Hamza Gondal @rev_shell
Pentester | RedTeamer | Security Enthusiast | Consultant | Offensive Security Joined December 2017-
Tweets168
-
Followers22
-
Following223
-
Likes57
@GrandBridgeNRG Colborne street west has been out since 6pm. What’s the eta
For your Global Admin and Privileged Role Admins, if you want to implement an approval process for PIM, below is a screenshot of the setting. I understand there is some controversy around this setting. As a previous offsec practitioner in Microsoft Cloud, I recommend this coupled with the following mitigations: 1. Managed Device Requirement 2. Approved Named Location 3. Authentication Context Your Global Admins should be having a conversation with another Global Admin when they need to elevate the role for approved work. Access reviews quarterly is not enough in my opinion. Checking on your PAWS health (i.e. validating EDR telemetry and device health) during Access Reviews won't hurt either.
@_RastaMouse The best part is when they discount it from a gazillion dollars to two cents. 😅
I'm secretly waiting to see what happens when there is a conversation between ChatGPT and Google's AI assistant. 😅
Great content from @D1iv3, introducing 𝗿𝗲𝗺𝗼𝘁𝗲 privilege escalation via #NTLM & #Kerberos over DCOM. I would recommend also using the #RPCFirewall as mitigation on your ADCS servers :) #BHASIA
During #BHASIA Briefing "CertifiedDCOM: The Privilege Escalation Journey to Domain Admin with DCOM" we will uncover a remote attack surface of DCOM and disclose a critical vulnerability related to it. Register now >> bit.ly/49yr4xw
Active Directory hardening blog post series, like a boss, by Jerry Devore. Posting this so I can reference it later! Disabling NTLMv1 techcommunity.microsoft.com/t5/core-infras… Removing SMBv1 techcommunity.microsoft.com/t5/core-infras… Enforcing LDAP Signing -techcommunity.microsoft.com/t5/core-infras… Enforcing AES for Kerberos techcommunity.microsoft.com/t5/core-infras…
The xz backdoor was initially caught by a software engineer at Microsoft. He noticed 500ms lag and thought something was suspicious. This is the Silver Back Gorilla of nerds. The internet final boss.
The answer is not simple ^^ a small thread 🧵 x.com/tK4w8TmK40dNU0…
@M4yFly Hello！ your research is great🍻 The path in the figure, how to obtain the domain admin?
Are your Microsoft 365 Global Admin accounts still synced from on-prem?
It doesn't matter if you're 25 or 75, do these 10 exercises for the rest of your life:
I'm pumped to announce the release of Misconfiguration Manager, a knowledge base and how-to for both offensive and defensive SCCM attack path management, that @subat0mik, @garrfoster, and I have been working on! Check it out and let us know what you think! posts.specterops.io/misconfigurati…
There seems to be this idea that red teaming is about improving detection, whilst true in part people seem to ignore incident response. You cant assess IR effectiveness without spreading through a network undetected. Imo assessing IR provides far more value. Some examples...
@M4yFly Hello！ your research is great🍻 The path in the figure, how to obtain the domain admin?
New doc about Behavior Monitoring in Microsoft Defender Antivirus learn.microsoft.com/microsoft-365/… #microsoft #mde #epp #antivirus #antimalware
Microsoft has a huge list of portals and it is not always easy to keep track of all the naming changes, Therefore, this resource comes in very handy! [LandingPage] MSPortals msportals.io #Microsoft #LandingPage
This is a really cool (and free) service to help you learn just about anything. I love the way it hierarchically breaks concepts down. explorer.globe.engineer/?q=creating+po…
The new Incident Response PowerShell V2.0.0 release brings exciting updates such as SIEM exports, new artefact collections, and more. Nice tool! [Repo] #Powershell Digital Forensics & Incident Response (DFIR) github.com/Bert-JanP/Inci… Credit: Bert-JanP #CyberSecurity
From our initial recreation of CVE-2023-23397 based on @MDSecLabs, this is what it looks like from a defender's perspective. Lucky for us, it's super easy to spot. 1. svchost spawns rundll32 w/attacker UNC path 2. svchost makes distinct HTTP requests #ThreatHunting #DFIR
How to make traveling easier. 9 useful tools (all free):
NightFall @Selenophilic97
0 Followers 130 Following
Shams Gondal @ShamsGondal20
5 Followers 97 Following Retired PAF officer, Musician and drawing artist presently, in a band with my wife called 'laqeer ke faqeer'
Aster @SA_SA1024
1 Followers 35 Following
Clar3nce @C1ar3nce_
343 Followers 693 Following i shitpost about stuff and things. Aspiring malware analyst in my spare time maybe even professional one day. we can hope..
