Mastodawn

@zackwhittaker can you do a bit on your newsletter or something about how stupid it is to have a trust center page with all the certificates for stuff but no where to report issues? im half tempted to leave a thing on some ones infosec or cloudgroup jira board about an exposed cred

Show thread

random_robbie Dec 28

@cirriustech love to know how this goes. Isn't it limited to certain languages

Show thread

random_robbie Nov 30

@chrispy I managed to scrape 4k repos of creds loads of big names in there but not everything was useful

Show thread

random_robbie Nov 25

A good few fortune 500 in here and crypto company.
Now an ISP

Show thread

random_robbie Nov 25

also be super careful a few people have put repos that have 50mb files which come out to 3.8GB in size if your trying to monitor this.

Show thread

random_robbie Nov 25

@zackwhittaker interesting one this.

random_robbie Nov 25

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

This is now starting blank repos with a inital commit by linux it links back to his ACTUAL github

random_robbie Oct 19

https://github.com/random-robbie/Flipper-SubGhz-RAW-to-ESP32-C-Array-Converter

#esp32 #FlipperZero #433mhz

GitHub - random-robbie/Flipper-SubGhz-RAW-to-ESP32-C-Array-Converter: Flipper SubGhz RAW to ESP32 C Array Converter

Flipper SubGhz RAW to ESP32 C Array Converter. Contribute to random-robbie/Flipper-SubGhz-RAW-to-ESP32-C-Array-Converter development by creating an account on GitHub.

GitHub

random_robbie Sep 25

https://github.com/RandomRobbieBF/CVE-2025-54726

GitHub - RandomRobbieBF/CVE-2025-54726: JS Archive List <= 6.1.5 - Unauthenticated SQL Injection

JS Archive List <= 6.1.5 - Unauthenticated SQL Injection - RandomRobbieBF/CVE-2025-54726

GitHub

random_robbie Sep 9, 2025

Adobe drops emergency patch for CVE-2025-54236, aka SessionReaper, a critical Magento flaw! Hackers can exploit WebAPI ServiceInputProcessor to hijack sessions, steal credit cards, or take over admin accounts.

SessionReaper, a critical bug in Magento & Adobe Commerce (CVE-2025-54236)

https://sansec.io/research/sessionreaper

SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025-54236)

Adobe released an out-of-band emergency patch for SessionReaper (CVE-2025-54236). The bug may hand control of a store to unauthenticated attackers. Automated...

Sansec