maltiverse.com

Domaining

curl https://api.maltiverse.com/hostname/digitalwhores.net

{
    "as_name": "AS13335 CloudFlare",
    "blacklist": [
        {
            "count": 1,
            "description": "Alexa Top 1 Million",
            "first_seen": "2020-11-20 13:47:26",
            "labels": [
                "benign"
            ],
            "last_seen": "2021-05-23 11:37:20",
            "source": "Alexa"
        }
    ],
    "classification": "whitelist",
    "creation_time": "2020-11-20 13:47:26",
    "domain": "digitalwhores.net",
    "domain_consonants": 10,
    "domain_lenght": 17,
    "entropy": 3.734521664779752,
    "hostname": "digitalwhores.net",
    "index_selection": "public",
    "is_alive": false,
    "is_cnc": false,
    "is_distributing_malware": false,
    "is_iot_threat": false,
    "is_mining_pool": false,
    "is_phishing": false,
    "is_storing_phishing": false,
    "last_online_time": "2022-09-15 09:26:43",
    "modification_time": "2020-11-20 13:47:26",
    "number_of_offline_malicious_urls_allocated": 0,
    "number_of_online_malicious_urls_allocated": 0,
    "resolved_ip": [
        {
            "ip_addr": "172.64.86.160",
            "timestamp": "2020-11-25 15:57:37"
        },
        {
            "ip_addr": "104.28.1.110",
            "timestamp": "2021-01-09 15:56:21"
        },
        {
            "ip_addr": "104.28.0.110",
            "timestamp": "2021-01-09 15:56:21"
        },
        {
            "ip_addr": "104.21.6.128",
            "timestamp": "2021-05-16 11:31:28"
        },
        {
            "ip_addr": "172.67.134.221",
            "timestamp": "2021-05-16 11:31:28"
        }
    ],
    "tld": "net",
    "type": "hostname"
}

brand new tube hacker’s tips

Sh*ts

August 14, 2022, 06:44 PM

Cybersecurity 101 featuring BrandNewTube and boomer administrators.

1) Remove rewrite rules for the admin panel. After all, only staff know how to access this area.
2) Remove FFMPEG-injectable elements from the admin panel. AJAX requests have become self aware and stop working when UI elements are gone.
3) Run a prehistoric version of the already vulnerable CMS (and nulled). Dragging and dropping newer update files is too hard. What’s the worse that can happen, anyway?
4) Use an AV that scans every set interval. Threat actors are slow and won’t have enough time to do any damage!

LOL! This is fucking great. Love ya @thrax

(August 14, 2022, 06:26 PM)thekilob Wrote:

Thanks  Heart

breached . to / Thread-BrandNewTube-Aug-2022

JSON Web Tokens (JWTs) are not safe

Uncategorized

In this book, we go into JWTs, their perceived benefits, and actual dangers. We’ll also discuss battle-tested solutions to replace them. We’ll explore:

  • HTTP Sessions, Authentication, and Authorization
  • The need for something like JWT
  • JWTs’ perceived benefits and actual dangers 
  • JWT workarounds and the complexities around that
  • Using Redis for session storage instead of JWTs
  • Sessions storage when Redis is used as a Primary DB 
  • Finally, you’ll also learn how to use Redis + JWT! Another common approach to managing user session

Article link