@fullspectrumdev

disassembler of gubbins, builder of awful things, breaker of worse things, herder of cats. father of drones.

fullspectrum.dev/
Joined May 2023
  • Tweets2.7K
  • Following607
  • Followers372
157Media
Its crazy how much people blame covid for all of societies problems. Young people don't have enough sex! Its covid! Young people don't buy houses! Covid! The economy is shit! COVID!!!!! No, covid is irrelevant. None of these problems are from covid. These problems are from *wealth inequality*. If young people could buy houses, they would get married and have kids. Since young people know it is mathematically impossible for them to ever achieve that, they have opted out of society. You will either fix this, by reducing housing prices and increasing pay to workers, or society will ultimately collapse in 20 years when the birth rate basically drops to 0 and population begins crashing down. If you're okay with like 90% of the population disappearing in order to protect a handful of billionaires from having to pay taxes, so be it. But at least be honest and admit this is your end goal.
1
70
1
568
28,313
Over the weekend, a warehouse in Kyiv filled with Irish aid was destroyed by 2 russian Shahed drones. The charity Gurtom run the hub, it held hospital beds, wheelchairs, crutches, medicines, walking aids, specialist foods and ......1/3
20
220
24
552
13,000
Darren retweeted
blasty
@bl4sty14 May 2025
ok ok fine, for old time's sake haxx.in/files/limit-your-scr…
6
69
2
313
33,539
reminder to never allow suits in your company
20
50
7
750
31,945
Just checking in on the valuable educational work of other GunTubers... Oh good lord! ( ;ↀ⌓ↀ)
44
21
3
993
42,023
Today, @d0tslash and I released our write-up about a pre-installed tunnel service on @UnitreeRobotics Go1 robot dogs from China. This tunnel service enables Unitree (and anyone else with the API key) to remotely control the robot dogs or even log in to their Raspberry Pi via SSH and look around your local network. We found a total of 1,919 devices that were connected to the network at one point in time, including many universities as well as some corporate networks. Attached to this post is a Proof of Concept video, where I use the tunnel service to connect to@d0tslash's robot dog and control it remotely. Find the link to download the write-up in the first reply.
15
51
22
156
37,799
🔥 New details of the operation in Crimea — drone of special unit “Prymarу”, recorded an epic shot of avoiding a missile strike from the Russian “Pantsir-S1” complex.
18
293
7
2,532
133,608
"It's a very odd manual of arms on the L85A1"... Really? Worse than all the various forms of AK reach-aroundies that people seem to think are so cool?🤷‍♀️
47
26
3
713
72,137
We have tested CVE-2025-24813. Under specific circumstances, an exploit sent to a vulnerable Apache web server running outdated Tomcat software could lead to remote code execution. We used a 2-step method that resulted in a successful attempt. Details at bit.ly/426Njtp
Screenshot of a collage of windows in Wireshark explaining the exploit of CVE-2015-2483 on a vulnerable web server running Tomcat. It includes two steps illustrated with HTTP code examples: the first step shows an HTTP PUT request to send a malicious session file, and the second step shows an HTTP GET request with a customized cookie to deserialize the session file.

ALT Screenshot of a collage of windows in Wireshark explaining the exploit of CVE-2015-2483 on a vulnerable web server running Tomcat. It includes two steps illustrated with HTTP code examples: the first step shows an HTTP PUT request to send a malicious session file, and the second step shows an HTTP GET request with a customized cookie to deserialize the session file.

A screenshot of the Apache Tomcat web server status page displaying various server details including version numbers for Tomcat and Java, memory pool statistics, and other server information. This is highlighted in a red box and indicated by an arrow. The Apache web server has an outdated version of Tomcat as well as Java.

ALT A screenshot of the Apache Tomcat web server status page displaying various server details including version numbers for Tomcat and Java, memory pool statistics, and other server information. This is highlighted in a red box and indicated by an arrow. The Apache web server has an outdated version of Tomcat as well as Java.

A screenshot of a computer terminal with a red arrow pointing to a file named "pan_is_here." The file is located in the `/tmp` directory of a server named `server1.wiresharkworkshop.online`. The terminal displays file permissions and ownership details for the files in the directory. Exploit allowed us to write a file with root permissions in the Apache web server's TMP directory.

ALT A screenshot of a computer terminal with a red arrow pointing to a file named "pan_is_here." The file is located in the `/tmp` directory of a server named `server1.wiresharkworkshop.online`. The terminal displays file permissions and ownership details for the files in the directory. Exploit allowed us to write a file with root permissions in the Apache web server's TMP directory.

