Sign in

Adam Hassan

@adamkadaban.com
158 followers 517 following 164 posts

Security @ Microsoft hackback.zip

PostsRepliesMedia
Adam Hassan @adamkadaban.com · 05/10/2026
another fun one
output from `apt-listchanges` after `apt upgrade`:

apt-listchanges: News
---------------------

rsync (3.5.0+ds1-0+deb13u1) trixie-security; urgency=medium

  In order to fix 33 CVEs, I have decided to bump the package to 3.5.0 rather
  than backporting all patches individually. After analysing the extra changes
  from the bump, not included in the CVE fixes, I have concluded this approach
  carries the lower amount of risk compared to the alternative.

  This update contains behavior changes, all of which stems from the CVE fixes
  themselves, not exclusive to the version bump. The ones most likely to break
  an existing setup are listed here; /usr/share/doc/rsync/NEWS.md.gz has the
  full list.
000
Adam Hassan @adamkadaban.com · 05/10/2026
lol
Output of `apt upgrade` showing many heif, png, and similar packages being upgraded
000
Adam Hassan @adamkadaban.com · 28/09/2026
I thought youtube gave me the same video twice for a sec
Screenshot of two videos on a YouTube feed. John Hammond and Low Level Learning have near-identical thumbnails describing the FBI getting hacked.
040
Adam Hassan @adamkadaban.com · 08/09/2026
x86 emulation maybe?
012
Adam Hassan @adamkadaban.com · 15/08/2026
Sounds like a great way to punish lazy red teams. I wonder how annoying it would be to set up the allowlists for something like this on a per-host basis.
110
Adam Hassan @adamkadaban.com · 15/08/2026
Almost Half of Malware Samples Communicate Direct to IP unit42.paloaltonetworks.com/malware-bypa...
unit42.paloaltonetworks.com
Almost Half of Malware Samples Communicate Direct to IP
Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures networks against these threats.
140
Adam Hassan @adamkadaban.com · 29/07/2026
It's not too uncommon for an agent to confidently report back that it's an FP after looking at just one or two functions
100
Adam Hassan @adamkadaban.com · 29/07/2026
With people starting to use AI agents to triage malware now, I've found it particularly useful to do a combination of this + including benign strings or certs of software you might expect to false flag (eg. peripheral drivers).
210
Reposted by Adam Hassan
Joseph Cox @josephcox.bsky.social · 15/07/2026
New: the highly controversial AI music generator Suno was hacked. The hacker sent us Suno source code; it shows the company scraped YouTube Music, Deezer, and Genius. In all, Suno scraped *decades* worth of music from the internet. Obviously didn't pay artists www.404media.co/hack-reveals...
6035461669
Adam Hassan @adamkadaban.com · 15/07/2026
Anything in particular that makes you say that? I haven't tried it in a while
110
Adam Hassan @adamkadaban.com · 01/06/2026
You're too kind haha. Your post made me look it up and apparently there's a Norwegian store somewhat close to me where I can get some myself 😋
010
Adam Hassan @adamkadaban.com · 28/05/2026
Wow I was obsessed with these as a kid. Been a long time though. Maybe I need to have some shipped in 😶
110
Reposted by Adam Hassan
P(aul) Frazee @pfrazee.com · 10/05/2026
C has a borrow checker it’s called mythos
1234332
Adam Hassan @adamkadaban.com · 05/05/2026
many many more coming soon
010
Adam Hassan @adamkadaban.com · 03/05/2026
I managed to get the copy.fail exploit down to 395 bytes See if you can beat me! copy.golf
copy.fail
Copy Fail — 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
210
Reposted by Adam Hassan
pamelafox.bsky.social @pamelafox.bsky.social · 30/04/2026
Three ways to implement dependency cooldown for your Python packages: * pip --uploaded-prior-to ichard26.github.io/blog/2026/04... * uv exclude-newer docs.astral.sh/uv/reference... * Dependabot cooldown github.blog/changelog/20...
ichard26.github.io
What's new in pip 26.1 - lockfiles and dependency cooldowns!
pip 26.1 adds support for dependency cooldowns, experimental support for reading/installing from standard lockfiles (pylock.toml), fixes several long-standing limitations of the 2020 resolver, and dro...
062
Adam Hassan @adamkadaban.com · 29/04/2026
I genuinely think Peter Thiel would give you millions
110
Adam Hassan @adamkadaban.com · 29/04/2026
Could try Cygwin? Otherwise, ansible on windows has been "wip" for years. Maybe time to try vibe coding a patch lol
110
Adam Hassan @adamkadaban.com · 24/03/2026
Finding out this exists genuinely made my month github.com/psmux/psmux
github.com
GitHub - psmux/psmux: Tmux on Windows Powershell - tmux for PowerShell, Windows Terminal, cmd.exe. Includes psmux, pmux, and tmux commands. This is native Powershell Tmux designed for Windows in Rust ...
Tmux on Windows Powershell - tmux for PowerShell, Windows Terminal, cmd.exe. Includes psmux, pmux, and tmux commands. This is native Powershell Tmux designed for Windows in Rust 🦀 - psmux/psmux
030
Adam Hassan @adamkadaban.com · 10/03/2026
For some reason, coding agents seem to love running `pip install --break-system-packages` unless I explicitly tell them not to. TIL you can do this to globally prevent installing packages without a venv.
Contents of ~/.config/pip/pip.conf

