Nostr notes by G0rb :possum:

Shodan-Query of the day: hash:-220028446 #ThruntersAnonymous ...

2026-08-04T18:16:02+02:00

Shodan-Query of the day:

hash:-220028446

#ThruntersAnonymous #shodansafari #APTSweatyPants

jap, basically das selbe Problem das die Consulting-Branche hat.

2026-08-04T17:42:03+02:00

In reply to nevent1q…90v8
_________________________

jap, basically das selbe Problem das die Consulting-Branche hat.

They will say it's fake. They will try to bury the truth, but ...

2026-08-01T23:08:04+02:00

They will say it's fake. They will try to bury the truth, but I've photographed what I've seen.

#lochness #monster

Nostr event nevent1qqstutnk560cwxdwejx07dxnvnlunypvj252v72k05jk9a5c2mhz3hqzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjrzq4mn

2026-08-01T19:26:45+02:00

🖼

Es macht nen Unterschied ob man ein Land als Tourist oder als ...

2026-08-01T01:04:22+02:00

Es macht nen Unterschied ob man ein Land als Tourist oder als Reisender besucht.

sure. Also something I regularly use. Malcat is my first tool if ...

2026-07-31T14:38:10+02:00

In reply to nevent1q…l5zv
_________________________

sure. Also something I regularly use. Malcat is my first tool if I need a quick overview and write some Yara Signatures, afterwards it's Ghidra vor Radare2

hab 8 ICS 0-Days, was letzte Preis?

2026-07-31T12:56:43+02:00

In reply to nevent1q…qf4r
_________________________

hab 8 ICS 0-Days, was letzte Preis?

Just renewed my @npub1ufq…dh4u License because it's still ...

2026-07-31T10:37:35+02:00

Just renewed my Malcat (npub1ufq…dh4u) License because it's still my favourite Tool for doing DFIR stuff.

You should check out at least the free Lite Version: https://malcat.fr/

noooo, just drop that 17k logs Ingo an other AI Model. Problem ...

2026-07-30T23:30:20+02:00

In reply to nevent1q…6eh3
_________________________

noooo, just drop that 17k logs Ingo an other AI Model. Problem solved. :blobcatnotlikethis:

just for you 😅 http.html_hash:1670442135

2026-07-29T22:13:07+02:00

In reply to nevent1q…69ve
_________________________

just for you 😅
http.html_hash:1670442135

Shodan-Query of the day: asn:"AS59399" ...

2026-07-29T19:09:54+02:00

Shodan-Query of the day:

asn:"AS59399" vuln:"cve-2014-0160"

#ThruntersAnonymous #shodansafari #yeet

I'm having a discussion with my lovely Partner at the moment ...

2026-07-24T20:48:03+02:00

I'm having a discussion with my lovely Partner at the moment and need statistical data:

If you would be called an infosec influencer, how would you feel about the memory of it?

Love it. So quantum edge devices will have dozens of open ports ...

2026-07-24T18:22:37+02:00

In reply to nevent1q…zdvz
_________________________

Love it. So quantum edge devices will have dozens of open ports (one for every quantum entanglement / connected client). This means a corp with 5000 devices will now have 5000 "ports" to suck up ../ instead of one public facing.

Took some time... Feeling a little bit sleepy ...

2026-07-23T18:06:32+02:00

In reply to nevent1q…hnu9
_________________________

Took some time... Feeling a little bit sleepy

Just chillin on an lazy afternoon. #ThruntersAnonymous ...

2026-07-23T17:56:52+02:00

Just chillin on an lazy afternoon.

#ThruntersAnonymous #MerkelWave #Threatintel

wasn't a CISA KEV yesterday, and they still have till 4th of ...

2026-07-21T19:41:34+02:00

In reply to nevent1q…msh7
_________________________

wasn't a CISA KEV yesterday, and they still have till 4th of August to patch.

that's some cool iranian open-dir ...

2026-07-21T09:59:03+02:00

that's some cool iranian open-dir http://178.239.149.60[:]8000/arya/

#shodansafari #opendir #threatintel

Evidence of Shitpost: ...

2026-07-21T09:51:35+02:00

In reply to nevent1q…p7sw
_________________________

Evidence of Shitpost:

hacking is illegal and for nerds.

2026-07-20T21:03:24+02:00

In reply to nevent1q…wzjg
_________________________

hacking is illegal and for nerds.

Today I found a Threat-Actor using AI to attack out of China. He ...

