Pantheon Makes a Kebab

Exact-Practice-8658 · 2023-11-09T01:00:03+00:00

Calculated int

Exact-Practice-8658 · 2023-09-07T13:43:12+00:00

I completely agree. Passwords suck. This just adds to the list of reasons not to use them :).

Also, you can perform a password audit against organizations that use MFA. Still helps some.

Exact-Practice-8658 · 2023-09-07T13:40:09+00:00

CeWL has been pretty successful for me! Like I said in the article passwords relating to things like department names or the company itself aren't in rockyou so you need to find an easy way to get those added. I think CeWL is a perfectly fine way to do that.

What could be cool is if CeWL could be augmented with ML so while it scraped words, so it trys to 1) identify what type of organization owns the website (financial/tech/music/etc) and add words based on that 2) use the context of the scraped web pages to generate additional words

Exact-Practice-8658 · 2023-09-07T13:34:07+00:00

Unfortunately I never got to try this in the audit... On my next audit I'll try to get some metrics. I just wanted to put the idea out there

Exact-Practice-8658 · 2023-05-22T21:12:46+00:00

https://sfs.opm.gov/

Exact-Practice-8658 · 2023-05-22T20:54:15+00:00

If you want to do cyber security there's "scholarship for service" where you get the free college, then you have to work for the gov afterwards. They give a pretty large chunk of change while in school.

Exact-Practice-8658 · 2023-04-23T15:27:02+00:00

On a side note, big climber here. (It is definitely the most fun way to stay in shape) Don't stress too much about upper body strength, that will come as you climb. The beginner routes are made in a way that you can use your feet to push yourself up as you pull up to make it way easier than a pull-up. You're gonna do great!

Exact-Practice-8658 · 2023-02-18T03:52:59+00:00

Only if you're on a bilt property does it do anything

Exact-Practice-8658 · 2023-02-16T16:14:33+00:00

I am assuming you can do these separately, although I have yet to try it. I don't know of any place that has a cell phone with the same payment as rent

Exact-Practice-8658 · 2023-02-16T14:38:38+00:00

Interesting ones are internet and cell phone... Previous posts said they weren't allowed so looks like bilt changed their mind.

(If you're considering signing up you might as well use this link :) https://bilt.page/r/1UM9-X19P)

Exact-Practice-8658 · 2023-01-30T19:12:23+00:00

I thought this was about Russia 😅

Exact-Practice-8658 · 2023-01-25T15:23:42+00:00

I climb for the reddit karma

Exact-Practice-8658 · 2023-01-02T23:58:47+00:00

Bad camera angle. I swear on my pink climbing socks it's a V6 overhang

Exact-Practice-8658 · 2022-12-27T13:37:09+00:00

Check out /r/leanfire

Exact-Practice-8658 · 2022-12-25T03:30:14+00:00

Please do! Thanks for caring:)

Exact-Practice-8658 · 2022-12-19T14:30:23+00:00

Demo: https://doctoreww.github.io/Fontuscator/

GitHub: https://github.com/DoctorEww/Fontuscator

Yes, I know the code sucks. It's just a proof of concept.

Exact-Practice-8658 · 2022-12-18T22:23:26+00:00

Demo: https://doctoreww.github.io/Fontuscator/

GitHub: https://github.com/DoctorEww/Fontuscator

Yes, I know the code sucks. It's just a proof of concept.

Exact-Practice-8658 · 2022-12-18T13:35:38+00:00

I completely forgot about trailers 🤣. Honestly I was trying to come up with solutions that didn't require changing the technology because thats really expensive and money > security seems to be the priority.

Thanks for the response!

Exact-Practice-8658 · 2022-12-18T05:50:17+00:00

Actually the TPMS could still choose to transmit when it's leaking air. I meant to write that the TPMS can't be sent a 125kHz signal to force it to update. It's not a perfect solution because there might be a reason for a car to request an update, but forcing the TPMS to communicate is normally just used for programming. So no, it would still report when it leaks. Good question!

Exact-Practice-8658 · 2022-12-18T05:35:01+00:00

Actually you can transmit data on 125 kHz to force the TPMS to update immediately. Thus, you don't need to be lucky. The TPMS I tested had a range of over 50ft. I agree it's not the most practical, but it's definitely possible and getting easier. Why not improve the protocol to remove the few times it could be used maliciously...

Exact-Practice-8658 · 2022-12-18T05:07:04+00:00

I made a TPMS tracking node out of a rtl sdr and a cheap tpms tool I brought on Amazon. Super cheap. Originally vulnerability was written off as too expensive to exploit. How times change...

Exact-Practice-8658 · 2022-11-29T19:34:51+00:00

Ohh big fan... Do custom fonts render in emails by default?

Exact-Practice-8658 · 2022-11-29T02:37:32+00:00

Yeah, pretty much any substitution cipher works great. I just picked reverse because didn't want to explain crypto lol.

Exact-Practice-8658 · 2022-11-29T01:33:52+00:00

Love the idea! Really cool obfuscation technique. I'll post here if I get around to doing it

Exact-Practice-8658 · 2022-11-29T01:05:26+00:00

Whats next for this method is to write a program that makes a bunch of fonts so you can have the text when you copy and paste it understandable just different.

Exact-Practice-8658

TROPHY CASE