Sign in

Felipe Molina

@felmoltor.me
102 followers 212 following 86 posts

Mastodon felmoltor@defcon.social. Now with more #OSCP than the previous version. Working @SensePost.com - Orange Cyberdefense blog.felipemolina.com

PostsRepliesMedia
Felipe Molina @felmoltor.me · 26/06/2026
A beautiful crescent moon 😃 Good enough for my 130/900 Skywatcher + a phone video
000
Reposted by Felipe Molina
Debra's Astrophotography @debraceravolo.bsky.social · 20/06/2026
Venus emerging from behind the Moon after being occulted for an hour by the Moon on June 17, 2026. Clouds made it difficult to photograph but in the end, they added to the scene. #astrophotography #astronomy #venusmoon
Crescent Moon and planet Venus emerging after being occulted by the Moon for an hour. Clouds all around.
29873125
Reposted by Felipe Molina
GypsyHeart 🖤 @gypsyheart1.bsky.social · 20/06/2026
Truth 😄
694277702
Felipe Molina @felmoltor.me · 01/06/2026
My local Eurasian Kestrel 🦅 We know each other
010
Felipe Molina @felmoltor.me · 28/05/2026
Damn seagulls, ruining my photos 😃 ❤️
000
Felipe Molina @felmoltor.me · 20/04/2026
And the second one the following day
020
Felipe Molina @felmoltor.me · 20/04/2026
My first attempt at capturing the Milky Way went not as bad as I thought (I still need to upskill with the foreground shot, but I'm getting there)
120
Reposted by Felipe Molina
Tib3rius @tib3rius.bsky.social · 01/04/2026
IPv6 addresses are too hard to memorize. That ends today, with the launch of my new, free service: sentence2IPv6 ❌ 0788:7b06:edcb:24f1:a2ff:08f0:6525:be66 ✅ The lazy chickens explode awkwardly beneath the mad toilet while ugly dogs eat the imaginary bacon. is.gd/gyxSQG
64912
Felipe Molina @felmoltor.me · 12/03/2026
Details on yesterday's sun spots 🌞🫟
A close up photo of the surface of the sun as seen through my telescope
020
Felipe Molina @felmoltor.me · 21/02/2026
Good night, Jupiter
010
Felipe Molina @felmoltor.me · 13/02/2026
I can go sleep now with a more colourful photo of M42 obtained tonight 🌌
020
Reposted by Felipe Molina
Oregon 🕎🎲 @oregonthedm.bsky.social · 14/10/2025
14666103
Felipe Molina @felmoltor.me · 01/02/2026
I'm still in the learning phase, but I feel pretty proud of my first M42 Nebula shot 🌌. Even taking it with a full moon and in the middle of the city, I got a decent photo. Next time will be much better 💪🏼
020
Reposted by Felipe Molina
David Buchanan @retr0.id · 28/01/2026
an easy way to remember the difference between ssh -L and ssh -R is to try both until it works
1217514
Reposted by Felipe Molina
Dominic White @singe.bsky.social · 26/01/2026
I updated that Burp Global Match & Replace plugin to use the Montoya API, be able to target specific Burp tools (or apply globally), extend the rule matching syntax, and give you a view per request and response of the changes. github.com/singe/burp_g...
A screenshot of the rule editing dialog with all the options described in the readme.
021
Felipe Molina @felmoltor.me · 23/01/2026
010
Felipe Molina @felmoltor.me · 23/01/2026
Today I made my first portrait of the sun 🌞 You can even see the sunspots! The focal length of my telescope makes it impossible to take the picture of the whole sun, but I'll get to it soon.
A close up picture of the sun with a dozen sunspots or so
110
Reposted by Felipe Molina
💥 leonjza @leonjza.bsky.social · 21/01/2026
Quick lunch time side quest building a simple lab to play with the inetutils-telnetd authentication bypass as disclosed on oss-sec ₁. github.com/leonjza/inet... ₁ seclists.org/oss-sec/2026...
PoC authentication bypass for telnetd.
043
Felipe Molina @felmoltor.me · 20/01/2026
With a bit of zoom and colour correction
010
Felipe Molina @felmoltor.me · 20/01/2026
Yesterday I was able to catch, with my phone, Jupiter transitioning through the lens. A lot of margin for improvement (e.g. motor for the RA axis), but happy with the progress I'm making 🔭
130
Felipe Molina @felmoltor.me · 19/01/2026
And a few more of this morning 🌅
010
Felipe Molina @felmoltor.me · 19/01/2026
A few photos I took this weekend 🐶🐦
110
Felipe Molina @felmoltor.me · 16/01/2026
media.tenor.com
a man in a suit and white shirt is standing in front of a window and says `` i 'm an immortal '' .
