NoAgenda exec. Producer, DEFCON 29 speaker, AF-VET full stack dev. cloud sec engineer. aerospace engineer. no longer a Fed, Thot leader, intern @HackerhausSec

Joined November 2015
4,673 Photos and videos
How interested are you in compliance #training for DO-326A and DO-326B? Maybe a 2 week long class for #aerospace engineers with coursework based on the US/EU and my 20 yrs experience? #CyberSecurity #infosec
1
6
440
Itโ€™s wild seeing these threads of Europeans, loving coming to America and enjoying themselves and there are Americans that are just getting all political in their. Responses to just completely destroy the vibe, calm the fuck down we have a great country..
34
Weird how the replies are limited. Hmm
Just to clarify: During the World Cup opening ceremony in Toronto, Canadians booed the American flag, not because they hate America, but because Trump has turned that flag into a symbol of hate & division. The boos were directed at that fucking scumbag.
1
8
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Burp Suite Professional costs 475 dollars a year per seat. A senior software engineer in Amsterdam built the open source replacement as a side project. He put it on GitHub for free. It has 10,569 stars. His name is David Stotijn. The software is Hetty. Here is what Hetty is. An HTTP toolkit for security research. A machine-in-the-middle proxy that sits between your browser and the target. Every request and every response flows through Hetty. You can read them, search them, intercept them, edit them, replay them, and send them again. This is the core loop of every web application security test ever performed. Burp Suite charges 475 dollars a year for it. Hetty does the same job for zero. Here is the feature set. A machine-in-the-middle HTTP proxy with full logs and advanced search. An HTTP client for manually creating and editing requests, and replaying any request you already proxied. Request and response interception for manual review, with full edit, send, receive, and cancel control. Scope support to keep your work organized to a single target. A web-based admin interface that runs in your browser. Project-based database storage so multiple engagements stay separate. A GraphQL service for programmatic access. The installer is a single Go binary. Works on macOS, Linux, and Windows. No Java runtime, no enterprise license server, no machine fingerprinting, no telemetry. Here is the price ladder. Burp Suite Professional: 475 dollars a year per seat. Burp Suite Enterprise: thousands per year, contact sales for a quote. Burp Suite Community Edition: free, but throttled, no scanner, no project save, no intruder rate. OWASP ZAP: free and open source, now owned by Checkmarx after a 2024 acquisition. Hetty: zero. Forever. One binary. No account. A pentester working full time pays Burp 475 dollars a year. A team of 10 pentesters pays 4,750 dollars a year. A bug bounty hunter who finds one vulnerability has already paid for Burp twice over. Or they download a 30 MB Go binary written by a freelancer in Amsterdam and keep every dollar they earn. David has not pushed a new commit in 16 months. The last commit was January 13, 2025. That is normal for a tool that is feature-complete. HTTP has not changed. The proxy still proxies. The intercept still intercepts. MIT licensed code does not expire when the maintainer takes a break. Buy a domain. Find a bug. Cash a bounty. PortSwigger took a free industry tool and put it behind a 475 dollar paywall. A freelancer in Amsterdam gave it back. On every platform. For zero dollars. Your proxy. Your binary. Your bounties. (Link in the comments)
35
274
1,598
86,465
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
15
44
309
14,295
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
๐Ÿšจ BREAKING: More than 400 Arch Linux User Repository packages have been compromised with infostealer malware and a rootkit. Attacker posed as a trusted maintainer and "adopted" orphaned packages. Arch maintainers are purging infected packages now. Audit your AUR installs.
175
804
4,606
1,189,050
So I will do the community a service and paint all electrical boxes green to match the surrounding vegetation. Whoโ€™s with me?
American law enforcement is hiding camera inside fake utility boxes This box looks like an electric box. It even has an electric bolt symbol as a decoy. But itโ€™s fake, inside is a camera that used by law enforcement to monitor the public Law enforcement uses these decoy boxes attached to utility poles for surveillance We are under unlawful surveillance and they courts when side with law enforcement over these cameras In many US jurisdictions, long-term warrantless pole camera surveillance of public areas or homes from a distance has been upheld by courts Insane
1
28
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Upscales videos with machine learning without quality loss github.com/k4yt3x/video2x
1
58
387
11,682
It isnโ€™t a waste of money because the aircrew have to maintain currency by flying so many hours a month. The aircraft will be flying the hours regardless. Just a heads up, I was an aircraft mechanic on multiple platforms and I hated doing flyovers, but that was typically because it was on my days off.
