p̻̻̥r̥̻̥o̻j̤͛ec͔t̞dp @projectdp

I've had the pleasure to know @whitecyberduck over the last year. I was incredibly impressed by this series of achievements over the last year by this talented individual. Companies struggling to find qualified cybersecurity staff need to understand THIS IS EXPERIENCE. Easy Hire.

whitecyberduck @whitecyberduck

4 years ago

39 39 617 0 98

Download Image

0 2 3 0 0

Amit Gupta @amitkgupta84

4 years ago

Maybe AWS keeps going down because they run all their stuff on prem

91 1K 9K 0 88

@[email protected] @Nick_Craver

4 years ago

Tip: most shipping labels are heat printed, which means you can use a heat gun or torch to black them out rather than trying to tear them off:

62 278 3K 0 90

Download Image

iLightThings @iLightThings

4 years ago

I am releasing a beta version of my new lockout-aware password sprayer! Crimson-spray will spray passwords in an active directory network while detecting and avoiding locking out accounts! As always feed back and bug reporting is always welcome! github.com/ILightThings/c…

1 3 13 0 1

Download Image

Oleg Kutkov 🇺🇦 @olegkutkov

4 years ago

I connected the Starlink auth chip to my Raspberry Pi. And it's alive! I managed to build the vendor's library and run a few tests. It's possible to read zones data and other stuff. (Sorry for the blur)

17 133 776 0 57

Download Image

an0n @an0n_r0

4 years ago

from @BlackHatEvents USA 2016: A Journey From #JNDI/LDAP Manipulation to Remote Code Execution Dream Land by @pwntester and @olekmirosh blackhat.com/docs/us-16/mat… now the exploit vector presented in 2016 is the #log4jRCE. attached slide #11 from the presentation below. :)

6 205 558 0 75

Download Image

Drew Gallatin @DrewGallatin

4 years ago

My 400G EuroBSDcon talk is up on their YouTube Channel youtube.com/watch?v=_o-HcG…

0 4 11 0 1

an0n @an0n_r0

4 years ago

#log4j storm is coming, cryptominers in the first wave. checked multiple (non-java ;) ) webservers i run and the logs are getting filled with the ${jndi:ldap://...} payloads. THREAD: let's see a weaponized one.

8 188 565 0 89

Download Image

p̻̻̥r̥̻̥o̻j̤͛ec͔t̞dp @projectdp

4 years ago

I completed the Yara Analysis challenge! holidayhackchallenge.com Don't miss out on SANS #HolidayHack x @KringleCon holidayhackchallenge.com

0 0 2 0 0

Prof. Feynman @ProfFeynman

4 years ago

1. Read and write more. 2. Don't hesitate to admit when you're wrong. 3. Be comfortable changing your opinion. 4. Find a mentor. 5. Stay teachable. 6. Make mistakes and learn. 7. Don't get offended easily. 8. Ask questions. 9. Spend time with nature. 10. Stay humble.

69 5K 17K 0 1K

Roberto Rodriguez 🇵🇪 @Cyb3rWard0g

4 years ago

🚨 #Sysmon v13.30 is out! New "User" fields on several events and a new option to set the size of a field 😱 #MSTIC 1⃣ Event manifest/schema: github.com/microsoft/MSTI… 2⃣ Schema version: 4.81 3⃣ Enrich those detection/hunting rules with "user" context 😉🏹

4 132 278 0 43

Download Image

an0n @an0n_r0

4 years ago

#windows11 Defender bypass (worked for #meterpreter): - basic sandbox evasion - decrypt encrypted shellcode to memory - create process in suspended state - copy shellcode into allocated mem in remote process - create remote thread that's all. no need for special arsenal. :)

10 264 769 0 131

Download Image

[email protected] @0xdea

4 years ago

As it turns out, a non-negligible number of people in infosec don’t know what L0phtCrack is and, I assume by extension, what L0pht is. I suppose it’s somewhat normal but it shouldn’t be. Our roots are important. We should not forget them. I think.