ALT: a man in a suit and white shirt is standing in front of a window and says `` i 'm an immortal '' .
010
Reposted by Felipe Molina
Dominic White @singe.bsky.social · 16/01/2026
The number of times people have tried to kill Net-NTLMv1 eh? youtu.be/lm7Cuktpnb4?...
142
Felipe Molina @felmoltor.me · 15/01/2026
Uh, really excited to give my new toy a try tonight 📹🔭
A planetary camera
010
Felipe Molina @felmoltor.me · 31/12/2025
I'm getting more and more disappointed with the Internet nowadays, so I made one for myself yesterday.
A black box with a single red led similar to the Internet as depicted in IT Crowd
030
Reposted by Felipe Molina
Andy Greenberg @agreenberg.bsky.social · 01/10/2025
A source shares some screenshots of the Lapsus ransomware gang celebrating the government shutdown as a disruption to the FBI investigations tracking them. They also refer to Trump as "my king."
23121
Felipe Molina @felmoltor.me · 11/09/2025
Eso no se olvida nunca, lo llevo como el tatuaje de la mili de "Amor de GPO"
010
Felipe Molina @felmoltor.me · 11/09/2025
Gracias! Me va a venir genial esa lista para desconectar un poco del contenido americano. Joder, no consigo recordar ese diagrama de Venn! Pero tampoco me acuerdo de lo que comí ayer, así que...
110
Felipe Molina @felmoltor.me · 11/09/2025
Yeah, probably it's my fault (my follow list), combined with the insufficient user base of other countries here, and, probably, the algorithm used in the "Discovery" tab.
110
Felipe Molina @felmoltor.me · 11/09/2025
Maybe it's my fault, but I'm really missing non-US related content in Bluesky. Can we talk about other countries, please? I don't want to go back to X 😢 🙏🏼
120
Reposted by Felipe Molina
💥 leonjza @leonjza.bsky.social · 10/09/2025
If you're at RomHack at the end of the month, come tell me your @github.com username and I'll give you early access to the @sensepost.com tool repo for PipeTap at the con! 🙃 Below is a demo of the proxy in action. www.youtube.com/watch?v=or8Y...
youtube.com
PipeTap WIP Demo
YouTube video by Leon Jacobs
122
Reposted by Felipe Molina
💥 leonjza @leonjza.bsky.social · 10/09/2025
I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)
The proxy view for PipeTap, a Windows Named Pipe Analysis Tool
297
Reposted by Felipe Molina
Nfknanna @nfknanna.bsky.social · 04/09/2025
One of the pools in the Alhambra Palace complex in Granada.... had to be this one for #PalacesandGardens #Water #photography #dailyphoto #travel #Spain
Three sides of a sand-coloured building surrounding a rectangular pool. The pool is edged by a low hedge and the water reflects the surrounding buildings and the blue sky above. In the foreground water trickles down into the pool from a smaller circular stone pool. The building at the far end has a carved, arched verandah and sits below a square tower. People stroll along the sides of the building.
1262
Reposted by Felipe Molina
SensePost @sensepost.com · 31/07/2025
Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s mssqlclient.py. Storytime from Aurelien (@Defte_ on the bird site), including instructions for reproducing the test environment yourself. sensepost.com/blog/2025/a-...
A screenshot of two windows. The top is a view of the Microsoft SQL management GUI showing that “Extended Protection” is enabled for NTLM authentication. The bottom is a terminal showing an invocation of Impacket’s mssqlclient.py successfully connecting using channel binding.
0106
Reposted by Felipe Molina
Cloudflare @cloudflare.social · 30/07/2025
From June 2025 through July 2025, the Cloudflare Email Security team has been tracking a cluster of cybercriminal threat activity leveraging Proofpoint and Intermedia link wrapping to mask phishing payloads. Read more: cfl.re/4lUXBEE
cfl.re
Attackers abusing Proofpoint & Intermedia link wrapping to deliver phishing payloads
Attackers are exploiting Proofpoint and Intermedia link wrapping to mask phishing payloads.
082
Reposted by Felipe Molina
Catalin Cimpanu @campuscodi.risky.biz · 19/07/2025
There's an ongoing npm supply chain attack taking place: socket.dev/blog/npm-phi... x.com/AikidoSecuri...
socket.dev
Active Supply Chain Attack: npm Phishing Campaign Leads to P...