2026-07-20T21:01:28+02:00

Today I found a Threat-Actor using AI to attack out of China. He was also very persistent and even used cobalt strike.

- According to his bash_history
- next to the claude skill file
- inside the open directory

And yes his bash history had the cs teamserver credz included.

#APTMoronicMonday #aislop #OPSECotter

I believe their is at least one APT Operator followong me on ...

2026-07-18T01:59:04+02:00

I believe their is at least one APT Operator followong me on Mastodon.

#WhoKnows #GottaKeepThemOnTheirToes :ablobcatwink:

From the disclosure: "This did not work: the analysis ...

2026-07-18T00:43:44+02:00

In reply to nevent1q…dyqs
_________________________

From the disclosure:

"This did not work: the analysis requires submitting large volumes of real attack commands, exploit payloads, and C2 artifacts, and these

->requests were BLOCKED by the providers' SAFETY GUARDLINES, which cannot distinguish an incident responder from an attacker." <-

WTF, so everybody else had allready mitigations and signatures in place. But not huggingface. :alpha_dolan:

if I quit doing forensics, I'll start with tactical tarot ...

2026-07-17T22:49:44+02:00

In reply to nevent1q…fufx
_________________________

if I quit doing forensics, I'll start with tactical tarot incident response.

the difference is, grep is deterministic and has a proven track ...

2026-07-17T22:47:41+02:00

In reply to nevent1q…xpjk
_________________________

the difference is, grep is deterministic and has a proven track record.

why the f*ck do they need AI for 17k log lines? Throwing AI at an ...

2026-07-17T22:41:15+02:00

In reply to nevent1q…tg60
_________________________

why the f*ck do they need AI for 17k log lines? Throwing AI at an Incident and calling it "forenaics" is the laziest incident response I've ever seen.

Deutsche Cyber-ThreatIntel be like: ...

2026-07-10T19:01:44+02:00

Deutsche Cyber-ThreatIntel be like:

:ablobcatpopcorn: :ablobcatwink:

2026-07-01T19:40:17+02:00

In reply to nevent1q…8xy7
_________________________

:ablobcatpopcorn: :ablobcatwink:

start stealing fresh tlp:amber CERT-Alerts from VirusTotal.

2026-06-30T21:45:22+02:00

In reply to nevent1q…c6qf
_________________________

start stealing fresh tlp:amber CERT-Alerts from VirusTotal.

Nostr event nevent1qqspp52pasleef04lmcpkv6s0cdr8pdqhqltpx4ktdjt3x2ggwz9u2szyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjw5mjr2

2026-06-26T19:05:31+02:00

totally proves my feeling that AI is used for fixing Skill-Gaps ...

2026-06-24T15:04:23+02:00

In reply to nevent1q…hft6
_________________________

totally proves my feeling that AI is used for fixing Skill-Gaps instead of enhancing Skills.

ouuuuuuuuh could be funny :awesome: :blobcat_thisisfine:

2026-06-16T18:56:16+02:00

In reply to nevent1q…gdjr
_________________________

ouuuuuuuuh could be funny :awesome: :blobcat_thisisfine:

Kind of, belongs to my girlfriend. I only good #birdsarentreal ...

2026-06-16T18:51:04+02:00

In reply to nevent1q…a8u8
_________________________

Kind of, belongs to my girlfriend. I only good #birdsarentreal

Nostr event nevent1qqstd9sjstlgdnrd673n5z7cngwft353gesntdggdpg0puwrgq832qszyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjuey2zw

2026-06-16T18:46:56+02:00

In reply to nevent1q…jg7p
_________________________

My new hobby at the moment is learning more about GPS-Jamming and ...

2026-06-12T09:56:33+02:00

My new hobby at the moment is learning more about GPS-Jamming and doing OSINT.

oh you've seen nothing :awesome:

2026-06-10T22:29:10+02:00

In reply to nevent1q…zmxl
_________________________

oh you've seen nothing :awesome:

Happy #worldotterday to those that celebrate :ablobcatrainbow: ...

2026-05-28T10:47:52+02:00

Happy #worldotterday to those that celebrate :ablobcatrainbow:

#OPSEC

Fixer the #Crow is a really picky eater like all crows their ...

2026-05-21T10:12:17+02:00

Fixer the #Crow is a really picky eater like all crows their age...

RE: https://infosec.exchange/@g0rb/116607800131075611 Mastodon, ...

