DC352 @DefCon352

North Central Florida Hackers North Central Florida Joined August 2017

Tweets

491
Followers

218
Following

100
Likes

101

Anthony Coggins @SecOps_and_Hops

4 years ago

@corg_e Relevant meme

1 12 123 0 3

Download Image

chompie @chompie1337

4 years ago

this is a neat kernel bug I found in io_uring that is exploitable for LPE. was fun learning about and breaking another Linux kernel meme

CVE @CVEnew

4 years ago

this is a neat kernel bug I found in io_uring that is exploitable for LPE. was fun learning about and breaking another Linux kernel meme

2 58 199 0 21

20 127 758 0 64

Orange Tsai 🍊 @orange_8361

4 years ago

The OWASP Top 10 2021 is out. I'm excited the SSRF is on the list and would like to thank @vanderaj for giving me the chance to contribute to writing the section of SSRF! #owasp owasp.org/Top10/

3 110 522 0 23

Grant H @Digital_Cold

4 years ago

Control all the fans!

1 9 42 0 6

0 0 0 0 0

Jackson is one of the most brilliant infosec practitioners I’ve ever met. His content here is brilliant and informed by his years of deep experience. This is the high signal content you’re looking for.

Jackson T. @Jackson_T

4 years ago

6 76 188 0 41

0 3 11 0 0

Halvar Flake @halvarflake

4 years ago

It's finally ready: Prodfiler, a continuous profiler that "just works" -- for C/C++/Rust/Go/JVM/Python/Perl/PHP -- no code change required, no symbols on the machine required, no service restart required. Check out: prodfiler.com or the blog post below.

optimyze.cloud @OptimyzeCloud

4 years ago

5 100 354 0 61

39 226 745 0 111

Runa Sandvik @runasand

4 years ago

The more I look at the Green Lambert OS X sample, the more I appreciate Hopper Disassembler and the fact it’s only $99. Great work, @bSr43!

1 3 17 0 2

Andy Robbins @_wald0

4 years ago

Today I learned that unconstrained delegation trumps gMSA protection against interactive logons on systems the gMSA isn't installed on. Makes sense - a ticket is a ticket, and no interactive logon is taking place here. Screenshots tell the tale Thanks @harmj0y for the help

2 23 88 0 15

Download Image

Orange Tsai 🍊 @orange_8361

4 years ago

I am honored to win the Best Server-Side Bug of @PwnieAwards 2021 again. Thanks everyone, I will keep rocking and Hack the Planet!!

18 69 798 0 6

Download Image

Andrea P @decoder_it

4 years ago

#remotepotato0 xsession is finally out! @splinter_code and me released it: github.com/antonioCoco/Re… Coerce and relay NTLM auth from any user in any session w/o session 0! Enjoy responsibly ;)

5 344 650 0 104

Rebecca Markwick @BexMarkwick

4 years ago

I really enjoyed being able to throw my #infosec knowledge around in this fascinating dive into IT/OT systems & burnout. With so much ransomware around it's nice to remember @MalwareTechBlog's nice work on WannaCry

UCL Shelf Healing @Shelf_Healing

4 years ago

0 5 4 0 4

0 2 5 0 0

Brian R @brian_psu

4 years ago

I didn’t know Microsoft had documentation for this: which default services you can and should disable on Windows Server 2016. docs.microsoft.com/en-us/windows-…

4 50 176 0 43

Securitum @securitum_com

4 years ago

Our pentester, @zoczus, identified a possible RCE in fail2ban: github.com/fail2ban/fail2… Make sure to update!

1 74 220 0 26

Orange Tsai 🍊 @orange_8361

4 years ago

It looks like Microsoft finally fixed all my Exchange vulnerabilities (including Pwn2Own bugs) ! Here is a small spoiler - You can't imagine how amazing it is when I found Exchange still suffered from Padding Oracle Attack 😻 - blackhat.com/us-21/briefing… #BHUSA #DEFCON

10 167 752 0 34

Lesley Carhart @hacks4pancakes

4 years ago

Sometimes instead of blogging I feel like making a big old Twitter thread, so let's talk about Cobalt Strike for people only vaguely familiar (or misinformed) with the concept. Maybe I'll blog it later.

32 366 1K 0 345

Orange Tsai 🍊 @orange_8361

4 years ago

Yay, 31337!

7 6 384 0 2

Download Image

Objective-See Foundation @objective_see

4 years ago

A massive bug, affecting all recent versions of macOS was actively exploited as an 0day by malware 👾🍎 Read our blog post, #100 "All Your Macs Are Belong To Us" objective-see.com/blog/blog_0x64…

15 359 711 0 128

Lorenzo Franceschi-Bicchierai @lorenzofb

4 years ago

NEW: Signal's CEO hacks a Cellebrite iPhone hacking device used by cops and details serious vulnerabilities in it. vice.com/en/article/k78…

8 176 495 0 45

Download Image

Jason Lang @curi0usJack

5 years ago

The most frustrating thing I hear on debrief calls: "So, you're saying if we had just blocked X, then you never would have gotten this far, correct?" I get it, but the answer is always "no". Better question: "Had we blocked this, what would you have done next?"