CVE-2026-11497 having a bit of an identity crisis… - Imperva coined the initial term, “Node2Shell” (https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/) - Aikido tried to turn it into “HTTP2Shell” ( […]
shellsharks
shellsharks
@shellsharks.shellsharks.social.ap.brid.gy
Infosec researcher | Indieweb enthusiast | Find me @ https://shellsharks.com #infosec #cybersecurity #tech #indieweb searchable Profile picture: A red shark […] 🌉 bridged from ⁂ https://shellsharks.social/@shellsharks, follow @ap.brid.gy to interact
867 followers3 following131 posts
Recently discovered this https://2shell2furio.us/, poking a bit of fun at all the "-2shell" named vulns (there's quite a few not even listed there yet if you search on https://vulnerability.garden/). But "shell" isn't even the most used vuln-naming trope. Taking the top 3 spots is "bleed" […]
I think we can all agree that the ongoing PHP situation (#php2shell) is pure chaos. Sites being pulled down, everyone scrambling to produce a working exploit, botched disclosure, tons of half-assed exploitation attempts in the wild, etc. But my favorite part of this whole mess has been watching […]
Shoutout to @campuscodi and risky.biz. I went through every (and I mean *every*) newsletter (https://risky.biz/newsletters/) dating back to 2022 to pull out any “named vulnerabilities” that I didn’t yet have in the Vulnerability Garden (https://vulnerability.garden). Despite how thorough I’ve […]
Some vulnerability name suggestions perfect for the current times: - SlopBleed - Slopsploit - SlopShell - ETERNALSLOP - SLOPwn - SlopShock - Slopocalypse - SlopFlood - SLOPpySeconds - SlopStrike - SlopHell - SlopLeak - Sloppageddon - BadSlop - SlopHole - DeathSlop - Slop2Shell - Slop of Death - […]
Has AI mad you sad today? Me too friend. Me too. So here’s my newest <strike>abomination</strike> creation on the blog, the “AI Wall of Sad” 🤖 😞 https://shellsharks.com/ai-wall-of-sad It features a haphazard collection of links related to AI that are sure to ruin your day! Feel free to send me […]
Food: $800 Rent: $1500 Utilities: $200 Car: $400 Salary: 1 million AI tokens/year Someone who is good at the economy please help me budget this. My family is dying. https://tldr.nettime.org/@tante/116209730777153191
shellsharks reposted
Been a few months, but a new edition of Scrolls is now out! #infosec #cybersecurity #fediverse #indieweb https://shellsharks.com/scrolls/scroll/2026-01-13 Everyone mentioned below is featured or contributed in some way to this latest scroll. Thanks as always!! @andyc @ros @Jayhoffmann […]
shellsharks reposted
Another edition of Scrolls is now out. Go take a look! 📜 👀 https://shellsharks.com/scrolls/scroll/2025-10-17 There's a lot of great links (as always), and I have everyone below to thank! Those mentioned below have made this week's writeup as fun and unique as ever. @bojidar_bg @jaz @xandra […]
shellsharks reposted
Not quite back on the normal Friday publishing cadence but I've got another issue of Scrolls out today! I think this officially catches me up on things I'd been saving over the past few weeks/months. Check it out for a ton of awesome #IndieWeb, #Fediverse and #Infosec / #cybersecurity stuff as […]
shellsharks reposted
It's been ages! But Scrolls is back once again. What's in it? A bunch of random stuff from bygone weeks. I hope you enjoy, and I hope to be back again soon with more good shtuff. https://shellsharks.com/scrolls/scroll/2025-10-01 Thanks to those mentioned below. Their blogs, their writing […]
shellsharks reposted
Heyo! Scrolls volume _nineteen_ is out! There's all the usual awesome #IndieWeb, #Fediverse and #Infosec / #Cybersecurity goodness inside. Check it out! https://shellsharks.com/scrolls/scroll/2025-06-27 The usual shoutout to everyone who's content and things-shared made it into this week's […]
shellsharks reposted
Hello! It's a Scrolls back-to-back day! Volume eighteen has just been published (as I promised yesterday). It features the best of my #IndieWeb, #Fediverse and #Cybersecurity / #infosec discoveries from LAST week 😁. Consider this the final "catch-up" issue, with a regularly scheduled issue set […]
shellsharks reposted
Hey everyone, Scrolls is back! Volume seventeen has just dropped. Where have I been? Why is it coming out in the middle of the week? Well go on and read and I try to explain 😄. https://shellsharks.com/scrolls/scroll/2025-06-24 As usual, it features some cool stuff from across the #IndieWeb […]
