Aaron Sanderson @Security_Aaron

PenTester/Threat Analyst. CISSP (and other Certs), OSCP Student. US Army Vet (OEF/OIF) and Dad to three. #PurpleTeamLife @Symantec alumni. United States Joined March 2017

Tweets

1K
Followers

427
Following

2K
Likes

5K

Aaron Sanderson @Security_Aaron

2 years ago

That feeling when you hear that a recent finding from a PenTest engagement has been reported to the Vendor as a bug, and possible CVE..... (suspect that if it does result in a CVE the credit will go to the customer's IT team).

0 0 0 64 0

Aaron Sanderson @Security_Aaron

3 years ago

That weird feeling when you log into your stock market account and see that the employee shares you still have from an old job have changed ticker again. Hello #Gen aka Gen Digital aka Norton/Avast/Lifelock/etc

0 0 0 0 0

Aaron Sanderson @Security_Aaron

3 years ago

Here comes the start of the "fun". #OpenSSL_Vuln blogs.vmware.com/security/2022/…

0 0 0 0 0

Aaron Sanderson @Security_Aaron

3 years ago

After hearing about the fast one that was pulled, I’m glad I didn’t try to make it to the Cleveland BSides.

0 0 0 0 0

Aaron Sanderson @Security_Aaron

3 years ago

Since it seems to be a thing. security-expert-name.com

0 0 0 0 0

Download Image

Aaron Sanderson @Security_Aaron

3 years ago

Patch like the exploit is coming Friday. VMWare cisa.gov/emergency-dire…

0 0 0 0 0

Aaron Sanderson @Security_Aaron

3 years ago

Yes. And in today’s world keeping track can be hard because I open up my phone to write myself a note/update a list annnnd distraction. The tools we use to try to stay on track are the same ones we are fighting to avoid distracting us.

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

And time to update the report template to reflect recently published data. #maestroifyouplease youtu.be/FtdhS2MC75c

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

whatisthematrix.com is back.....

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

This is going to get ugly.

🥝🏳️‍🌈 Benjamin Delpy @gentilkiwi

4 years ago

This is going to get ugly.

13 334 897 0 61

Download Image

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

Always funny when you get the notifications for "X is starting a new Job" on LinkedIn and it's really just the same crew from the last 15 years rolling to the next 'prime' on a long running Federal Project/Contract.

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

Well the author of the linked article wins for today's stupidest take. The fact they are a Professor at a University makes it even worse.

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

Tuesday Hype Music. youtu.be/CdfMh8QgJjA

0 0 0 0 1

Aaron Sanderson @Security_Aaron

4 years ago

For your Monday Morning Coffee break, a little @PuddlesPityP fb.watch/5fHp2UsOqQ/

0 0 1 0 0

Aaron Sanderson @Security_Aaron

4 years ago

1352/tcp closed lotusnotes Wait! What? !!??! How's your morning going? #JustPenTestThings

0 0 1 0 0

Aaron Sanderson @Security_Aaron

4 years ago

This is insane. Completely Unethical to call this "research".

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

Ooph. This is ugly.

0 0 0 0 0

Aaron Sanderson @Security_Aaron

4 years ago

That smile you get as a Purple Hearted PenTester when it is less than 15 minutes from you attempting to dump LSASS on a third party hosted VDI before the deconfliction email from their SOC hit's your inbox... #PointsfortheBlueTeam