51 Followers
145 Following
16 Posts
Sometimes, I build stuff. Sometimes, I break stuff

If you’re looking for a great open-source project to use and sponsor, check out

@pandoc.

I’ve been using Pandoc for years, it’s a huge time-saver for publishing documents from Markdown and an essential tool in my workflow.

https://github.com/jgm/pandoc

#pandoc #opensource #floss #publishing

GitHub - jgm/pandoc: Universal markup converter

Universal markup converter. Contribute to jgm/pandoc development by creating an account on GitHub.

GitHub

GNU InetUtils Security Advisory: remote authentication by-pass in telnetd

🔗 https://vulnerability.circl.lu/vuln/gcve-1-2026-0007

#telnet #telnetd #cybersecurity #vulnerability

@gcve GCVE-1-2026-0007

Vulnerability-Lookup

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

The MISP Galaxy now includes an updated knowledge base of UAVs and drones covering both civilian and military models.

It comes with detailed attributes such as manufacturer, cost, and technical specs.
You can now easily classify, model, and share UAV-related observations directly in MISP.

🔗 MISP UAVs overview - https://www.misp-galaxy.org/uavs/

Thanks to @Thanat0s for the huge contribution.

#misp #threatintel #threatintelligence #uav #military #intelligence

@misp

RE: https://infosec.exchange/@ministraitor/115430049959447776

This talk from @wr is a masterpiece if you want to dive into all the gory details of the X.509 certificate format.

#hacklu #cybersecurity #certificate #threatintel

Seeing a presentation of the Kaitai project.

If you need to document or describe or decode binary format, Kaitai is clearly there to help.

https://kaitai.io/ @kaitai

#hacklu #kaitai #dfir #cybersecurity

An interesting lighting talk at #hacklu presenting a tool for Offline decryption of SCCM database secrets.

https://github.com/MartinoTommasini/offlineSCCMdecrypt

#sccm #decrypt #cybersecurity

GitHub - MartinoTommasini/offlineSCCMdecrypt: Step-by-step documentation on how to decrypt SCCM database secrets offline

Step-by-step documentation on how to decrypt SCCM database secrets offline - MartinoTommasini/offlineSCCMdecrypt

GitHub
LinkPro: eBPF rootkit analysis

LinkPro: eBPF rootkit analysis

Synacktiv

One year, I had a chat with the fine people @suricata during the @cert_eu conference, and they were wondering why we didn't create an open source website for all the different rules (YARA, Suricata, and many others) — a place to allow comments, reviews, bundling, and integration with @misp.

We’ve just released the first beta version of the rulezet.org service! 🎉

The platform is open and publicly available and the entire back-end is fully open source.

It’s still in beta, so feedback is very welcome!

🔗 https://rulezet.org/

#cti #yara #threatintelligence #osint #dfir #cybersecurity #suricata

@misp
@circl

DOMPurify 3.3.0 is out. You can now configure which tags can have which attributes much more easily.

https://github.com/cure53/DOMPurify/releases/tag/3.3.0

Thanks again to everyone who contributed to and supported the project. ❤️

Release DOMPurify 3.3.0 · cure53/DOMPurify

Added the SVG mask-type attribute to default allow-list, thanks @prasadrajandran Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @nelstrom Fixed an issue with the slot element b...

GitHub