Public feed · Elektrine

@primonatura@mstdn.social ##5236833

&quot;Seabird numbers bounce back in Solent region after 2022 avian flu wipeout&quot; #Birds #Animals https://www.theguardian.com/environment/2026/oct/19/seabird-numbers-bounce-back-solent-region-avian-flu-rspb

@primonatura@mstdn.social ##5236832

&quot;Study: New coal projects outpace cancellations 3 to 1&quot; #Coal #FossilFuels #Energy https://www.edie.net/study-new-coal-projects-outpace-cancellations-3-to-1/

@primonatura@mstdn.social ##5236831

&quot;El Niño Brings Exotic Sea Life to the California Coast&quot; #ElNino #California #US #USA #America #Animals https://e360.yale.edu/digest/california-el-nino-exotic-species

@primonatura@mstdn.social ##5236830

&quot;Rain gardens and trees are helping Pittsburgh reduce flooding&quot; #Environment #Nature https://yaleclimateconnections.org/2026/10/rain-gardens-and-trees-are-helping-pittsburgh-reduce-flooding/

@artmet@xscape.zclan.cc ##5236824

#nsfw #nude #nudity #naked #nudes #boobs #tits #titties #natural #naturalboobs #thighs #thickthighs #beautiful #beauty #sexy #pretty #hot #artmet #spicy #cute More at MetArt Check this @porncollector@xscape.zclan.cc for more 18+ adult content

@bug404found@infosec.exchange ##5236821

Timeline forensics : corrélez logs, artefacts mémoire et MFT avant de conclure. Un `volatility3 -f mem.raw windows.info` puis `fls -m C: image.dd` donne souvent la clé d&#39;un incident. Astuce : normalisez les TZ en UTC dès le départ, sinon votre timeline ment. Labs pratiques sur bug404found : https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #DFIR #Forensics #MemoryForensics

@bug404found@infosec.exchange ##5236820

SSRF : ne blacklistez pas les IP, validez par résolution DNS puis re-vérifiez l&#39;IP au moment de la connexion (TOCTOU). XSS : contextes HTML/JS/URL ≠ mêmes encodages. SQLi : requêtes préparées, jamais de concat. Pour pratiquer ces chaînes d&#39;exploitation en lab : bug404found https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #appsec #bugbounty #websecurity

@bug404found@infosec.exchange ##5236819

CVE triage tip: before PoC hunting, fingerprint the exposed stack with `nmap -sV -Pn --script http-headers` and correlate versions to CVE/NVD. Most &quot;critical&quot; CVEs are unreachable due to config. Validate reachability first, then exploit. Practice real scenarios in bug404found labs: https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #CVE #pentesting #vulnresearch

@bug404found@infosec.exchange ##5236818

Bug bounty : visez l&#39;impact, pas le volume. Les low-hanging fruits rapportent peu. Techniques qui marchent : chaîner IDOR + privilege escalation, exploiter les SSRF vers metadata cloud (169.254.169.254), auditer les JWT (alg:none, kid injection). Testez `curl -s http://target/.git/config` avant tout. Pour pratiquer ces scénarios en lab : bug404found https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #info...

@bug404found@infosec.exchange ##5236817

Pour tester la détection EDR d&#39;un process suspect, vérifie si les API kernel comme NtCreateThreadEx sont hookées : un simple `GetProcAddress` sur ntdll.dll révèle souvent les hooks inline. En red team, l&#39;évasion passe par le direct syscall ou l&#39;unhooking. bug404found propose des labs pratiques : https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #redteam #EDR #APT

@bug404found@infosec.exchange ##5236816

Containment first, but preserve evidence: `dd if=/dev/sdX of=image.dd bs=4M conv=noerror,sync` before remediation. Snapshot memory too. Post-mortem without timelines = guesswork. Build IR runbooks and practice them in labs like bug404found: https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #DFIR #IncidentResponse

@bug404found@infosec.exchange ##5236815

En forensics, la timeline fait souvent la différence. Astuce : sur Linux, `fls -r -m / image.dd &gt; bodyfile` puis `mactime -b bodyfile -d` pour reconstruire l&#39;activité fichier. Couplé à l&#39;analyse mémoire (Volatility) et aux logs, tu corrèles les artefacts. Pour s&#39;entraîner sur des cas concrets : https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #forensics #DFIR #...

