digish0 @digisho@infosec.exchange
Offensive security (red team), Nak Muay, Juijiteiro, and carbon based lifeform with a desire for dopamine and serotonin inducing stimulus
Joined Jun 2019
Remember kids, use your special autistic tendencies for good, not to be creepy.
Background music site 1:
17 reasons why you should be blogging, a thread:
https://threadreaderapp.com/thread/1524416387434762241.html
Original Source:
https://twitter.com/JackRhysider/status/1524416387434762241
digish0
boosted
I just noticed "foreach" on npm is controlled by a single maintainer.
I also noticed they let their personal email domain expire, so I bought it before someone else did.
I now control "foreach" on NPM, and the 36826 projects that depend on it.
digish0
boosted
1. Buy expired NPM maintainer email domains.
2. Re-create maintainer emails
3. Take over packages
4. Submit legitimate security patches that include package.json version bumps to malicious dependency you pushed
5. Enjoy world domination.
GRR server up and running but it's not using fleetspeak by default...
Offensive security (red team), Nak Muay, Juijiteiro, and carbon based lifeform with a desire for dopamine and serotonin inducing stimulus
Joined Jun 2019
