Ash @_bin_Ash

Computer enjoyer // cert haver // бегство от действительности)) (@Mandiant+@GoogleCloud) 0xAsh.io Joined November 2020

Tweets

778
Followers

949
Following

230
Likes

4K

Ash @_bin_Ash

a month ago

AI litmus test is if it becomes more important to the world than Microsoft Excel. Excel goes away? Entire financial system collapses AI goes away? You have to use your brain to do stuff

1 0 2 203 0

It's crazy how much of being a good "pentester" has nothing to do with technical skills and everything to do with: - Managing your own time - Communicating clearly - Writing well - Tracking and completing things effectively - Staying on top of misc tasks

0 0 2 203 0

Ash @_bin_Ash

2 months ago

It's really cool to see how Ghostwriter has grown over the years. Awesome release @cmaddalena!

SpecterOps @SpecterOps

2 months ago

It's really cool to see how Ghostwriter has grown over the years. Awesome release @cmaddalena!

0 10 43 3K 5

0 0 4 223 0

Ash @_bin_Ash

2 months ago

Bring back in person interviews

3 0 4 402 0

Ash @_bin_Ash

2 months ago

Forced myself to do this over the last 2+ years and I: - can confirm it's painful at first - found it results in more thorough testing. You have to fully document the paths you go down - think it leads to a better work life balance also have to constantly force yourself to do it

Dominic Chell 👻 @domchell

2 months ago

31 27 241 25K 40

0 0 9 557 1

Dominic Chell 👻 @domchell

2 months ago

The one tip I will give to anyone starting out in any pentest / red team role is the one thing after 20 years of it I still never manage to do properly…. Report as you go ✅✅✅ That way you don’t end up spending your Sundays writing reports. Writing a report on a 3.5 month…

31 27 241 25K 40

Harley Lebeau @r3dQu1nn

3 months ago

I haven't posted in a long time but wanted to support my region and help announce the very first Mandiant community night! Enjoy presentations from the Mandiant team and network with like minded people over food and drinks! Great opportunity! linkedin.com/posts/activity…

0 2 2 471 1

Chris King @raikiasec

3 months ago

Fun fact: I will have an entry-level pentester opening on my team posted within the week. Come join the Mandiant Red Team! I'll post the link once it's public.

Wes @phishfinding

3 months ago

Fun fact: I will have an entry-level pentester opening on my team posted within the week. Come join the Mandiant Red Team! I'll post the link once it's public.

72 89 1K 250K 352

29 51 459 61K 130

Akamai Security Intelligence Group @akamai_research

4 months ago

Today we unveil BadSuccessor - a new no-fix Active Directory privilege escalation technique. We will explore the recently introduced dMSA feature, and show how it enables turning a very common, seemingly benign permission, into a full domain take over. akamai.com/blog/security-…

3 183 502 57K 309

Download Video

Ash @_bin_Ash

5 months ago

thank god for CDNs TLD that thousands of applications rely on for traffic? nice You can make custom subdomains for the TLD? NICE Block listing the TLD breaks stuff? NICE!

0 0 1 202 0

Ash @_bin_Ash

2 years ago

When Kerberoasting, don't just check Kerberoastable users' membership of traditional admin groups (DA, EA, Administrator, etc.) Use the following Cypher query to enumerate _custom_ security groups with administrative permissions over computer objects in a domain:

4 31 139 17K 103

Ash @_bin_Ash

7 months ago

👀👀👀 Relaying to ADCS web enrollment just got much more interesting github.com/fortra/impacke…

0 1 8 402 4

Ash @_bin_Ash

9 months ago

very useful for my fellow Impacket enjoyers

N7WEra @N7WEra

10 months ago

very useful for my fellow Impacket enjoyers

5 141 416 28K 267

0 0 1 275 0

MhicRoibin @MhicRoibin

10 months ago

There is an arms race going on between loader developers and security vendors. I came across a particularly egregious example of this recently. I wish to share with you. 🧵