ᅟ @_harleo

tl;dr hacker / infosec analyst & researcher. mostly lurking. harleo.me 0.0.0.0/0 Joined October 2017

Tweets

821
Followers

333
Following

628
Likes

5K

Dirk-jan @_dirkjan

2 weeks ago

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

145 897 3K 436K 1K

Swissky @pentest_swissky

a month ago

When Backups Open Backdoors: Accessing Sensitive Cloud Data via "Synology Active Backup for Microsoft 365 - @mod0 / @_harleo modzero.com/en/blog/when-b…

2 1 2 975 2

atlas @creatine_cycle

2 months ago

you're in her dms i'm in her military grade encrypted messaging app group chat

7 3 100 5K 4

Noah Ryan @NoahRyanCo

2 months ago

Wake up and immediately look at small screen before clocking 8 hours behind medium screen. Take a few breaks to check in on small screen. Go home and spend a few hours staring at big screen to wind down before getting into bed and looking at small screen. Living the dream.

607 16K 214K 7.3M 15K

solst/ICE of Astarte @IceSolst

3 months ago

Saw a senior pentester once report a high sev vuln that the aws iam policy was outdated, from 2012. Client got so pissed, asked to redo the entire engagement with different testers.

43 30 779 61K 135

Download Image

avery @redditfartporn

3 months ago

excuse me do you have the dubai chocolate labubu matcha latte

118 11K 113K 2.3M 3K

Download Image

Dirk-jan @_dirkjan

3 months ago

How not to do multi-tenant apps. Nice find by @_harleo from modzero, compromising Synology Active Backup client secrets (from the Synology tenant) during installation 🤦 modzero.com/en/blog/when-b…

2 41 107 9K 45

solst/ICE of Astarte @IceSolst

4 months ago

Taking a screenshot of the desktop, deleting all icons, then replacing the background image with the screenshot

Nate @natemcgrady

4 months ago

Taking a screenshot of the desktop, deleting all icons, then replacing the background image with the screenshot

61 1 140 36K 14

33 37 587 25K 43

djcows @djcows

4 months ago

when my parents turned off the internet at night to stop me from playing WoW, i installed kali linux and used aircrack-ng to get my neighbors wifi password. that's where it all went downhill