George Chatzisofroniou @_sophron

My curiosity is effortlessly sparked. sophron.latthi.com Minneapolis, USA Joined August 2011

Tweets

231
Followers

740
Following

56
Likes

133

George Chatzisofroniou @_sophron

8 months ago

In my latest research, I analyzed the security & privacy of Wi-Fi Easy Connect, the successor to WPS. Surprisingly, its design may increase the attack surface compared to WPS. Includes responses from the Wi-Fi Alliance on our findings. 📡 Read it here: rdcu.be/d84dW

0 0 1 137 0

Sølst1c3 @s0lst1c3

12 months ago

@n00py1 Original WPA/2-EAP attacks were Josh Wright and @brad_anton. MSCHAPv2 was @moxie / @0x31337. Karma was @dinodaizovi / Shane Macaulay, and later @singe and Ian de Villiers with Mana. Known Beacons was @_sophron, EAP Relays @_cablethief and @singe. GTC Downgrades was @wishbone1138…

3 6 19 2K 8

George Chatzisofroniou @_sophron

4 years ago

I'm not sure how clear this is but the org/person who owns test.com has power over the Internet which is often overlooked. Password reset emails can be abused, particularly when the registered address was never validated (e.g. during dev/testing or bad design).

2 1 4 0 0

George Chatzisofroniou @_sophron

4 years ago

@s0lst1c3 @vanhoefm @singe @ellwoodthewood @dinodaizovi @DaKahuna2007 @elkentaro @SecureThisNow @moxie @brad_anton (2/2) (a) Can only be deployed in Enterprise environments (i.e. disregarding most public environments) (b) Require modifications to the protocol (c) Rely on active detection methods which can be avoided by most attackers (d) Are only effective under certain conditions

1 1 3 0 0

George Chatzisofroniou @_sophron

4 years ago

@s0lst1c3 @vanhoefm @singe @ellwoodthewood @dinodaizovi @DaKahuna2007 @elkentaro @SecureThisNow @moxie @brad_anton (1/2) Coincidentally, I spent some time the past few weeks reviewing known WIDS/WIPS solutions. While they are effective to a certain level, they do not offer adequate protection against Wi-Fi attacks. The most common limitations that I found are:

2 1 3 0 0

George Chatzisofroniou @_sophron

5 years ago

A great book written by exceptional security engineers. nostarch.com/practical-iot-…

0 6 27 0 1

Download Image

George Chatzisofroniou @_sophron

5 years ago

Looking for a senior security engineer for a full-time telework position (within the US). The applicant needs to be experienced in pen. testing, red teaming, and security consulting. Experience in rev. engineering, h/w hacking or exploit devel. will be considered a plus. DM me.

0 5 3 0 0

George Chatzisofroniou @_sophron

5 years ago

Penetration Testing and Low-Cost Freelancing: The Story of How I Hired 7 Freelancers to Exploit this Weird Vulnerability sophron.github.io/lowcost-freela…

4 39 112 0 20

Mayo Clinic @MayoClinic

6 years ago

Mayo has developed a test to detect #COVID19. A process that usually takes 6 months to a year was accomplished in under a month, thanks to a dedicated team working around the clock. Learn more about the Clinical #Virology Laboratory @mayocliniclabs mayocl.in/3cSYLx7.

33 569 1K 0 12

Download Video

Sølst1c3 @s0lst1c3

6 years ago

Today I’m kicking off a 4-part series on wireless tradecraft following the past few months of #eaphammer R&D. Pt 1 provides a primer on 802.11 with a focus on features that can be abused by attackers. @SpecterOps Post: posts.specterops.io/modern-wireles… Tool: github.com/s0lst1c3/eapha…

9 121 279 0 49

Wifiphisher @wifiphisher

6 years ago

To everyone attending @defcon next week: 1. Clean your PNL (Preferred Network List) 2. Revoke Wi-Fi permission for all installed apps 3. Disable any Wi-Fi features that enforce automatic association 4. Turn off Wi-Fi completely 5. Enjoy the conference

2 7 38 0 4

George Chatzisofroniou @_sophron

6 years ago

Next week is going to be my first time in Vegas and @defcon. Looking forward to seeing old friends and making new ones. Let me know if you are around.

0 0 4 0 0

Dimitrios Tatsis @dtouch3d

6 years ago

The slides for my talk @reconmtl about Hexagon and aDSP are (finally) available at cfp.recon.cx/media/Attackin…

4 29 67 0 5

George Chatzisofroniou @_sophron

6 years ago

I'm seeing this more and more often when I'm reviewing external pentest reports: A finding is presented as a major issue regardless of the low impact/likelihood. Remember: It doesn't matter how clever or uncommon your exploit is. A low-risk finding is a low-risk finding.

0 0 2 0 0

Fotis Chantzis @ithilgore

6 years ago

Tomorrow @brrcon_ fellow Mayo engineer @_sophron will be presenting "Advanced Wifiphiser Usage for Red Team Campaigns": brrcon.com/abstracts/ Don't miss it! #infosec #wifi - You can try wifiphisher at github.com/wifiphisher/wi…