Dominic White

@singe.bsky.social

1235 Followers 768 Following

Hacker at Orange Cyberdefense's SensePost Team https://hello.singe.za.net/

Our government is treating the suffering of the Iranian people as a backdrop for our own entertainment, as if it's just another piece of content to be swiped through while we're waiting in line at the grocery store. But, in the end, we lose our humanity when we are thrilled by the destructive power of our military. We become addicted to the "spectacle" of explosions. And the price of this habit is almost unnoticeable, as we become desensitized to the true costs of war. But the longer we remain blind to the terrible consequences of war, the more we are risking the most precious gift God gave us: our humanity.
A graph from Gerhard Eshelbeck’s 2005 Insecure Mag article on the reducing exploit window. First presented at BlackHat 2003.
Maybe World War Alnge TRADE ROUTES, NOT TRENCH COATS We're marching to the drumbeat of a maybe World War, While the suits keep score from the safest upper floor. Learn the damn lessons written in the mud and wire: Talk beats trenches, trade beats fire. Shut down the drone, pick up the phone-No more "us and them," no more blood for a throne. [Verse 2] They're power-hungry kings in modern tailored wear, Trading lives for leverage like nobody's there. Sanctions, counter-sanctions, "peace" in quotation marks, Another "precision" conflict lighting global
The app icon. A picture of a crescent moon and an open padlock with the text NoLock below it.
A screenshot of the GUI searching the web for information about Hari Seldon
A screenshot of the rule editing dialog with all the options described in the readme.
4 coffees two from Dark Matter roasters UK and two from Father Coffee roasters ZA.
A happy hacker crab wishing you a happy new year in pixels. Made with DALL-E
shifttymike’s weaponised infrared remote no touch sensor trigger turned into a key fob. These were the speaker gifts.
Three terminals stack on top of eachother. The top is running hub.pl on the host. The middle is running pool.pl on the “hacker” server. And the bottom shows a connection from the host through the hacked server to a target server over SOCKS.
A screenshot of the mobile view of GitHub looking at a private repo for the cabbage bot with 10 plugins in the plugins folder.
A close up macro picture of a tick (parasite) from Wikipedia with the comment “Ixodes ricinus, a hard tick, engorged”
I’m in Paris!
It turns this into this, with two screenshots, one of a browser showing the /wp-json endpoint and the other with a swagger-ui view of the same.
Output from multiple runs of hyperfine invoking and timing ntcrack with various different hash lists and word lists.
7 Vulns in 7 Days: Breaking Bloatware Faster Than It’s Built Sat, Aug 9 at 16:30 – 17:15 PDT LVCC - L1 - Exhibit Hall West 3 - Track 4 DEF CON Official Talk Demo 💻 Exploit 🪲 Description Bloatware. We all hate it, and most of us are good at avoiding it. But some vendor tools – especially those managing critical drivers – can be useful when the Windows Update versions aren’t good enough for performance-critical computing. What started as a routine driver update took a sharp turn when I confirmed a reboot modal… from my browser. Wait, my browser shouldn’t be able to do that!? To my disappointment (and maybe some surprise), it turned out to be arbitrary code execution – right from the browser. This kicked off a week-long deep dive, uncovering seven CVEs in seven days across several prominent vendors, all exploiting a common pattern: privileged services managing software on Windows with little regard for security.
A wizard pouring things into a cauldron. But the cauldron is a shell. There are pipes over head with a cat in the bottom right. Incredibly detailed with all sorts of in jokes.
A Linus Torvalds looking wizard holding a wand and coaxing smoke from a cauldron. The cauldron has the word Linux on it and the smoke rising from it has the names of various unix commands like xargs, grep, awk and cat. The text at the bottom says “UNIX is magic”
“The world needs, desperately, people with ethics and ideals who can win at business. We can't let all the people who care about people go into academia or medicine or low wage service jobs. We can't leave the ranks of middle and upper management to be filled by sycophants and sociopaths”
WINTER IS COMING
A DALL-E generated image of a hooded person behind a computer with a large glowing wifi symbol on it. In the background are neon posters with the words WPA2 handshake cracking, PEAP relay access, certificate bypass and BLACK HAT. The style is neon cyberpunk.