Alex Kozlov @b4cktr4ck2
356 Followers 295 Following Physical Security/Red Team/Car Hacking/Hardware Hacking enthusiast. Adversarial Engineer @Lares_. OSCP/OSEP.
Taha @syedtazaidi
11 Followers 85 Following
CanCyber @cancyberorg
125 Followers 63 Following CanCyber Foundation is a not for profit that focuses on Threat Intelligence, indicator sharing and automated malware hunting.
Paul A. @paulait59174642
9 Followers 231 Following
Eldon Sprickerhoff @TheEldon
1K Followers 3K Following I'm from Waterloo, where the vampires hang out. InfoSec Founder Whisperer. Wrote a book for first-time tech founders. Frequently underestimated. 🇨🇦
My High Thoughts @Man_Im_Stoned
563 Followers 1K Following Just some high thoughts, simple as that, tweet me some of your high thoughts and let's see where it goes, I always follow back
Shakeel @IMShak
923 Followers 5K Following CyberSecurity Ninja, Entrepreneur, Speaker, & Semi-Pro Photographer
n1cFury @n1c_fury
1K Followers 1K Following DEFCON SOCGoon. lifelong learner, #CISSP #PNPT #PWK, #infosec, #coffee #locksport #pewpew. I speak only for myself and sometimes my dog. #RTTHS
N̶͈̻͍̼̞̍̏͜e�... @NemoNovus
153 Followers 837 Following 💻 Software designer ~ 🎩🏳️ Beyond darkness there will be a light. 😇
ΜΔDΞRΔS @hackermaderas
21K Followers 14K Following Home of #CyberpunkisNow. Hacker, researcher, writer, creating original #Technology #InfoSec #OSINT #Privacy content & analysis.
@[email protected]... @XavierAshe
3K Followers 4K Following I'm no longer here. Find me on Mastodon: https://t.co/QuIRRR5yj7
SecureAnchor @SecureAnchor
410 Followers 2K Following Secure Anchor provides cybersecurity services that help organizations prevent security breaches, detect network intrusions, and respond to advanced threats.
Amanda Goodall @Amanda_Goodall
47K Followers 76 Following Founder, Goodall Research. I don’t buy corporate narratives, but I know which ones are about to break.
Fabian Bader @fabian_bader
11K Followers 913 Following #Security #Azure #AAD #MDE #M365 #AD #PKI #XDR #EntraID Microsoft MVP Tweets and opinions are my own @[email protected]
Morgan @Mp_rodgers1
15K Followers 1K Following @ChelseaFc fan page | Not Affiliated to Morgan Rogers
spencer @techspence
19K Followers 3K Following 🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV
OpenAI @OpenAI
5.5M Followers 4 Following OpenAI’s mission is to ensure that artificial general intelligence benefits all of humanity. We’re hiring: https://t.co/dJGr6LgzPA
hasherezade @hasherezade
92K Followers 982 Following Programmer, #malware analyst. Author of #PEbear, #PEsieve, #TinyTracer. Private account. All opinions expressed here are mine only (not of my employer etc)
Merill Fernando @merill
22K Followers 4K Following Ex-Microsoft Entra PM Building → https://t.co/WIylWUGiwc • https://t.co/QbUp63ffXf 📰 Newsletter→ https://t.co/tPzAEl0Zuq & https://t.co/894nfObWuU 🎙️ Podcast→ https://t.co/TBlNKTzn8t
C:\hristina @divinetechygirl
23K Followers 7K Following Information Security Leader & Published Author • Leading InfoSec & Cyber @ 🏈 • Love a fitted but I don’t 🧢
Nasreddine Benchercha... @nas_bench
12K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
mgeeky | Mariusz Bana... @mariuszbit
15K Followers 1K Following 🔴 Offensive Security Developer @ Outflank, Red Team operator, ex-AV dev, ex- malware researcher 🫖 Green tea lover
Jonny Johnson @JonnyJohnson_
9K Followers 455 Following Windows Internals & Telemetry Research Sr. Manager @btphantomlabs Host: @ThePayloadPod Blog: https://t.co/MnE9BCsky2 Github: https://t.co/v7hSLq66o1
Dr. Nestori Syynimaa @DrAzureAD
21K Followers 2K Following Principal Identity Security Researcher at Microsoft. Ex-Secureworks. (MSc, MEng, PhD, CITP, CCSK). And yes, opinions are my own ;)
Fletcher Davis @gymR4T
946 Followers 1K Following founder | finding signal in the noise | former @mandiant @crowdstrike @beyondtrust
Florian Hansemann @CyberWarship
90K Followers 46 Following Father, Founder @HanseSecure, Pentesting, Student, ExploitDev, Redteaming, InfoSec & CyberCyber; -- Mastodon: https://t.co/KFSKYUN98M
CCob🏴�... @_EthicalChaos_
10K Followers 437 Following Ceri Coburn: Hacker | R̷u̷n̷n̷e̷r̷ DIYer| Vizsla Fanboy and a Little Welsh Bull apparently 🏴 Author of poorly coded tools: https://t.co/P6tT2qQksC
Cn33liz @Cneelis
13K Followers 598 Following Red teamer @ Outflank. Passionate about networking and cybersecurity | father of two superheroes.
