Sign in

Joo N/A

@joohoi.bsky.social
1.5K followers 180 following 25 posts

Hacks for beer. FOSS, infosec and privacy. Chaotic good.

PostsRepliesMedia
Joo N/A @joohoi.bsky.social · 14/07/2026
Ever wondered how some cli flag in ffuf works? I just rewrote the whole ffuf documentation, and one of the ways to browse it is through cli flag reference. Check them out: github.com/ffuf/ffuf/wi...
github.com
CLI flags
Fast web fuzzer written in Go. Contribute to ffuf/ffuf development by creating an account on GitHub.
042
Joo N/A @joohoi.bsky.social · 02/01/2026
I’m not a ”Inbox Zero” - type of a person, but I do have an eye for symmetry
Mobile icon for Gmail, showing 13131 unread emails
010
Joo N/A @joohoi.bsky.social · 01/10/2025
It’ll turn into a proper stockholm syndrome after a while though. Love is love.
010
Joo N/A @joohoi.bsky.social · 03/08/2025
Hyped! Our caravan is heading out to #why2025 in just a two short days!
031
Reposted by Joo N/A
STÖK @stokfredrik.bsky.social · 30/07/2025
Pure Scandinavian Darkness presents : - SOUL CAPTURE - Shoot, steal, store offline. @joohoi.bsky.social | @stokfredrik.bsky.social Iconic photosessions coming to @why2025.bsky.social
162
Joo N/A @joohoi.bsky.social · 25/07/2025
Sweet!
100
Joo N/A @joohoi.bsky.social · 25/07/2025
For sure! Now I’m on a quest to find if someone has designed a printable backplate for it. I definitely want the badge to survive me and my mishandling 😂
100
Reposted by Joo N/A
BlockTjej'n crocheting @erlern.bsky.social · 15/07/2025
Friends! Any spare tickets to #WHY2025? Roadtrip is on, baby!
media.tenor.com
a group of people are sitting in a car with the words `` road trip '' written on the bottom .
Alt: a group of people are sitting in a car with the words `` road trip '' written on the bottom .
033
Joo N/A @joohoi.bsky.social · 09/07/2025
Our talk with @stokfredrik.bsky.social about bitflips in the modern day and crazy results of our research was accepted to #why2025 ! It’s called ”Flipping Bits: Your credentials are certainly mine”. Come and see your favorite black metal band on the stage there ;)
030
Joo N/A @joohoi.bsky.social · 09/07/2025
Exaxtly what a undercover robot would say 🧐
020
Joo N/A @joohoi.bsky.social · 19/05/2025
Awesome job, that we all benefit from for years to come!
010
Reposted by Joo N/A
Filippo Valsorda @filippo.abyssdomain.expert · 19/05/2025
Three Trail of Bits engineers audited core Go cryptography for a month and found only one low-sev security issue... in unsupported Go+BoringCrypto! 🍾 Years of efforts on testing, limiting complexity, safe APIs, and readability have paid off! ✨ Yes I am taking a victory lap. No I am not sorry. 🏆
go.dev
Go Cryptography Security Audit
Go's cryptography libraries underwent an audit by Trail of Bits. Read more about the scope and results.
1457083
Joo N/A @joohoi.bsky.social · 06/05/2025
Hi, have been really busy, but the idea is to host it under the organization instead of my personal namespace. Are you able to wait couple of days for me to get things ready?
110
Joo N/A @joohoi.bsky.social · 19/04/2025
In case it was set to a CA with non-broken validation, sure. If not, it would be another violation.