The Humbling Reality Check Throughout this process, one observation kept nagging at me: AI is never going to take over the world if it can't properly parse help files and construct valid commands. Here I was, an expert in both cybersecurity and AI, spending weeks struggling to get multiple sophisticated language models to correctly interpret httpx --help output and translate requirements into proper syntax. Even with the optimal approach, only 80% success rate. The systematic testing revealed that the gap between AI capabilities and reliable technical execution is larger than the marketing suggests. Current models exhibit this weird capability inversion: Can reason about abstract security concepts ✅ Can engage in sophisticated strategic dialogue ✅ Can generate creative problem-solving approaches ✅ Cannot reliably parse documentation and construct valid commands ❌
A screenshot of Claude Desktop showing it running two commands list_folder_contents and read_file. Both commands highlighted as being executed from the nerve-tools local mcp. On the right is a code canvas listing six code patches to correct vulnerabilities identified in the code.
VirusTotal page for the IP 45.144.53.145. Showing 21 malicious files as confirmed communicating with it.
The NCPPR has overwhelmingly lost its anti-diversity proposals in shareholder votes this year at Costco, Apple, John Deere, and the Walt Disney Company. A representative from the NCPPR closed their argument at shareholder meetings with: "DEl is out, merit is in." The DEI v. merit myth has been thoroughly debunked. And shareholder votes show that DEl is in, bigots are out.
A photograph of the plaque atop the grassy knoll overlooking Dealey plaza in Dallas - JFK’s assassination site. The quote in the post is an edited excerpt from this plaque.
Capchan – Solving CAPTCHA with Image Classification Reading time: ~34 min Posted by adriaan.bosch on 13 March 2025 Categories: Ai, Ctf, Neural-nets, Tool Getting rid of pre- and post-conditions in NoSQL injections Reading time: ~10 min Posted by Reino Mostert on 11 March 2025 Categories: Database, Nosql injection, Injection, Nosql goLAPS Reading time: ~3 min Posted by Felipe Molina on 10 March 2025 Categories: Golang, Laps, Sensecon Diving Into AD CS: Exploring Some Common Error Messages Reading time: ~26 min Posted by Jacques Coertze on 07 March 2025 Categories: Active directory, Adcs, Certificates, Internals, Windows, Certificate InvokeADCheck – A PowerShell Module for Assessing Active Directory Reading time: ~5 min Posted by niels.hofland on 06 March 2025 Categories: Active directory, Automation, Powershell, Tool PsExec’ing the right way and why zero trust is mandatory Reading time: ~20 min Posted by aurelien.chalot on 10 February 2025 Categories: Psexec, Sensecon, Tools
Cole wasn't going to get in to all that with the immigration guy, 'Mmph, the officer glanced up from their South African passports, green mambas, her best friend Keletso called them, because they'd bite you with visa fees for all the countries you're not allowed to just go to. 'And you're returning to South Africa after your vacation?' Yes, that's where we live, proud of the hard fact of it. Away from everyday Nazis and school shootings so regular they were practically part of the academic calendar along with prom and football season, away from the slow gutting of democracy, trigger-happy cops and the terror of raising a black son in America. But how can you live there, people would ask her (and Devon, her American husband, especially), meaning Johannesburg. Isn't it dangerous? And she wanted to reply, how can you live here?
To all the Plakkers - Congratulations on your 25th Birthday! Thank you for your continued support and sharing with the community. You have shaped the path for so many and we can’t wait to see what the next 25 years bring. With fondest wishes from BSides Cape Town.
A wood campfire on a stone plinth in the bush.
Screenshot of the lyrics for APT. by ROSÉ & Bruno Mars They are: Hey, so now you know the game Are you ready? Because I’m coming to get ya
Hackers target weak pointsJaber said the information disclosed includes details about technology used, subdomains, IP addresses, and open ports.This is vital information that attackers can use during the early stages of a cyberattack to identify weaknesses and plan their approach.A whistle-blower from home affairs corroborated this assessment, noting that while some firewalls exist at home affairs, they constitute a single or partial layer of defence.