But you see. YOU SEE??? The fine folks at "keep aware" Had the good sense to not call this "ChaLishing" or something similarly inane. They just gave it a lil name + phishing. THANK YOU!! 🙏 My guess is they read this from me: https://shellsharks.com/no-more-ishings […]
I find it pretty gross that there's a li'l dropdown on the ISC^2 home page where they ask you to "Select Your Currency". This is the regular, pre-auth, top-level home page. Like... no account and they still just wanna know what type of money they can get […] [Original post on shellsharks.social]
Yo! Y'all might as well call me Tomatosharks for now on cuz CHECK THIS OUT https://shellsharks.com/gardenlog#planted. Yeah that's right. Tomatoesssss! I'ma dedicate my first BLT in a few weeks to Fedi got it? Oh and they say Fedi's got not algo, but I swear the second I started posting about my […]
shellsharks reposted
Happy Friday everyone! Volume FIFTEEN of Scrolls has been published. Let me know what ya think! https://shellsharks.com/scrolls/scroll/2025-05-09 #indieweb #fediverse #infosec #cybersecurity Thanks to everyone mentioned below for their contributions to this week's edition. It's fun to see […]
Fedi has been around for ~13 years and Mastodon has been around for about 9 of those. For anyone wondering how Fedi "wins", I think you need to ask instead, "what does it mean to win"? We've gotten this far w/o VC funding and continue to grow (even if it isn't at breakneck speeds). We win by […]
shellsharks reposted
I have seen a lot of efforts to use an #LLM to create a #ThreatModel. I have some insights. Attempts at #AI #ThreatModeling tend to do 3 things wrong: 1. They assume that the user's input is both complete and correct. The LLM (in the implementations I've seen) never questions "are you sure?" […]
shellsharks reposted
Scrolls is back on schedule, with volume 14 having been published this morning! Check it out for all the usual awesome #IndieWeb, #Fediverse and #Infosec / #Cybersecurity goodies. https://shellsharks.com/scrolls/scroll/2025-05-02 As is my tradition, I'd like to thank everyone I've tagged below […]
shellsharks reposted
Late is better than never right? Here's the latest edition of Scrolls! (With the usual #indieweb, #fediverse and #infosec / #cybersecurity weekly-happenin's) https://shellsharks.com/scrolls/scroll/2025-04-28 Thanks to everyone below for their contributions to this weeks edition of Scrolls […]
shellsharks reposted
Volume twelve of Scrolls is live - it's a magical one! 🧙♂️ https://shellsharks.com/scrolls/scroll/2025-04-18 Everyone below contributed in some way either through content they created, or stuff they found and boosted 😃. Thank you thank you! 🙏 @disassociated @shankulkarny @hyde @askDNA […]
I like this from @bradenslen - https://indieseek.xyz/2025/04/15/blogger-how-pushy-are-you-about-getting-paid/ This is one of the reasons I loathe Medium and Substack---they're all WAY too pushy with getting me to sign up, subscribe, pay---before I even have a chance to read a single thing from […]
shellsharks reposted
Scrolls volume eleven has been published! Get scrollin' for the usual #indieweb, #fediverse and #infosec / #cybersecurity goodness! https://shellsharks.com/scrolls/scroll/2025-04-11 Thanks as usual to everyone who helped me make this week's edition as fun and interesting as the rest of them […]
Assortment of Nicole musings... - She just messaged me (again) from a new fun instance: @booth18@mstdn.☚😺ヨシ.st - A year from now she *better* say she's a "proud Polish girl from Toronto (**30** y/o)" - Girl, I'm in wayyyyy too many Discord servers as it is. - Why she tryin' to get me to add her […]
shellsharks reposted
The 10th edition of Scrolls is now live! https://shellsharks.com/scrolls/scroll/2025-04-04 Thanks as usual to everyone who continues to awesome it up each week across the #IndieWeb, #Fediverse and #Cybersecurity / #Infosec communities. WIthout you all, my feeds would be dark and this […]
Happy #followfriday! Here's some cool #infosec / #cybersecurity accounts I've discovered this past week... - @hyperplane - @carrickdb - @0x40k - @malte - @ovelny As a bonus! Feel free to follow my other account @shellsharks@malici.ous.computer , where I tend to share the weekly notice about my […]
shellsharks reposted
Volume EIGHT of Scrolls is out, with all the usual #indieweb #fediverse and #infosec goodness. https://shellsharks.com/scrolls/scroll/2025-03-21 If you haven't already, you can subscribe to Scrolls via #RSS here --> https://shellsharks.com/feeds/scroll-feed.xml Thanks to all the fine folks […]