@bug404found@infosec.exchange ##5236814

Anti-debug trick: `ptrace(PTRACE_TRACEME)` self-attach is a classic. Bypass it by patching the syscall return or hooking ptrace in a preload. For firmware, start with `binwalk -Me` then check for hardcoded keys in `.rodata`. Practical labs at bug404found: https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #reverseengineering #malware #firmware

@bug404found@infosec.exchange ##5236813

SSRF : ne bloquez pas seulement 127.0.0.1. Les redirections HTTP, DNS rebinding et IP décimales (2130706433) contournent les filtres naïfs. Validez l&#39;IP résolue après connexion, pas l&#39;URL fournie. Pour pratiquer SQLi/XSS/SSRF en local : bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #SSRF #AppSec #BugBounty

@bug404found@infosec.exchange ##5236812

Lateral movement hides in east-west traffic. Tip: baseline SMB/RDP/WinRM between hosts; alert on new pairs, not just volume. For IDS evasion, attackers fragment, encrypt, or use living-off-the-land binaries—signature-only misses it. Combine Zeek logs + flow analysis. Practice these detections in bug404found labs: https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #ThreatDetection #NetworkSecuri...

@bug404found@infosec.exchange ##5236811

CVE-2025-31324 (SAP NetWeaver, CVSS 10) : RCE non authentifiée via /developmentserver/metadatauploader. Les instances exposées sur Internet sont scannées activement depuis fin avril. Vérifiez vos logs pour des POST vers ce chemin. Tip : `grep -r &quot;metadatauploader&quot; /var/log/` puis patchezen urgence. Pour tester en lab isolé : bug404found.com #cybersec #infosec #securite #CVE #SAP #RCE

@bug404found@infosec.exchange ##5236810

Responsible disclosure: document repro steps, affected versions, impact, and a PoC that doesn&#39;t harm prod. Give vendors 90 days, then coordinate. Never drop 0-days on a Friday. Practice writing clean reports in hands-on labs at bug404found https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #ResponsibleDisclosure #BugBounty #AppSec

@bug404found@infosec.exchange ##5236809

OSINT : avant de scanner, cartographiez. `whois`, `dig any`, certificats CT (crt.sh) révèlent sous-domaines et infra oubliée. Puis theHarvester et Shodan pour la surface exposée. La collecte passive d&#39;abord, l&#39;active ensuite. Pour pratiquer en lab : bug404found https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #OSINT #reconnaissance #pentest

@bug404found@infosec.exchange ##5236808

Responsible disclosure tip: when you find a vuln, document reproduction steps with exact versions, capture PoC output, and set a disclosure timeline (typically 90 days). Report privately first, avoid public PoCs before a fix ships. Practice triage in safe labs like bug404found https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en before testing live targets. #cybersec #infosec #security #responsibleDisclosure #bugbounty #apps...

@bug404found@infosec.exchange ##5236807

Les injections SQL, XSS et SSRF restent dans le top 10 OWASP. Le point commun ? Une entrée utilisateur jamais validée côté serveur. Test rapide SSRF : `curl http://127.0.0.1:80` via un paramètre URL. Si ça répond, c&#39;est ouvert. Pour pratiquer sur des labs volontairement vulnérables : bug404found.com #cybersec #infosec #securite #AppSec #OWASP #SSRF

@bug404found@infosec.exchange ##5236806

Bug bounty : visez l&#39;impact, pas le volume. Priorisez les surfaces d&#39;attaque oubliées : sous-domaines legacy, API v1 dépréciées, endpoints d&#39;upload. Testez les IDOR avec ffuf en variant les IDs. Un low critique &gt; dix self-XSS. Labs pratiques pour s&#39;entraîner : https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=fr #cybersec #infosec #securite #bugbounty #pentest #websecurity

@bug404found@infosec.exchange ##5236805

Lateral movement often hides in plain sight: SMB/RDP between hosts looks normal to many IDS. Baseline east-west traffic, alert on new internal pairs, and watch for protocol mismatches (RDP on odd ports, SMB to non-file servers). Evasion thrives on noise—reduce it with strict allowlists. Practice detection in bug404found labs: https://bug404found.com/?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=awareness&amp;utm_content=en #cybersec #infosec #security #TrafficAnalysis #...

@kaia@pleroma.soykaf.com ##5236803

Pandemieschaden :Sheew:

@rambusek@mastodon.social ##5236797

Ich wollte ja schon immer mal alle Schwimmbäder Wiens ausprobieren. Mal im hohen Norden begonnen, im Großfeldsiedlungsbad. #wien #wienliebe #österreich #bad #schwimmbad #hallenbad #austria #vienna #swimming

@rambusek@mastodon.social ##5236796

Wenn der Postler die spanische Zitrone bringt ☺️ #Zitronen #CrowdFarming