000
Reposted by Joo N/A
I am H7 @velikani.bsky.social · 19/04/2025
"Solderless", request by a friend for something. 10 characters in a group/title name is a difficult fit :) #ascii #oldskool #digitalart #textmodeart
0103
Reposted by Joo N/A
Disobey_Fi @disobeyfi.bsky.social · 16/02/2025
Exhausted? Maybe even some signs of hangover? Event post-blues after saying goodbye to all the wonderful people? Believe us, we are going through those too. Thank you all again and see you next year! ❤️
0121
Joo N/A @joohoi.bsky.social · 05/01/2025
Oh, Spill is new to me, gonna check it out. A ”tip” for pandemic; we usually crank up the difficulty, but play with open cards, and for sure take our sweet time planning four turns ahead… Only for the situation to change and the whole process to start again after this turn 😅
000
Joo N/A @joohoi.bsky.social · 05/01/2025
If you love to strategize together, I highly recommend trying out a co-op (in case you haven’t yet). That’s the type my gaming group is gravitating towards. A great example of the genre would be Spirit Island boardgamegeek.com/boardgame/16...
boardgamegeek.com
Spirit Island
Island Spirits join forces using elemental powers to defend their home from invaders.
020
Joo N/A @joohoi.bsky.social · 05/01/2025
Sounds great and fear not, the second run will be a much smoother experience for all. When everyone around the table has a vague idea over the full span of a game session, it’ll empower them to make better strategic moves early on. Remember to forge (and break) pacts during the session as well ;)
000
Joo N/A @joohoi.bsky.social · 05/01/2025
Root is amazing! Might be a bit of a learning curve for some, but when you get it, it’s brilliant. A ton of replayability too, as all the roles play completely differently etc. I have all the extensions too, but haven’t moved to those yet as the base game has still things to explore after 10ish runs
010
Joo N/A @joohoi.bsky.social · 31/12/2024
Dicks are often insecure though. Confused, please advice
020
Reposted by Joo N/A
BlockTjej'n crocheting @erlern.bsky.social · 27/12/2024
In a little less than 24hrs i will be talking about counter surveillance for women's shelters and how surveillance state is gonna surveill. Prepare for emotional whiplash :))) #38C3 events.ccc.de/congress/202...
0134
Reposted by Joo N/A
STÖK @stokfredrik.bsky.social · 26/12/2024
Oof, Im nervous.. Sure Iv traveled to security conferences & present talks on main stages around the world before. But today im doing something different. Im heading to #38c3 as a tourist and since its my first time at congress, if you find me all lost / lurking, say hi ❤️✌️ and show me what’s up!
5312
Reposted by Joo N/A
Nicolas Grégoire @agarri.fr · 23/12/2024
Somebody uploaded to SlideShare the slides of my talk at @northsec.bsky.social 2023 🌐 It’s the sequel of the first @burpsuite.bsky.social talk I ever gave, exactly 10 years before 🛠️ Enjoy these 50 slides of Burp tips 🎁🎅
slideshare.net
Burp suite pro tips and tricks for hacking
Burp suite pro tips and tricks for hacking - Download as a PDF or view online for free
03818
Joo N/A @joohoi.bsky.social · 19/12/2024
That sounds both, super entertaining as well as super educational at the same time. Let’s gooooooooo, I’ll be there fo sho.
000
Reposted by Joo N/A
WHY2025 @why2025.bsky.social · 06/12/2024
All I want for Christmas is TICKETS TO WHY2025! tickets.why2025.org
WHY logo with "GET YOUR TICKETS" on the inside and
"The Early Nerds Catches The ..." underneath
186
Joo N/A @joohoi.bsky.social · 06/12/2024
Yay, it’s gonna be awesome once again!
010
Reposted by Joo N/A
Nicolas Grégoire @agarri.fr · 06/12/2024
Tickets for next year’s Dutch hacker camp are on sale! 🤑 I went to all of the camps (HAL, WTH, HAR, OHM, SHA, MCH and WHY) since 2001 and don’t plan to stop ⛺️
185
Reposted by Joo N/A
Iiro Uusitalo @iirouusitalo.fi · 28/11/2024
Kannattaa ottaa kuunteluun ystäväni @laurakankaala.bsky.social uusi podcast Varjojen verkko. Tykkään kovasti tästä satukirjamaisesta kerronnasta internet ilmiöistä. areena.yle.fi/podcastit/1-...
areena.yle.fi
Varjojen verkko
Laura Kankaala on hakkeri ja maailmanluokan tietoturva-asiantuntija, joka rakastaa internetin salaisuuksia. Tässä podissa hän ottaa sinut mukaan matkalle netin ratkaisemattomien mysteerien äärelle, pi...