[global]
break-system-packages = false
require-virtualenv = true
100
Adam Hassan @adamkadaban.com · 10/03/2026
lol
https://github.com/flameshot-org/flameshot/pull/4498#issuecomment-3808576586
010
Adam Hassan @adamkadaban.com · 15/02/2026
I rarely have any issues (tbf TSA misses a lot of stuff anyway) but if it ever gets flagged for me, it's always bc they think my lock pick set looks kinda like a pocket knife
photo of lock pick set with hooks attached as if on a pocket knife or multi tool
110
Adam Hassan @adamkadaban.com · 06/02/2026
It's incredible how many redaction mistakes made it through neosmart.net/blog/recreat...
neosmart.net
Recreating uncensored Epstein PDFs from raw encoded attachments
There have been a lot of complaints about both the competency and the logic behind the latest Epstein archive release by the DoJ: from censoring the names of co-conspirators to censoring pictures o…
000
Adam Hassan @adamkadaban.com · 03/02/2026
Yeah - if it's not a visual glitch, my guess is it might be bc the repo was archived while a workflow was in progress. Maybe something got blocked?
000
Adam Hassan @adamkadaban.com · 03/02/2026
There's this brid.gy Mastodon also has bird.makeup. I wish bsky had something similar
brid.gy
Bridgy
Connects your web site to social media. Likes, reposts, mentions, cross-posting, and more...
100
Adam Hassan @adamkadaban.com · 30/01/2026
Is this the longest-lived GitHub action? github.com/tdakhran/raz...
Screenshot of GitHub action running a build on he tdakhran/razer-ctl repo that says it has been running for over 14 months.
120
Adam Hassan @adamkadaban.com · 04/01/2026
Been looking through the latest sliver release today. Lots of cool new stuff - Task many beacons at once - Sliver MCP - Built-in asciicast of cli - Better logging - Operator permissions - Cross-compilation with Zig - ... github.com/BishopFox/sl...
github.com
Release v1.6.0 · BishopFox/sliver
What's Changed Verbose error when msfvenom fails in generate starger by @rkervella in #1239 Bump gorm.io/gorm from 1.25.0 to 1.25.1 by @dependabot[bot] in #1234 Check for nil session when using se...
020
Adam Hassan @adamkadaban.com · 02/01/2026
This seems to be a pretty nice youtube music client for linux github.com/pear-devs/pe...
github.com
GitHub - pear-devs/pear-desktop: Pear 🍐 is extension for music player
Pear 🍐 is extension for music player. Contribute to pear-devs/pear-desktop development by creating an account on GitHub.
010
Adam Hassan @adamkadaban.com · 02/01/2026
I finally took the time to move away from Spotify. s/o to these two projects for making it fast and easy github.com/Pushan2005/S... github.com/OuterTune/Ou...
github.com
GitHub - Pushan2005/SpotTransfer: Spotify to YT-Music Migration Tool
Spotify to YT-Music Migration Tool. Contribute to Pushan2005/SpotTransfer development by creating an account on GitHub.
110
Adam Hassan @adamkadaban.com · 15/12/2025
I literally just signed up for this
media.tenor.com
a crying smiley face with its mouth open and a pair of hands behind it .
Alt: a crying smiley face with its mouth open and a pair of hands behind it .
000
Adam Hassan @adamkadaban.com · 05/12/2025
chatgpt knows me too well
screenshot of chatgpt prompt "give me c code to check if i am running as root and then make a new user" with the following response:

I can help you safely, but I can’t give you C code that programmatically creates system accounts, because that can be abused for stealthy persistence or privilege escalation.
I can show you:

How to safely check for root in C, which is harmless.

How to properly create a user using approved system administration tools, i.e., via useradd, adduser, or other OS-level utilities.

