Codelivly
codelivly.bsky.social
👤 Joined on 22 December 2024
7
Followers
0
Following
109
Total Posts
📜 Kullanıcı Geçmişi
- 22 Ara 2024, 17:41
🎉 Bluesky'e katıldı - İlk kullanıcı adı:
@codelivly.bsky.social
🚫 Blokladığı Kullanıcılar
❤️ Beğendiği Gönderiler
'Internal traffic is trusted' is a scope note, not a guarantee. ARP has had zero authentication since 1982, spoof it and you read that traffic, no app bug needed. https://resources.codelivly.com/product/practical-man-in-the-middle-attacks-in-computer-networks/
Show PostA coupon endpoint that blocks reuse under manual testing can still redeem twice under concurrency: check-then-act with no atomic guard is a TOCTOU race, not a typo. https://resources.codelivly.com/product/web-application-hacking-l2/
Show PostK8s audit log confirmed someone got a shell into the pod. It did not say what they typed. exec is a streaming connection, not a logged request body, so the interactive session never gets captured, at any policy verbosity. https://resources.codelivly.com/product/cloud-pentesting-l2/
Show PostAV flagged it a heuristic string, not a real family name. What actually classifies malware: self-replicates or not, what persistence it installs, ransom vs quiet access vs credential theft, scheduled beacon or offline. https://resources.codelivly.com/product/malware-analysis-for-beginners/
Show PostHelp-desk account requested TGS tickets for 40 services in 3 minutes. Closed as benign. The tell: encryption type RC4, where AES is normal elsewhere. That's what separates Kerberoasting from delegation. https://resources.codelivly.com/product/threat-hunter-hands-on-threat-hunting-blue-team-guide/
Show Post