #recon #automation
🔥Fantastic panel at @RedTeamVillage_ with @NahamSec @_JohnHammond @Alh4zr3d @0dayCTF
“The best way to learn is to teach” -@Alh4zr3d
Thrilled with how these stickers turned out! Looking forward to trading with other creators/builders/hackers that I have tons of respect for and have learned so much from!
#DEFCON30
Also, coding away towards a new DEF CON version update of goodfaith (a tool to help you stay in scope when hacking) to release next week! github.com/brevityinmotion/g…
🎶 My other hobby outside of computers… a local show to see my all time favorites. #andrewmcmahon #dashboardconfessional #armorforsleep #rocktheruins – at Battle Ground, IN
Ryan Elkins retweeted
Another awesome "Live Recon" show with myself and @NahamSec
This time we interview @snyff the founder of @PentesterLab !!
We chat about his early career, SQL injection, certificates, and ALL about training/hacker-education!
youtube.com/watch?v=XaLA5yqv…
☁️ For cloud learning, obviously both options would be best, do you prefer to follow a tutorial walking you through the console/GUI or walking you through the infrastructure as code? The context and why would be the same.
40%Walkthrough the console
40%Explain and run the code
20%Just show the answer
5 votes • Final resultsHeading into a technical security review meeting?
💡Review the relevant @owasp cheat sheet (cheatsheetseries.owasp.org) for the topic prior to the meeting.
🧠 Look like a genius.
⚖️ Reduce risk.
🙏 This project has been one of the most valuable and helpful throughout my career.
🎨 Well… I no longer spend excessive time on social media because I’ve replaced it with laying in bed for hours every night sending #dalle prompts.
Ryan Elkins retweeted
There is A TON of sweet Python material in this Humble Bundle ebook package-- between Jupyter, Django, cookiecutter and FastAPI, Pandas and threading and more... so much great education jam packed in here. (disclaimer, affiliate link)
humblebundle.com/operation-p…
💻 New blog post @detectify about the 'goodfaith' tool I wrote for scaling #bugbounty automation by remaining within scope.
🛠️ Tool: github.com/brevityinmotion/g…
💡 Blog: labs.detectify.com/2022/06/2…