2026-05-20T21:24:33+02:00

RE:
https://infosec.exchange/@g0rb/116607800131075611

Mastodon, meet Fixer the #Crow (with a broken leg)

After all these years of jinxing it. Guess who is a temporary ...

2026-05-20T18:17:05+02:00

After all these years of jinxing it. Guess who is a temporary crow-daddy now 😍

Only thing we need is a name for her/him so please feel free to suggest one.

#crow

Some people are just YOLOing with VirusTota-Graphs ...

2026-05-20T16:02:36+02:00

Some people are just YOLOing with VirusTota-Graphs

ssl.cert.issuer.cn:"Russian Trusted Sub CA" ...

2026-05-20T15:16:24+02:00

ssl.cert.issuer.cn:"Russian Trusted Sub CA" country:"DE" org:"FR RAPIDSEEDBOX"

or

asn:"AS43797"

#shodansafari

Nice, I can confirm that @npub1lmd…m9t8 Swarm works perfectly. ...

2026-05-20T13:36:19+02:00

Nice, I can confirm that GreyNoise (npub1lmd…m9t8) Swarm works perfectly. But please, share the Swarm-IPs with The Shadowserver Foundation (npub1cla…l628)

Corpos do everything but patching edge devices.

2026-05-19T21:31:09+02:00

In reply to nevent1q…gyqn
_________________________

Corpos do everything but patching edge devices.

http.favicon.hash:2067210643 #shodansafari

2026-05-18T14:27:39+02:00

http.favicon.hash:2067210643

#shodansafari

Looks like some Initial Access Broker stacks up on new Accounts. ...

2026-05-06T11:09:11+02:00

Looks like some Initial Access Broker stacks up on new Accounts.

I love The Shadowserver Foundation (npub1cla…l628) #threatintel

Nostr event nevent1qqsp6qfq80wl3x960dm0x4hwgkwrj4333l42q3f29vk6wm7pv7gfaygzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wj83zq9g

2026-04-26T12:13:33+02:00

In reply to nevent1q…xhu4
_________________________

Another sunday. #shodansafari #ThruntersAnonymous ...

2026-04-26T12:04:51+02:00

Another sunday. #shodansafari #ThruntersAnonymous

don't know 😁 I'm not there ...

2026-04-25T10:44:25+02:00

In reply to nevent1q…frcn
_________________________

don't know 😁 I'm not there

What a life-changing week, what a world-changing week. I feel ...

2026-04-25T10:40:53+02:00

What a life-changing week, what a world-changing week.

I feel honored, yet also humbled, to have the opportunity to work at Security Research Labs (npub1zcn…83nt) alongside the brightest minds in the German cybersecurity scene and to learn from them.

The only TLP that I'm interested in is TLP:Rainbow

2026-04-24T09:24:04+02:00

In reply to nevent1q…6l2k
_________________________

The only TLP that I'm interested in is TLP:Rainbow

10/10 Would do it again. :8bitrainbow: ...

2026-04-15T22:59:26+02:00

10/10 Would do it again. :8bitrainbow:

The only sophisticated thing was using Rubeus to create a ...

2026-02-04T16:15:29+01:00

In reply to nevent1q…zmtr
_________________________

The only sophisticated thing was using Rubeus to create a Diamond-Ticket.

Lateral-Movement via PSExec and Impacket.

WOW, what an sophisticated Attack. ...

2026-02-04T16:06:02+01:00

WOW, what an sophisticated Attack.

https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf

Nostr event nevent1qqsfamav9xalz2tj3hl3uz8waasq79qt6dwxcmaz4n5sqc5hht0tdtczyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wj8ehhll

2026-01-22T12:34:48+01:00

In reply to nevent1q…rxzv
_________________________

Proof

I love this fancy cyber-security-AI-Gov-Companies "Our ...

2026-01-22T12:33:18+01:00

I love this fancy cyber-security-AI-Gov-Companies

"Our mission: Empowering governments and critical infrastructure with the tools and intelligence to defend against nation-state cyber threats and secure digital resilience"

Also:

Our SSL-Certificate is expired and our DNS-Server has verifications for any US Tech-Corps we could find.

#dreamgroup

LoL #greyhatwarfare ...

2025-12-10T10:13:04+01:00

LoL #greyhatwarfare

A good moment to check your VPN-Logs (incl. the Webserver-Logs). ...

2025-12-10T09:18:37+01:00

A good moment to check your VPN-Logs (incl. the Webserver-Logs).