Just gave myself a crash course in render-blocking css/js resources. Cloudflare having weird issues causing issues for unpkg which is where my (phosphor) icons are hosted. So my site would refuse to load if it couldn't load that dependency. Toss the 'defer' directive on the respective script […]
shellsharks reposted
Volume SEVEN of my #IndieWeb, #Fediverse and #Cybersecurity / #Infosec newsletter, "Scrolls" has landed! You can read and get scrollin' here https://shellsharks.com/scrolls/scroll/2025-03-14. It features the usual awesomeness and also has a vastly improved logo, created by my good friend and […]
Got a li'l art commission request. I'm interested in some banner art for my "Scrolls" newsletter (https://shellsharks.com/scrolls/). Thus far, I've been using the Phosphor scroll icon as a stand-in but would love to have something a little more personalized. As fan of #pixelart I would love to […]
I'm procrastinating right now. So, I wrote a post about procrastinating. https://shellsharks.com/i-am-procrastinating Now, I'm procrasti-tooting about my procrasti-blogging. Wanna procrastinate with me by reading the post? You can tell me what you thought about it so I can procrasti-read and […]
Here's some great #infosec / #cybersecurity folks you should check out this #followfriday - @troed - @phillipprado - @kaoudis - @pinkflawd - @dan1t0 - @neiman - @sushidude - @fyr Have a great weekend!
I've just published the "guiding principles" of my website. https://shellsharks.com/why - This post was inspired by James' Coffee Blog (https://jamesg.blog/2025/03/05/philosophy-of-james-coffee-blog) and Tracy Durnell (https://tracydurnell.com/2025/01/21/guiding-principles-for-my-website/) - […]
This one was kinda fun to think and write about. I've attempted to catalog the numerous quirks and peculiar writing mannerisms I have. https://shellsharks.com/writing-mannerisms Let me know what you think! If you've ever read anything on my site, has any of these things stood out in […]
Blog Questions Challenge: Movies https://beep.town/@blog_challenge/114099263407801474 #blogquestionschallenge #movies @blog_challenge @jcrabapple #indieweb
I've seen a surge of #IndieWeb manifestos and "love letters" to a variety of personal website-related things of late. These are awesome and I've done my best to collect them all and share them in my Scrolls newsletter. Those also inspired me to pen my own love letter of sorts - dedicated to […]
shellsharks reposted
It's out! Not as early as I had wanted (thanks cross-country travel), but _volume five_ of the "Scrolls" newsletter should now be available. https://shellsharks.com/scrolls/scroll/2025-02-28 #indieweb #cybersecurity #infosec #fediverse The usual shoutouts to everyone who contributed to this […]
I spent last night writing about the things on my site that I am the most proud of https://shellsharks.com/devlog/build-then-smile The #IndieWeb allows us to express ourselves in many ways, through our writing, through our site aesthetics, etc... over the last 5 years+ I've built a place on […]
Here's a question for fellow website-havers / #IndieWeb folks. What's something you would like to do with your site that you haven't done, not because you haven't had the time, but because you're just not sure how to do it? I've always wanted to add a mini changelog section to each of my posts […]
shellsharks reposted
The fourth edition of the "Scrolls" newsletter is live! https://shellsharks.com/scrolls/scroll/2025-02-21 Enjoy all the usual weekly #IndieWeb, #Fediverse & #Cybersecurity goodness! Also a reminder that you can subscribe directly to the newsletter via #RSS using this link […]
Alright y'all, I'm very proud of this one. Call me Poseidon or Aquaman or somethin', because I now possess the power, to add sharks to my horizontal rules. Behold! https://shellsharks.com/devlog/shark-fin-hr
shellsharks reposted
In the past, I've been a bit self-concious about how/what I posted on my site. I believe there's some part of my readership that comes to my site specifically for #infosec-related stuff. So anything NON-infosec that I post is something that they may see on my site, or in their RSS reader and […]
shellsharks reposted
The third edition of the "Scrolls" newsletter is live! https://shellsharks.com/scrolls/scroll/2025-02-14 For those new to Scrolls, it's a _free_ weekly newsletter all about the #IndieWeb and the #Fediverse (with some #infosec / #cybersecurity stuff thrown in there for fun). You can subscribe […]