Infosec focused free software, research, publications, community activities @oss_security. Tweets are announcements. Please direct questions to @solardiz.openwall.comJoined June 2010
April 2026 was the busiest month for oss-security in 11 years. 311 messages posted. We surpassed the XZ backdoor spike of March-April 2024. We last had 300+ in April 2015 when we still had CVE assignment via the list. Now we're back without that incentive. openwall.com/lists/oss-secu…
passwdqc 2.1.0 is out, adding built-in common passwords list. We effectively include top 100k of HIBPv8 overlap with RockYou, optimized and compressed to under 200 KB embedded in program binary. None of JtR password.lst 1.8 million are accepted by default. openwall.com/lists/announce…
passwdqc 2.0.3 releases for Unix-like and Windows systems are out, with many minor additions and changes. Leaked password filter files updated to HIBP v8, encoding the 847+ million unique passwords (from billions of accounts) in a 3.5 GB file. openwall.com/lists/announce…
Sponsor spotlight: @Openwall
The people behind John the Ripper and decades of open-source security work. If anyone understands community-driven security, it's them.
Thank you for backing #BSidesLjubljana.
#InfoSec#Cybersecurity#Openwall
What should @Openwall's simpler vulnerability scoring system (CVSS alternative) be called? Note that we already have OVE openwall.com/ove/ as a CVE alternative, but unfortunately the OVSS acronym already has a bit of use in CS/AI for "open-vocabulary semantic segmentation".
Hash Suite 4.0 (Windows) adds support for custom Python scripts as key-provider, updated wordlists to download, better high-resolution support, and should have fewer antivirus false positives. hashsuite.openwall.net/download
Linux Kernel Runtime Guard @lkrg_org 1.0.0 by @Adam_pi3@solardiz@kerneltoast et al. is out, adds support for Linux 6.13+ (tested to 6.17-rc4), forward-edge CFI (Intel CET IBT, KCFI), ..., reduces performance overhead, shrinks the codebase by ~2500 lines. openwall.com/lists/announce…
End of an era: our CVSweb service turned 21 today, and was promptly retired. Our anoncvs was similarly shut down at the age of 21 two years ago, quietly.
All of our projects previously maintained in CVS are now in Git (yes, older ones with commit histories for ~20 years) and under the Openwall organization on GitHub. There are a total of 22 Git repositories now. openwall.com/lists/announce…github.com/openwall
🔒 Enhancing LKRG: A Step Toward Stronger Security. CIQ's own Sultan Alsawaf recently contributed impactful updates to the LKRG project, fixing longstanding bugs & making it stronger & more stable than ever.
Learn more here 🔗 hubs.li/Q03jDBsj0#HPC#IT#LKRG#OpenSource#Linux
#MITRE#CVE is great (dead?), but @Openwall 's #OVE has been a system for vuln. tracking-ID since 2016 !
Ex: #Exim CVE-2019-13917 also has OVE ID: OVE-20190718-0006
I used both for tracking vulnerabilities since 2k16.
Time to give #OVE more visibility:
openwall.com/ove/
I'm happy to build upon and extend the ideas and approaches we had tested and proven, and expertise gained building @Openwall's security enhanced Linux distribution, now for @CtrlIQ's wider audience and in a modern context.
Czas na wywiad! Rozmawiamy z @Adam_pi3 i @solardiz o LKRG (Linux Runtime Kernel Guard), które może znacznie utrudnić zhackowanie Linuxa. Co słychać i jak przebiega rozwój projektu, czy ktoś próbował skutecznie obejść LKRG? Zapraszamy do lektury! adwersarz.pl/polskie-projek…
We sponsored the porting of the yescrypt Linux password hash algorithm to Go as an open source project. Read more below. This is now part of our agentless password auditor feature on Linux as well.
Sandfly 5.1.1 features yescrypt support for our agentless Linux password auditor, new detection modules for debugger activity, and an important performance fix for the database. Read more about these new features below:
sandflysecurity.com/about-us/news/…
28K Followers 628 FollowingWeb hacker and Burp Suite Pro trainer
Refer to https://t.co/D5tRH7U2hg for trainings
Follow @MasteringBurp for free tips and tricks
21K Followers 274 FollowingOffensive security company. Dojo of many ninjas. Red teaming, reverse engineering, vuln research, dev of security tools and incident response.
37 Followers 660 FollowingI'm just here to follow the drama on infosec Twitter. Sometimes there's a bit of actual security news, hacking info, or PoCs there.
19K Followers 132 FollowingRocky Linux is a community-driven Enterprise Linux distro, for HPC, AltArch and beyond | 🦋 https://t.co/qJ610xRJC8 | 🐘 [email protected]
5K Followers 9 Following@Openwall oss-security mailing list thread summaries, currently maintained by @solardiz. Originally setup and maintained as an automated feed by @eugeneteo.