The Shadowserver Foundation (npub1cla…l628)
https://dashboard.shadowserver.org/statistics/honeypot/device/time-series/?date_range=180&type=http-scan&dataset=connections&limit=1000&group_by=vendor&stacking=stacked

Oh, and I thought they were shitty honeypots. PS: No, I never did ...

2025-12-09T22:48:43+01:00

Oh, and I thought they were shitty honeypots.

PS: No, I never did connect to an Step7-Machine.

#dogsofmastodon #doggo ...

2025-12-09T22:39:20+01:00

#dogsofmastodon #doggo

Nostr event nevent1qqsgy3tlsa7jqv0m9pq7yx2jfhrs80vr3z4cuzt4cplke3mna30decgzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjxjc5u0

2025-11-26T17:38:59+01:00

Nostr event nevent1qqs9np5ffyys8m363t4q4tsf0huh5st5qun2qjsvcj6cwnmrj66lh4czyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjn8jwsk

2025-11-18T16:04:16+01:00

#cloudflare

Deutsche #cybersecurity in a nutshell. ...

2025-11-12T18:13:20+01:00

Deutsche #cybersecurity in a nutshell.

I love TI ...

2025-11-06T16:31:17+01:00

I love TI

#HelsingAI so:"Für die Entwicklung des CA-1 setzt Helsing ...

2025-10-13T14:08:01+02:00

#HelsingAI so:"Für die Entwicklung des CA-1 setzt Helsing auf führende Unternehmen des europäischen Industrie-Ökosystems, um ein skalierbares Flugzeug mit einer resilienten europäischen Liefer- und Logistikkette zu bauen. "
https://helsing.ai/de/newsroom/helsing-praesentiert-autonomes-kampfflugzeug-ca-1-europa

Auch Helsing so:

I got myself a new work of art from to celebrate my tenth ...

2025-10-08T19:37:25+02:00

I got myself a new work of art from to celebrate my tenth previously unknown APT-Campaign with an inspiring quote by Marcus Hutchins :verified: (npub1uu7…gs7t)

Monday-Mood #dogsofmastodon ...

2025-10-06T07:56:24+02:00

Monday-Mood
#dogsofmastodon

Nostr event nevent1qqs8zz4p8psafe2rhl2hv0g2eyygjmxjv3ctf8yju9n9kgnfn2zwtkgzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjp6cdxz

2025-09-18T20:24:03+02:00

#Doggo

First they try to silence you... @npub1ezn…nyq3 ...

2025-09-02T13:38:58+02:00

First they try to silence you...

GAYINT :yassquatch: (npub1ezn…nyq3)

Nostr event nevent1qqsprslx7c3cppupjpelxgt24wwxzv3yg8plmfsdwa70ct6nwqp58sczyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjaf4dsk

2025-09-02T08:54:44+02:00

#doggo

Got myself an #CovertInstruments #covertcompanionpro. Works and ...

2025-09-02T08:23:00+02:00

Got myself an #CovertInstruments #covertcompanionpro. Works and feels better than expected.

#lockpicking

Nostr event nevent1qqsxhz2fd5mphqf2vvnsnzhrq6cyg8z3d2vpgdhw5urp7gpuh0r4vpqzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjgx6vjr

2025-08-29T11:09:32+02:00

1899e0d3a085687c1951f799ac84abe26267e259f27da0e93a9b3b9921eb1394

Waking up like this :amaze: ...

2025-08-03T09:18:34+02:00

Waking up like this :amaze:

Feels so wrong :blobastonished: :blobcat_thisisfine: ...

2025-07-25T10:34:15+02:00

Feels so wrong :blobastonished: :blobcat_thisisfine:

"Bitte beachte, dass dies für jede Domain einzeln erfolgen ...

2025-07-23T22:04:59+02:00

"Bitte beachte, dass dies für jede Domain einzeln erfolgen muss." :blobcatfearful:

#domainhoarder

#Thrunting at midnight. Some older interesting IPs are also ...

2025-07-23T00:06:57+02:00

#Thrunting at midnight. Some older interesting IPs are also around...

#birdsofmastodon #birding ...

2025-07-12T12:43:56+02:00

#birdsofmastodon #birding

Birdies having Dinner. #birdsofmastodon #birding ...

2025-07-07T21:48:39+02:00

Birdies having Dinner.

#birdsofmastodon #birding

Nostr event nevent1qqsyzjz8x284s4fg5kxpyd70qsd7g5syjyxmdtpt8nvlyvthumjxsgqzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wj63lr4a

2025-07-07T21:38:33+02:00

In reply to nevent1q…w2ph
_________________________

Birdies having Dinner... ...