Popular npm packages like eslint-config-prettier were compromised after a phishing attack stole a maintainer’s token, spreading malicious updates.
02110
Felipe Molina @felmoltor.me · 17/07/2025
The bcheck is here, ping me if you have comments or improvement suggestions: github.com/felmoltor/BC...
github.com
BChecks/vulnerabilities-CVEd/CVE-2025-5777 - CitrixBleed 2.bcheck at main · felmoltor/BChecks
BChecks collection for Burp Suite Professional and Burp Suite DAST - felmoltor/BChecks
000
Felipe Molina @felmoltor.me · 17/07/2025
I've created a pull request to detect CitrixBleed 2 into Burp's Bcheck repository: github.com/PortSwigger/...
github.com
CVE-2025-5777 - CitrixBleed 2 by felmoltor · Pull Request #253 · PortSwigger/BChecks
BCheck Contributions BCheck compiles and executes as expected BCheck contains appropriate metadata (name, version, author, description and appropriate tags) Only .bcheck files have been added o...
100
Felipe Molina @felmoltor.me · 14/07/2025
I wrote a tool to detect orphan scripts at a scale using Scrapy as its foundation: JsJack. Finding vulnerabilities in high-volume traffic sites was more challenging than I initially expected, but I learned many other things from this experience: blog.felipemolina.com/posts/jsjack/
blog.felipemolina.com
JsJack
A tool to find orphan scrips and two interesting cases
000
Reposted by Felipe Molina
Taggart @taggart-tech.com · 14/07/2025
Oh neato, a 13 year-old vuln in (checks notes) all US trains that allowed anyone to control the brakes? Cool cool cool.
tomshardware.com
Security vulnerability on U.S. trains that let anyone activate the brakes on the rear car was known for 13 years — operators refused to fix the issue until now
Wireless hardware to seriously disrupt rail transport costs less than $500.
32412
Reposted by Felipe Molina
Eugene Vinitsky 🍒 @eugenevinitsky.bsky.social · 10/07/2025
Well, a single week was enough to provide a convincing case that a Wikipedia equivalent for LLMs is necessary i.e. decentralized LLM training and serving
asking grok 4 for its opinions on israel palestine it first searches to see what Elon musk thinks
410117
Reposted by Felipe Molina
Fernando Blanco 🦋 🏳️‍🌈 🏳️‍⚧️ @fernandoblancopsy.com · 11/07/2025
Y luego tenemos a unos cuantos gurús educativos proponiendo que el alumnado "le pregunte las dudas" a ChatGPT...
2147
Reposted by Felipe Molina
Catalin Cimpanu @campuscodi.risky.biz · 10/07/2025
These arrests are the definition of "don't shit where you eat"
1111
Reposted by Felipe Molina
Adam Baldwin @evilpacket.net · 10/05/2025
The finding was for "JWT weak HMAC secret" and it said the secret was literal "secret" A range of emotions pushed me in various directions at once. What? no.!? yes!!!!!!! let's verify...
151
Felipe Molina @felmoltor.me · 18/06/2025
Anyway, the BTC address is 17vv2jEQBbPbzfBaWMJGXJd6EPrsvjt34J and the guy is cybertraderoficial@gmail.com. In case you want to phish the guy 🎣
010
Felipe Molina @felmoltor.me · 18/06/2025
All hail the stupid king! Me! 🤴 In 2024 forgot that I was running a Mongo Express in a docker container without authentication (AS IT WAS ONLY INTERNALLY EXPOSED). Later, I randomly did some tests with Nginx to expose port 8081 and forgot about it... Fast forward to June 2025:
110
Felipe Molina @felmoltor.me · 13/06/2025
If this is true, this is the best news I've read this week! Excited to activate my nostalgia mode with Spaceballs 2! www.ign.com/articles/spa...
ign.com
Spaceballs 2 Will See Rick Moranis Return as Dark Helmet as Mel Brooks Sequel Trailer Plots a Course for 2027 - IGN
Moviemaking icon Mel Brooks and Amazon MGM Studios have published a special trailer to announce that Spaceballs 2 is moving full steam ahead with plans to premiere in 2027.
010
Felipe Molina @felmoltor.me · 13/06/2025
I programmed some time ago a crawler with Scrapy to detect orphan JavaScript scripts in target domains. I think I'll release that tool soon ☺️
000