Screenshot of Wireshark HTTP stream windows. The first shows Step 1: HTTP PUT request to send malicious session file. Also tested this method on a vulnerable Apache web server with Tomcat running locally on a macOS system to open macOS calculator. Step 2 on the second HTTP stream window shows the HTTP GET request with a customized cookie.

ALT Screenshot of Wireshark HTTP stream windows. The first shows Step 1: HTTP PUT request to send malicious session file. Also tested this method on a vulnerable Apache web server with Tomcat running locally on a macOS system to open macOS calculator. Step 2 on the second HTTP stream window shows the HTTP GET request with a customized cookie.

2
92
2
320
28,935
Do Secure-By-Design pledges come with stickers? Join watchTowr Labs again, for a walkthrough of Ivanti's CVE-2025-0282 - the pre-auth RCE in their Connect Secure appliance. The timer has begun on our Detection Artefact Generator..... labs.watchtowr.com/do-secure…

Do Secure-By-Design Pledges Come With Stickers? - Ivanti Connect Secure RCE (CVE-2025-0282)

Did you have a good break? Have you had a chance to breathe? Wake up. It’s 2025, and the chaos continues. Haha, see what we did? We wrote the exact same thing in 2024 because 2024 was exactly the...

labs.watchtowr.com
6
44
3
125
25,864
A SUCCULENT JAPANESE MEAL??? THIS IS SHOGUNATE MANIFEST!
82
1,883
197
17,076
2,589,099
🫡 Операція “ГУР-КІТ” ― розвідники провели нетипову евакуацію з острова Зміїний 🔗 t.me/DIUkraine/4900
24
109
18
729
35,007
Ukrainian servicemen awarded a cat with a "combat service certificate" after three months of serving on the frontlines.
160
1,151
121
11,142
427,489
Quick PSA: Someone is attacking Tor right now and has been for a few weeks. The attacker is spoofing the IPs of Tor Exit and Directory nodes, and blasting TCP SYN packets indiscriminately on 22/TCP- spurring a large amount of abuse complaints to hosting providers, which are then temp blocking/banning Tor infrastructure which isn't actually doing anything wrong. For the time being, I recommend all hosting providers *ignore* abuse complaints that indicate "SSH scanning" or "port scanning on 22/TCP" and originate from any of the following IPs: pastebin.com/idKU0agt This is a clever attack. I'm working with partners to triangulate the true origin of this traffic then try to get it disconnected. Weird attacker website here: r00t.monster Related links: gitlab.torproject.org/tpo/ne… lists.torproject.org/piperma…
42
482
58
2,172
367,983
🇺🇦🐈
artificial ¡ 🐟@yaoijesus6665 Nov 2024
де атб
71
518
19
4,183
90,638
Thousands of people were duped into attending a non-existent Halloween parade in Dublin last night by a fake website & social media pages. The site published info, most of it AI slop, for real & non-existent events, targeting ppl in Ireland, UK, US, AUS & elsewhere.
Artur Martins
@arturmartins31 Oct 2024
People waiting for a halloween parade. #Dublin No Gardai around, no official announcement, people waiting on the wrong side of the road... Someone did pull a big #hoax #Prank
6
142
28
440
74,324
Write-up of a RCE on SPIP by @TheLaluka, an interesting read, especially if you attempted his challenge 😊 Spip Preauth RCE 2024: Part 1, The Feather - thinkloveshare.com/hacking/s…

Spip Preauth RCE 2024: Part 1, The Feather

We're in 2024, and we'll do some eval. Will you do some eval with me? It's been a while! Anyway, yes, we'll cover a new pre-authentication remote code execution on Spip, default installation, abusing...

thinkloveshare.com
1
13
40
2,595
My new love for Ukrainian art is self-taught Anastasia Rak (1922-2014). All works are painted in glass. She was born in the village of Vasylky in the Poltava Region. She's not very famous, so please share 😍
14
284
11
1,010
20,591
You might already know about this, it’s to check your cryptographic keys like certificates, CSR and SSH public keys for vulnerabilities: badkeys.info/ A Python package is available at github.com/badkeys/badkeys and with 'pip3 install badkeys'.

badkeys

Checking cryptographic public keys for known vulnerabilities.

badkeys.info
1
36
128
9,476
‼️ На росії “дєті сталіна” клепають фанерні БПЛА   🔗 gur.gov.ua/content/na-rosii-…
7
29
3
130
10,915
Load more