2025-07-07T21:35:13+02:00

Birdies having Dinner...

Baby-Birdies on my balcony :blobaww: ...

2025-07-03T10:44:07+02:00

Baby-Birdies on my balcony :blobaww:

One of my favorite infosec-quotes by @npub1uu7…gs7t ...

2025-06-26T23:49:15+02:00

One of my favorite infosec-quotes by Marcus Hutchins :verified: (npub1uu7…gs7t)

Nostr event nevent1qqsrf26pla6nqw5n07094xgxdahlgr9plj9urx4rhl4mthne8g7297qzyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjw4ev3m

2025-06-19T11:28:42+02:00

Bought me some cow-art today. :ablobsmile: ...

2025-06-17T23:55:40+02:00

Bought me some cow-art today. :ablobsmile:

Got you :ablobsmile: #birdsofmastodon #birdphotography ...

2025-06-12T13:07:40+02:00

Got you :ablobsmile:

#birdsofmastodon #birdphotography

Such a beautiful birdie. #birdsofmastodon #birdphotography ...

2025-06-05T19:39:36+02:00

Such a beautiful birdie.

#birdsofmastodon #birdphotography

Yikes :ablobcatpopcorn: ...

2025-05-23T00:30:50+02:00

Yikes :ablobcatpopcorn:

Great OPSEC @npub1hgj…hnsj ...

2025-05-21T23:07:24+02:00

Great OPSEC Kaspersky Lab (npub1hgj…hnsj)

3.800 VT-Graphs, just sayin' ...

2025-05-21T12:55:12+02:00

3.800 VT-Graphs, just sayin'

Well played @npub1prv…5px6 :awesome: But also show's that ...

2025-05-21T10:49:09+02:00

Well played BSI (npub1prv…5px6) :awesome:

But also show's that #virustotal is not as trustworthy as it seems and actively censors stuff.

Heute Morgen erstmal schön gefrühstückt, thehackernews.com ...

2025-05-11T12:34:59+02:00

Heute Morgen erstmal schön gefrühstückt, thehackernews.com gelesen und über nen Verweis zum eigenen Research-Post gestolpert.

#schmeckt. Beides :ablobcatrainbow:

don't give me false hope #uspol

2025-04-21T10:31:13+02:00

In reply to nevent1q…r7lp
_________________________

don't give me false hope #uspol

:apartyblobcat: @npub1s35…am64 @npub1d4r…k2pv Happy Easter ...

2025-04-15T18:52:03+02:00

:apartyblobcat: Brahms (npub1s35…am64) JRT (npub1d4r…k2pv) Happy Easter

RIP Assassins Creed in an vertical XBoX 360 on Launch-Day ...

2025-03-12T21:39:33+01:00

In reply to nevent1q…qx2k
_________________________

RIP Assassins Creed in an vertical XBoX 360 on Launch-Day :blob_cry:

Nostr event nevent1qqs0snwc6eudwgl0qjla6vtxa2kvn07fdr98wlvwzx8lltnu2k47c5szyqxjgfq6le4ttejxhy93ep3s0fae5tqf0j42ls5k8jxpr3feee2wjtd9y75

2025-02-24T19:20:57+01:00

Goal for 2025: Write my first Keylogger in Holy C for #TempleOS.

could be older stuff ...

2025-01-16T00:43:58+01:00

In reply to nevent1q…asns
_________________________

could be older stuff https://www.heise.de/en/news/Unknown-group-releases-Fortinet-config-files-and-VPN-passwords-to-the-darknet-10244238.html

yeah, it's like all these Online-People talking about that ...

2025-01-01T02:08:21+01:00

In reply to nevent1q…eg69
_________________________

yeah, it's like all these Online-People talking about that "free, ad-free and privacy saving" Linux OS.

one of the IPs was also related to gamaredon (158.247.199[.]37). ...

2024-10-24T21:22:21+02:00

In reply to nevent1q…rdxy
_________________________

one of the IPs was also related to gamaredon (158.247.199[.]37).

The cobalt-strike c2 used paths that has been used by an cracked Version with the watermark 987654321 (hxxps://104.238.141.143/en_US/all.js). The IP also had an supershell deployed (hxxp://104.238.141.143:8888/supershell/login). and did also some web-crawling https://isc.sans.edu/weblogs/sourcedetails.html?date=2024-07-15&ip=104.238.141.143

45.32.41[.]202 seems to have relationship to phishing.