jdeca568

12 ms·

1.
by jdeca568 8y ago
There is one difference still, by downloading it locally, you only have to check it once and not everytime you want to use the script. You definitely have to trust more parties by piping from the web, and these parties could be compromised
2.
by jdeca568 8y ago
Here is one: https://www.exploit-db.com/ . But this CVE doesn't appear to be referenced at the moment.
3.
by jdeca568 8y ago
paths | awk -F / '{ print $1 }' (edit: format)
4.
by jdeca568 8y ago
As mentionned several times already, OWASP has very interesting stuff, it's more web application oriented though. ( https://www.owasp.org ) WebGoat is a good way to put things in practice locally. ( https://github.c
5.
by jdeca568 8y ago
Well that's more of a manual work than anything else, not optimal in term of speed. Trying to keep following mailing lists diagonally, keep contact with other people in the niche. It eventually leads me to some other new site, mailing
6.
by jdeca568 8y ago
I had the same problem with an almost automatic !g. A while back i decided to put more effort and try to survive with !so, !gh, !hn, !r, !w, and a couple more depending on the context. DDG may not give exact results in less than a second, b
7.
by jdeca568 8y ago
Everybody is guilty in some way of not making a change, or not taking a stand, whatever the 'good' or 'bad' subject that is. Still, no single indvidual is to blame in most cases. The education and the media in practice a
8.
by jdeca568 8y ago
Cool, in the ~same vein, SBE is definitely worth a look. https://github.com/real-logic/simple-binary-encoding
9.
by jdeca568 8y ago
If i understand correctly, the problem of Java deserialization is 1) gadgets for code execution and maybe 2) DoS. And this is bad because even if it looks secure now, a gadget could be discovered later. The default Java serialization is one