Eric Capuano - Bsky: ... @eric_capuano
11K Followers 3K Following Co-Founder @recon_infosec | SANS DFIR Instructor | IANS Faculty | https://t.co/yUXCSu2Yso | ⬡ ❤ @shortxstack
GrandBridge Energy @GrandBridgeNRG
3K Followers 304 Following Welcome to GrandBridge Energy. Follow us for outage updates, energy-savings & safety tips. M-F 8:30-4:30 excluding holidays.
W3BSTOCK @W3BSTOCK
3K Followers 2K Following A decentralized music and arts collective powering the next generation of the live entertainment industry | NFTs Minting Now | https://t.co/Ju9bgqxntL ☮ ❤ 🎵
n00py @n00py1
14K Followers 967 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
claude babysitter @InfoSystir
27K Followers 3K Following Cybersecurity Product Leader @Blumira | I help MSPs scale secure services with XDR/SIEM. | Author https://t.co/awB56EotkR, CEO @hackershealth, @brakesec cohost
Render Man @ihackedwhat
9K Followers 293 Following I hack, I think, I question, I offend. Follow @internetofdongs for my other project and @murdoch_monkey for lulz. https://t.co/7BVh73fARQ
OrdinalExport @OrdinalExport
12K Followers 602 Following
Jeff Bezos @JeffBezos
10.3M Followers 630 Following Six thousand years ago, someone invented the plow, and we all got wealthier. A gentle reminder that all civilizational wealth is driven by invention.
meg west @cybersecmeg
157K Followers 926 Following Tweets about #dogs & travel & fitness & cybersecurity, oh my! Opinions are my own. 📧: [email protected]
/r/netsec @_r_netsec
34K Followers 0 Following Follow for new posts submitted to the netsec subreddit. Unofficial.
Grzegorz Tworek @0gtweet
39K Followers 2K Following My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-
shenetworks @shenetworks
75K Followers 891 Following a menace • hacker • shenetworks @ TikTok & YouTube & Twitch.
cts🌸 @gf_256
69K Followers 1K Following founder and hacker @zellic_io @v12sec @pb_ctf yt https://t.co/nlNai6iiMP
𝗛𝟯𝗞𝗧l𝗖 @H3KTlC
43K Followers 2K Following #infosec engineer | all things gaming | void hunter | will shitpost | i like to lift weights & play piano | los angeleno currently in twin cities | fight on✌️
Oddvar Moe @Oddvarmoe
19K Followers 1K Following Red Teamer @TrustedSec | Former MVP | Speaker | Security Researcher | Blogger | Total n00b & always learning | UNC1194 | Tinkerer | Gamer I try to inspire!
Jason Lang @curi0usJack
16K Followers 207 Following @TrustedSec Red Team lead | Hi-Fidelity trolling | Liberty/Privacy Enthusiast | Linux | Putting the "no" in nano | Avatar: https://t.co/3XHmKR8nCk
Chris Thompson @retBandit
7K Followers 927 Following CEO @ RemoteThreat & Founder of Offensive AI Con | Former Head of X-Force Adversary Services | Black Hat Review Board | inveni et usurpa
Processica @processica
5K Followers 594 Following Embracing change, leading the future. Follow us for updates, insights, and the magic of #GenerativeAI-drive technology. #FutureOfTech #AIForGood #InnovationHub
Jack Halon @jack_halon
5K Followers 403 Following Red Team and Offensive R&D at @CrowdStrike | Powered by ☕🍻🍩
smelly_vx @smelly_vx
7K Followers 21 Following
el_d33 @el_d33
1K Followers 679 Following Pentester, Polymath, EMET fanboy, well informed layman, reluctant cyborg & Pastafarian CryptoGeek @[email protected]
Brantford Power @BrantfordPower
2K Followers 135 Following Brantford Power and Energy+ have merged to form GrandBridge Energy. Follow us @GrandbridgeNRG for power outage information and safety and energy-saving tips.
Alex Kozlov @b4cktr4ck2
356 Followers 295 Following Physical Security/Red Team/Car Hacking/Hardware Hacking enthusiast. Adversarial Engineer @Lares_. OSCP/OSEP.You might like