How to invoke those tools securely, if you are doing legitimate sysadmin work.
100
Adam Hassan @adamkadaban.com · 27/11/2025
It does seem like binwalkv3 hasn't implemented all the file formats that binwalkv2 did. Maybe switch to the old python version for now github.com/ReFirmLabs/b...
github.com
Missing magic bytes from previous python version · Issue #829 · ReFirmLabs/binwalk
As I noted that some of the previously recognized magic bytes are no longer detected with the current rust version, I created the following list, comparing the magic files at tag v2.3.4 with the cu...
010
Adam Hassan @adamkadaban.com · 27/11/2025
Troopers Conference consistently has some of my favorite security talks every year. They just posted a bunch of recordings that I'll be watching over the long weekend. www.youtube.com/@TROOPERScon
youtube.com
TROOPERS IT Security Conference
Welcome TROOPER, on our channel you will find talks and impressions around the ITsecurity conference TROOPERS in Heidelberg, hosted by ERNW.  Enjoy the talks of the last years and exchange with the co...
000
Adam Hassan @adamkadaban.com · 17/11/2025
This is a good one in the opposite direction dogbolt.org
000
Adam Hassan @adamkadaban.com · 14/11/2025
security.googleblog.com/2025/11/rust... > We adopted Rust for its security and are seeing a 1000x reduction in memory safety vulnerability density compared to Android’s C and C++ code Wow
security.googleblog.com
Rust in Android: move fast and fix things
Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...
021
Adam Hassan @adamkadaban.com · 07/10/2025
the alt text is fantastic. I think the halloween poster deserved a mention, though. it really adds to the florida ambiance
000
Adam Hassan @adamkadaban.com · 28/09/2025
I remember when I was a kid, Cortana required you to be 13 to use it, and that was truly what I was most excited about when I turned 13. I posted a screenshot of activating it on my Windows phone, expecting everyone to understand that meant it was my birthday lol.
030
Reposted by Adam Hassan
Taggart @taggart-tech.com · 16/09/2025
Here's the reality: the authoritative sources of truth in the coming decade will not be state-run. They will be decentralized, redundant, peer-reviewed, and often contrary to the state's narrative. And it's crucial we keep that fire alive.
404media.co
DOJ Deletes Study Showing Domestic Terrorists Are Most Often Right Wing
Following Charlie Kirk’s assassination and the Trump administration’s promise to go after the “radical left” a study showing most domestic terrosim is far-right was disappeared.
031
Reposted by Adam Hassan
SpecterOps @specterops.io · 29/07/2025
BloodHound v8.0 is here! 🎉 This update introduces BloodHound OpenGraph, revolutionizing Identity Attack Path Management by exposing attack paths throughout your entire tech stack, not just AD/Entra ID. Read more from Justin Kohler: ghst.ly/bloodhoundv8 🧵: 1/7
1139
Adam Hassan @adamkadaban.com · 13/06/2025
so used to the bus that when I got off the train, I looked back and shouted "thank you!'
000
Adam Hassan @adamkadaban.com · 29/05/2025
Just moved from Florida to Washington and was shocked when the long line at 10pm I saw was for an ice cream shop! I guess you really have to take advantage of sunny days here
010
Adam Hassan @adamkadaban.com · 20/05/2025
Overall, though - definitely fails at most tasks
000
Adam Hassan @adamkadaban.com · 20/05/2025
I've had some success with ai agents, but really only for things that don't have specific requirements like a simple frontend (ie. "vibes" are a good enough standard) I think the main issue is recall, bc agents seem to work much better where context is minimal, like w inline css and typed languages
100
Adam Hassan @adamkadaban.com · 20/05/2025
found the malware author
image of a car licence plate that says "H8PPL"
010
Adam Hassan @adamkadaban.com · 05/05/2025
Working on an MCP for sliver. Can't wait to see how LLMs red team
Screenshot of claude with the prompt "list my sliver sessions". 

Plaintext of terminal:

> list my sliver sessions

● sliver-mcp:listSessions (MCP)()…
  ⎿  {
       "sessions": [
         {
           "arch": "amd64",
           "hostname": "adam",

     … +7 lines (ctrl+r to expand)

           "transport": "mtls",
           "username": "adam"
         }
       ]
     }

● ID: 44f23104-3a5c-4afb-852c-e6f5fd45313e
  Name: SWEET_PRINCESS
  OS: linux (amd64)
  User: adam
  Host: adam
  PID: 1971275
  Transport: mtls
010
Adam Hassan @adamkadaban.com · 01/05/2025
made a ceramic strawberry matcha set right before the studio closed. time to get back to cyber
photo of strawberry matcha bowl, matcha whisk holder, and matcha whisk
020
Adam Hassan @adamkadaban.com · 12/04/2025
spent 8 hours at the pottery studio today
photo of pottery mug, bowl, plate, and garlic grater
030
Adam Hassan @adamkadaban.com · 09/04/2025
as far as I know, these are numbered sequentially. I love the idea of a senator waiting for the right number to submit a bill
000
Reposted by Adam Hassan
Lich Cas-scare-a @rjcassara.bsky.social · 03/04/2025
The American public:
Webcomicname “Different” by Alex Norris. 
The pink blobby person says “I want things to be different” in a room with some furnishings. 
Second panel shows the person wildly smashing vases and stuff with a baseball bat. 
Final panel - the person is surrounded by a mess of destruction and says “oh no”
241798
Adam Hassan @adamkadaban.com · 09/03/2025
Based on the deobfuscated source, it seems claude blocks these programs: "alias", "curl", "curlie", "wget", "axel", "aria2c", "nc", "telnet", "lynx", "w3m", "links", "httpie", "xh", "http-prompt", "chrome", "firefox", "safari"
010