Hacking stuff at https://www.redguard.ch/https://bsky.app/profile/compr00t.bsky.socialhttps://bsky.app/profile/compr00t.bsky.social/post/3lc4e7u4zns2mSwiss news talked all day long about a vulnerability in Kanton Aargau‘s tax software Easytax today: „No malicious activity was detected in an immediate post-mortem analysis“ or „no data was accessed by an attacker at any point in time“. One could conclude, that sounds quite alarming, right? (1/2)29 Nov 2024 19:52 +0000at://did:plc:nuce4c7h3zxovy4tc66ffmvx/app.bsky.feed.post/3lc4e7u4zns2mhttps://bsky.app/profile/compr00t.bsky.social/post/3lbxgzws77c2qIt seems that linpeas[.]sh is hosting a modified version of linpeas with an additional line of code making callbacks to a logging endpoint. Not really malicious though - maybe a researcher showcasing why you should always properly check the sources of your tooling? https://github.com/peass-ng/PEASS-ng/issues/45027 Nov 2024 21:00 +0000at://did:plc:nuce4c7h3zxovy4tc66ffmvx/app.bsky.feed.post/3lbxgzws77c2qhttps://bsky.app/profile/compr00t.bsky.social/post/3lbuuiflbac26A great example why you should always pin your VPN server endpoints [contains quote post or other embedded content]26 Nov 2024 20:22 +0000at://did:plc:nuce4c7h3zxovy4tc66ffmvx/app.bsky.feed.post/3lbuuiflbac26https://bsky.app/profile/compr00t.bsky.social/post/3lbkrke2mus2lI like #AI chatbots... I asked Microsoft Ignite's #chatbot (who dared me to ask anything about Microsoft Ignite) about the program and it pointed me to an URL for the UAT environment. What could possibly go wrong? (don't worry, the UAT is not publicly accessible - as it should be for reasons!)22 Nov 2024 20:03 +0000at://did:plc:nuce4c7h3zxovy4tc66ffmvx/app.bsky.feed.post/3lbkrke2mus2l