181
Reposted by Joo N/A
DilDog 🅅 @dildog.l0pht.com · 28/11/2024
you can do it
3252
Joo N/A @joohoi.bsky.social · 27/11/2024
I’ve had a great success with substituting mango with persimon in hot sauces, esp. with aromatic chilies like you seem to be sporting.
010
Reposted by Joo N/A
harisec @harisec.bsky.social · 26/11/2024
I've released 'brainstorm': an alternative way to do web fuzzing combining my fav fuzzing tool 'ffuf' (from @joohoi.bsky.social )with local LLMs (via Ollama API) to generate smarter filename tests. It usually finds more endpoints with fewer requests. Added a IIS shortname support @irsdl.bsky.social
5389
Joo N/A @joohoi.bsky.social · 26/11/2024
Took a quick look and it looks cool! I wonder if in the future it’d make sense to gather and analyze statistical data of the hits (most likely to hit) to have an efficiency vector built in. Would be cool to be able to go from most likely to least likely. Probably not trivial with the models.
140
Reposted by Joo N/A
dmnk @dmnk.bsky.social · 20/11/2024
If you've missed #BigSleep on other platforms: Project Zero blog: LLMs find 0days now! And: our fuzzer setup did *not* reproduce it! googleprojectzero.blogspot.com/2024/10/from...
googleprojectzero.blogspot.com
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code
Posted by the Big Sleep team Introduction In our previous post, Project Naptime: Evaluating Offensive Security Capabilities of Large L...
0214
Joo N/A @joohoi.bsky.social · 20/11/2024
That’s awesome Tom! Seeing your talk at Ekoparty, I truly felt that you belong on the stage. So good! You definitely need to do more of that for all the rest of us. Just remember to position perfectly for the proper light 😉
110
Reposted by Joo N/A
STÖK @stokfredrik.bsky.social · 18/11/2024
Got featured in Argentinas largest newspaper ”clarin” together with @joohoi.bsky.social this Sunday, pretty ”stoked” about that : www.clarin.com/tecnologia/s...
Joohoi and stök presenting their research around bitflips on the main ekoparty stage,
0132
Reposted by Joo N/A
dmnk @dmnk.bsky.social · 15/11/2024
Slides for my @ekoparty talk "Advanced Fuzzing With LibAFL" - > docs.google.com/presentation...
docs.google.com
Advanced Fuzzing With LibAFL @ Ekoparty 2024
Advanced Fuzzing With LibAFL Dominik Maier Ekoparty 2024-11-15 1
04420
Reposted by Joo N/A
TomNomNom @tomnomnom.com · 15/11/2024
As expected, @stokfredrik.bsky.social and @joohoi.bsky.social delivered an entertaining and informative masterpiece of a talk at Ekoparty 🥳
1112
Joo N/A @joohoi.bsky.social · 14/11/2024
…and the ffuf one was already
000
Joo N/A @joohoi.bsky.social · 14/11/2024
It will be recorded!
100
Joo N/A @joohoi.bsky.social · 14/11/2024
Suddenly a lot of activity in the BlueSky. Sweet! Let’s give this another spin. Currently enjoying Ekoparty in Buenos Aires with @stokfredrik.bsky.social and @tomnomnom.com . Delivered a ffuf talk yesterday and now prepping for our bitflip talk tomorrow. It has, and will continue to be epic!
092
Joo N/A @joohoi.bsky.social · 25/12/2023
Nah, we good here. The regulations also make sure that Santa cannot sell my present list preferences to external parties and is not allowed to collect info about my security systems for his side gig without my explicit permission.
0201