News for hackers. Stuff that matters.

nccgroupie

Re:Does Memory Leak? (1995) on Tuesday November 11, 2025 @07:53AM (#45886740)
In a way it’s expected to crash, especially the hardware :)
Re:WebGPU Technical Report on Thursday September 28, 2023 @03:07PM (#37694158)
An author of this report made that commit. It's good to see work like this.
Re:HackerOne June 2022 Incident Report on Friday July 01, 2022 @10:18PM (#31955465)
Quite brazen that they are tweeting about reports after their termination date https://twitter.com/0xRzlr
Re:SSH known_hosts hash cracking with Hashcat on Thursday September 27, 2018 @01:14AM (#18082235)
You are right it isn't expensive, but it is much noisier to use something like masscan over 16m internal IP addresses if you are pentesting an organization with a decent blue team.

I don't think this tool was made for the use case of HashKnownHosts not being set.

Using shell history, known hosts, netstat, etc are all great ways to find hosts to pivot to.

Substituting ssh with a malicous version is extremely noisy and risky as well.