Yes, military flyovers look cool. But taxpayer-funded military hype for private sports events is still weirdโ€”and a little creepy.
Community note
Military flyovers at sporting events incur no additional cost to taxpayers, as they are part of routine training missions already funded and required for pilots. 159fw.ang.af.mil/About-Us/Commuโ€ฆ ne.ng.mil/Community-Relaโ€ฆ
1
24
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Combines traceroute and ping for visual network diagnostics github.com/fujiapple852/tripโ€ฆ
20
166
6,587
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
NVIDIA gave you free game streaming for 10 years. It was called GameStream. Built into GeForce Experience. You streamed any game from your PC to your TV, your phone, your tablet. No subscription. No cap. It just worked. Then on March 29, 2023, NVIDIA force-deleted it. A mandatory Shield TV update removed the feature off devices customers had already paid for. A class action lawsuit was filed three weeks later. NVIDIA then pushed those same customers toward GeForce NOW at $9.99 to $19.99 a month. In January 2026, they added a 100-hour monthly cap. Coincidence. The community did not wait. They reverse-engineered the GameStream protocol. Built an open source server from scratch. Made it work on NVIDIA GPUs. Then AMD. Then Intel. NVIDIA's free tool only worked on NVIDIA hardware. The community's free tool works on everyone's hardware. It is called Sunshine. 37,835 stars on GitHub. GPL-3.0. Built by the LizardByte team. Lead by ReenigneArcher with 1,001 commits. Pushed to GitHub today, June 10, 2026. What it does: Stream any game from your PC to any Moonlight client. Phone, tablet, TV, laptop, another PC. 4K resolution at 120 frames per second with HDR. H.264, HEVC, and AV1 encoding. Hardware accelerated. NVIDIA, AMD, and Intel GPUs. Controller emulation for Xbox, PlayStation, and Nintendo Switch Pro. Web UI for setup and pairing. Unlimited sessions. No cap. No timer. Windows, Linux, macOS, and FreeBSD. Local network or over the internet with UPnP or Tailscale. Now compare the math. GeForce NOW Performance: $9.99 a month. NVIDIA hardware only. 100-hour monthly cap. GeForce NOW Ultimate: $19.99 a month. $239.88 a year. NVIDIA hardware only. 100-hour monthly cap. Sunshine: $0. Forever. NVIDIA, AMD, and Intel. No cap. No timer. Ars Technica wrote the obituary in April 2023: "NVIDIA's GameStream is dead. Sunshine and Moonlight are better replacements." NVIDIA took away a free product. The community gave it back. Better. On more hardware. But DO NOT install Sunshine. We should all keep paying NVIDIA $20 a month for what used to be free. 100% Open Source. (Link in the comments)
65
467
3,650
227,545
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Replying to @WallStreetApes
This is about as un-American as you can get!!
14
194
1,887
44,099
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
100 open-source clones of popular sites with tutorials github.com/GorvGoyl/Clone-Waโ€ฆ
4
133
911
31,190
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Jun 8
The favorite book of many vibe coders who don't understand the basics...
31
115
832
18,126
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
I'm the comments you'll find everything there is to know about the first player-controllable large alien ship. What really makes this ship "alien"? Better question, will it have a good release?
11
2
65
9,647
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
43
135
1,305
48,030
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
Maps your computer's live internet connections globally github.com/olalie/tapmap
3
85
513
22,301
Boxswapper ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿด๓ ง๓ ข๓ ฅ๓ ฎ๓ ง๓ ฟ retweeted
RTL-SDR Now Runs on iPad M-Series Devices Directly via USB Without Jailbreak rtl-sdr.com/rtl-sdr-now-runsโ€ฆ
7
77
628
41,443