iiinova — where your digital self keeps evolving

Reposted by Justin Gardner

ᴅᴀɴɪᴇʟ ᴍɪᴇꜱꜱʟᴇʀ @danielmiessler.bsky.social · 07/01/2025

🚀 This week's UL is live! Featuring: 🌐 Launching 2025 📂 US soldier data leak 🤖 AI agents begin to emerge 🇨🇳 China’s global spy network revealed 🚕 Robotaxis now safer than human drivers newsletter.danielmiessler.com/p/ul-463

newsletter.danielmiessler.com

UL NO. 463 | Launching 2025, US Soldier Data Leak, AI Agents Emerge, China's Global Spy Network, Robotaxis Now Safer Than Humans

Navigating AI's impact on work, the rise of transnational threats, a grim new reality in air travel, and how to harness the chaos of 2025 for personal and professional growth

151

Reposted by Justin Gardner

Gareth Heyes @garethheyes.co.uk · 19/12/2024

TIL: Array.fromAsync([1],alert)

0125

Justin Gardner @rhynorater.bsky.social · 06/12/2024

We released our 100th episode of @ctbbpodcast.bsky.social yesterday - really proud of the whole CTBB team! We're sad to be losing @teknogeek.io, but very hopeful for future of the pod! We're going to lean more into the discord community and keep producing HQ technical content in 2025.

4181

Justin Gardner @rhynorater.bsky.social · 06/12/2024

Yo, new big thing: Shift. AI seamlessly integrated into your HTTP proxy. Use cases: "Take this JS and build the JSON request body" "Fill in these IDs from my notes - UserA" "Create a match and replace rule to turn on this feature flag" "Generate a wordlist with all HTTP Verbs"

1115

Reposted by Justin Gardner

ctbbpodcast.bsky.social @ctbbpodcast.bsky.social · 04/12/2024

We spend a lot of time talking to the hackers, but today, we're dropping a goodie for the program managers! Here are our top tips for running a kickass bug bounty program. See the matrix at the end for high impact to hackers, low effort changes. blog.criticalthinkingpodcast.io/p/program-ma...

blog.criticalthinkingpodcast.io

Program Manager’s Guide To Running a Successful Bug Bounty Program

How to run a bug bounty program hackers will love to hack on.

063

Reposted by Justin Gardner

TomNomNom @tomnomnom.com · 03/12/2024

Bash tip: hit ctrl+x then ctrl+e to edit your current command in $EDITOR, write and quit to run it

2366

Reposted by Justin Gardner

smaury @smaury.bsky.social · 30/11/2024

If you are interested in client-side hacking and browser quirks I strongly recommend going through this writeup by @maitai.bsky.social! It was also cool to collab w/ him on the second chall 🤜🏿🤛🏻 blig.one/2024/11/29/f...

blig.one

Flatt Security XSS Challenge - Writeup | maitai's blog

0137

Reposted by Justin Gardner

TomNomNom @tomnomnom.com · 29/11/2024

Pro-tip: gron is awesome for diffing JSON 🥰 github.com/tomnomnom/gron

310529

Reposted by Justin Gardner

ctbbpodcast.bsky.social @ctbbpodcast.bsky.social · 28/11/2024

This week we've got a rare episode that is also a bit more beginner friendly! 0xLupin (of Lupin and Holmes) and @rhynorater.bsky.social breakdown some of the hacker mentality that really caused some breakthrough in their hacker growth. Check it out! youtu.be/yxc2jVKE-jo

youtu.be

Back to the Basics - Web Fundamental to 100k a Year in Bug Bounty (Ep. 99)

YouTube video by Critical Thinking - Bug Bounty Podcast

0319

Justin Gardner @rhynorater.bsky.social · 27/11/2024

I talk about this on the pod all the time, but CSRF is dead simple. You just need to know the conditions. I'm not gonna recite them again here, but today a new condition came up: No Content-Type header -> no CSRF restrictions Same-site: None POST = CSRF The research:

4415

Justin Gardner @rhynorater.bsky.social · 27/11/2024

Alright, new platform so I'm going to start sharing some things that I'm excited about to keep the momentum flowing! Rn, I think the 403 Bypasser Caido plugin from Bebiks is freaking amazing. This is a tool to automate the bypassing of walled-off endpoints. This plugin does 3 things right:

3378

Justin Gardner @rhynorater.bsky.social · 27/11/2024

Kinda came kicking and screaming to this app at the thought of having another app to open and post too, but I'm gonna give it a shot to see how the community is!

2190