@Tsynack

what ever you do, be legendary at it.

Joined October 2009
  • Tweets1.9K
  • Following266
  • Followers169
128Media
Announcing the release of Dungeons & Daemons, TrustedSec’s new cybersecurity #RPG 🎲 A browser-based game that drops you into a “live” engagement. Your mission: prove you’ve got what it takes to be on the #RedTeam. Read our #blog for the game breakdown! hubs.la/Q04ckLD90

Dungeons and Daemons

trustedsec.com
20
1
49
4,627
We put #LLMs to the test—let's find out how good #AI is at hacking! In our new blog, @__mez0__ walks through six simple challenges with intentionally naïve setups to test how capable each model is at single-step exploit validation. Read it now! hubs.la/Q04bWSbJ0

Benchmarking Self-Hosted LLMs for Offensive Security

We put LLMs to the test—let's find out how good AI is at hacking! We walk through six simple challenges with intentionally naïve setups to test how…

trustedsec.com
2
39
3
95
19,627
Kurt retweeted
sui
@birdaboApr 6
SOMEONE MADE A DIGITAL WHIP TO MAKE CLAUDE WORK FASTER 💀
1,596
11,277
2,441
141,707
14,926,516
Kurt retweeted
Mayfly@M4yFlyMar 9
🔥🐉 New GOAD Lab: DRACARYS I’ve just released a new free lab environment on GOAD: DRACARYS. The challenge includes 3 VMs and the objective is simple: Start with no authentication and work your way up to Domain Admin. Have fun exploiting it! 🔥🐉 mayfly277.github.io/posts/Dr…

Dracarys

DRACARYS is a new lab environment challenge (not for beginners) on GOAD : https://github.com/Orange-Cyberdefense/GOAD

mayfly277.github.io
13
99
2
299
18,077
Have questions about mobile application testing? Our experts have answers! Join us for a live Discord session next Thursday at 11:00AM with Senior Security Consultants Kelsey Segrue, @_whit_ney_m, and @Tsynack. Find our Discord invite on our website! trustedsec.com/about-us/even…
6
11
2,721
Join us for an exclusive live Discord session on September 25 at 11:00AM with Senior Security Consultants Whitney Phillips and @Tsynack! This month's AMA is mobile app testing. Find our Discord invite on our website and be sure to bring your questions! trustedsec.com/about-us/even…
5
7
3,676
Are you interested in incorporating Large Language Models (LLMs) into app tests yet lack the tooling to get you there? In our new #blog, App Security Practice Lead Geoff Walton walks through how to start using effective #LLM attacks today. Read it now! hubs.ly/Q0375WpK0

Getting Started Using LLMs in Application Testing With an MVP

Are you interested in incorporating Large Language Models (LLMs) into app tests yet lack the tooling to get you there? This blog walks through how to…

trustedsec.com
16
33
3,345
🔥🔥
240
3,665
226
37,466
2,446,573
Kurt retweeted
rekdt
@rekdt14 Nov 2024
The secret ingredient to Cyber success is the same as the secret ingredient in Soylent Green
15
8
2
52
2,977
Are your servers vulnerable? In our new #blog, Senior Security Consultant @Tsynack walks us through some lesser-known attacks against JSON Web Signature (JWS) and how to check your systems. Read it now! hubs.la/Q02YcF9x0

Attacking JWT with Self-Signed Claims

Understanding JWS vulnerabilities and how to exploit them is crucial for securing applications and APIs that use JSON Web Tokens (JWTs).

trustedsec.com
27
44
4,607
As we approach the end of the year, we are reposting some of our most popular #blogs. This week, we are revisiting @Tsynack's blog where he will guide you through how to use the #Android emulator for testing a mobile application. Read it now! hubs.la/Q02W82fV0

Android Hacking for Beginners

Figure 4 - Configure Network Proxy (click to play) Figure 5 - API Status Figure 6 - API Request Proxied For some Android applications, certificate pinning…

trustedsec.com
2
15
34
3,388
For those of you wondering
12
1
1
66
2,502
🤣🤣🤣
52
293
22
4,852
421,447
It was awesome getting to speak with @paradigm_cyber about their school InfoSec program! Tune in tomorrow to learn about what they do and how your kid/s can prepare for a career in Cyber Security!
TrustedSec
@TrustedSec27 Jun 2024
The season finale of #SecurityNoise drops tomorrow! Listen as we chat with special guests Keith Koehne and Matt Miller from @paradigm_cyber about how they prepare the next generation of work-ready InfoSec professionals. Search for "Security Noise" wherever you get your podcasts!
5
6
4,275
20
357
16
1,624
83,194
Wait for it...🤣
6
77
9
471
44,125
Remote Code Execution by Server-Side Template Injection in Model Metadata CVSS 9.7 in llama_cpp_python found by @ruikai github.com/abetlen/llama-cpp…

Remote Code Execution by Server-Side Template Injection in Model Metadata

## Description `llama-cpp-python` depends on class `Llama` in `llama.py` to load `.gguf` llama.cpp or Latency Machine Learning Models. The `__init__` constructor built in the `Llama` takes sever...

github.com
21
1
35
6,802
5
11
2
45
4,456
Vulnerability in Putty: "attacker in possession of a few dozen signed messages and the public key has enough information to recover the private key" * Revoke keys immediately including public in authorized_keys * Generate a new key pair and replace chiark.greenend.org.uk/~sgta…
16
189
17
553
99,435
It's Leak Week on #SecurityNoise! Geoff and @FullMetalHackIT chat with @_whit_ney_m and @Tsynack about a number of recent privacy pitfalls including destructive #ransomware groups and leaked government emails. Listen now wherever you get your #podcasts! hubs.la/Q02nHlcb0
6
46
6,129
Load more