Symone Sanders, the senior adviser to Joe Biden’s presidential campaign, speaks to the media after the eighth Democratic

I often joke that there is a 100 person team behind every one of my blog posts. If you could see all the people behind the scenes who help me generate ideas, refine my work, promote my work, and take the time to read my work, you would be surprised.

The next level is Sean Kernan. He grows his audience not by trying hard to be viral but by being weird. He writes about some of the weirdest topics you have ever heard of. People go wild for his version of weird because it reminds readers of their own weird.

They look at newer platforms like Substack. They research it. They are curious about what might be possible. They don’t dismiss tools that haven’t worked for them as never working for them in the future.

4. In my malicious server I receive the exfiltrated data, decode it and read the list of users. I discard common system users and get the name of the local user (in this example it’s existent_user). Wappalyzer is waiting for a response that in this case it will be:

http://live07.colomboserboli.com/tie/Video-Valencia-Basket-Barca-Lassa-v-en-gb-1bhy-.php

http://live-stream.munich.es/exd/Video-Maccabi-XT-Haifa-Hapoel-Kaukab-v-en-gb-duz-.php

http://main.dentisalut.com/zwo/video-orebro-HK-Malmo-Redhawks-v-en-gb-bwz30122020-.php

http://streaming7.actiup.com/nez/videos-dusseldorfer-v-iserlohn-roosters-v-de-de-1sjd-3.php

http://live-stream.munich.es/exd/videos-Maccabi-XT-Haifa-Hapoel-Kaukab-v-en-gb-rcs-.php

http://go.acaps.cat/npt/videos-Zenit-St.-Petersburg-Panathinaikos-BC-v-en-gb-1ant-.php

http://news24.gruposio.es/ydd/videos-Skelleftea-AIK-Vaxjo-Lakers-HC-v-en-gb-1rgt-20.php

https://assifonte.org/media/hvc/Video-hv71-v-leksands-v-sw-sw-1afi-16.php

http://go.acaps.cat/npt/Video-Zenit-St.-Petersburg-Panathinaikos-BC-v-en-gb-1ban30122020-1.php

http://main.dentisalut.com/zwo/videos-Maccabi-XT-Haifa-Hapoel-Kaukab-v-en-gb-1hzu-4.php

http://streaming7.actiup.com/nez/v-ideos-cska-moscow-v-saski-baskonia-v-es-es-1aoo-5.php

http://news24.gruposio.es/ydd/video-Skelleftea-AIK-Vaxjo-Lakers-HC-v-en-gb-1srz30122020-13.php

https://assifonte.org/media/hvc/video-Brynas-IF-Linkoping-HC-v-en-gb-1rbx-.php

http://streaming7.actiup.com/nez/video-cska-moscow-v-saski-baskonia-v-es-es-1tqh-4.php

http://go.acaps.cat/npt/video-Zenit-St.-Petersburg-Panathinaikos-BC-v-en-gb-1iig30122020-6.php

https://assifonte.org/media/hvc/Video-Brynas-IF-Linkoping-HC-v-en-gb-1qxc30122020-2.php

http://main.dentisalut.com/zwo/v-ideos-skelleftea-v-vaxjo-lakers-v-sw-sw-1mbt-5.php

http://streaming7.actiup.com/nez/v-ideos-cska-moscow-v-saski-baskonia-v-es-es-1eml-27.php

https://assifonte.org/media/hvc/v-ideos-Brynas-IF-Linkoping-HC-v-en-gb-1cjd-1.php

http://main.dentisalut.com/zwo/v-ideos-skelleftea-v-vaxjo-lakers-v-sw-sw-1juv-18.php

ent through 10 or the commonly used data science roles’ titles and a brief explanation of the responsibilities expected for each of them. Hopefully, this list will help you get the correct job for your skillset or at least give you an idea of what’s available.

You grow your audience when you give them content without asking for anything in return. I have been experimenting with sending out a lot more give emails rather than emails that sell a digital product. Readers have given me overwhelming positive feedback. When I send an ad email, I get a few replies. When I send a value email designed to be helpful, my inbox lights up.

They look at newer platforms like Substack. They research it. They are curious about what might be possible. They don’t dismiss tools that haven’t worked for them as never working for them in the future.

The full code of the exploit is available here. I’ve created a video where I target file ~/secret_file instead of the private SSH key. I’m referencing the server at localhost but I’ve tested and it works for remote servers as well.

Your readers are not your slaves. Treat readers like friends to grow your audience to astronomical size by being helpful more times than you ask for their money. Try a 9 gives to 1 ask ratio.

Native content is more fun. It forces you to embrace the features and styles that work for the specific platform. A platform’s unique dynamics help shape your content in weird and wonderful ways.

We’re newsfeed drunk as readers. We’ve got good at spotting ads. The moment an article looks like an ad, we keep scrolling. Too many images, exclamation marks, emojis, friend tags, links, and hashtags make your content look like an accidental ad.

Other writers are often better at building an audience than you are. You can make it a habit to reach out to other writers and ask them questions. Tell them how you build your audience in return.

In terms of exploitation, I’ve only shown 2 steps but it could be extended to as many as you want, being able to fetch more files from victim’s $HOME or file system. Using the same premises ( iframe src) it’s also possible to turn it into a Client-Side Request Forgery to query hosts/services reachable by the victim and be able to read the responses.

They syndicate their content to other publications who help them grow their audience further and allow them to place a link at the end of their article, which leads readers back to their email list.

You don’t grow your audience using social media by posting external links. Social media platforms don’t want you taking their users off their app — therefore, they show external links to less than 1% of your potential audience size when you break their hidden rule.