reverend wayne ³³º¹ @tacodestroyer

father. husband. photographer. taco lover. security dude. #SecKC #PancakeCoin Kansas City, MO Joined April 2010

Tweets

5K
Followers

282
Following

1K
Likes

6K

reverend wayne ³³º¹ @tacodestroyer

4 months ago

Be me. Go on vacation for 10 days. Come home to play @CallofDuty. Upgrade to latest version. Instant shadowban. Wtf?

0 0 0 83 0

Justin Elze @HackingLZ

10 months ago

👀

12 25 182 31K 62

Download Image

Oh man, an F-15 pilot friend gave me permission to share this video of him filming his buddy sending it. That maniacal laughter is universal among anyone who has seen this in person, even other fighter pilots. How can I NOT go to the base today to watch this. 🤘😀🤙

48 227 3K 156K 352

Download Video

Florian Roth ⚡️ @cyb3rops

11 months ago

CyberSec Trends Q4/24🔮 ⬆️EDR killers (vulnerable drivers) ⬆️Auxiliary execution files .lnk .msc .rdp ⬆️Abuse of legit remote access tools ⬆️Token/cloud API abuse ⬆️ADCS exploitation ⬆️Fake CAPTCHAs: copy&paste PowerShell ⬆️TA using systems out of EDR scope for persistence

3 118 406 77K 227

Download Image

BallisKit @BallisKit

11 months ago

New ShellcodePack version coming out soon with: - Custom AMSI bypass to weaponize .NET assemblies - Obfuscated Python Shellcode launchers - File timestamp spoofing - Updated EDR bypass profiles #redteam

2 53 294 46K 180

Download Image

nyxgeek @nyxgeek

11 months ago

Did you know that 7z can browse .VHD and .VMDK files? You can open them right up, and even directly browse ntfs filesystems. On a pentest and find a bunch of disk images? Copy the SAM/SECURITY/SYSTEM hives directly from the images, no mounting, copying, or fussing around.

67 428 3K 186K 1K

Download Image

rekdt @rekdt

11 months ago

Please don’t touch that, It’s my emotional support Any Any Any Allow rule

19 102 906 45K 35

Andrew Case @attrc

11 months ago

Our talk from @defcon is now available! In the presented research, we document every EDR bypass technique used in the wild along with how to detect it using new memory forensics techniques and @volatility plugins. Feedback appreciated! youtube.com/watch?v=PmqvBe… #DFIR

5 254 711 84K 524

SuRb0 @surbo

11 months ago

I'm finally going to give the back story of the infamous zWarDial tool along with other security stories at @SAINTCON Tomorrow [Thursday @ 1:30 PM MDT] "The Bug Bounty Battlefield: A Choose Your Own Adventure Story on Why I Stopped Reporting Bugs" #saintcon 1/2

SecKC @sec_kc

6 years ago

8 125 216 0 11

Download Image

1 18 36 4K 4

Lukas Beran @lukasberancz

12 months ago

This is awesome. Our teams have fake tenants as honeypots that look like real ones—they contain realistic-looking data with realistic-looking users. But they’ve taken honeypots to a whole new level. They’re not just waiting for someone to fall into the trap. They actively search…

18 116 998 96K 417

miltinhoc @miltinh0c

12 months ago

Finding Windows Defender Exclusions via MpCmdRun.exe Links in next post!👇

1 41 215 17K 156

Download Image

Tony @TJ_Null

a year ago

A new version of my pentest template will be released later this fall. New tips, techniques, and resources are being added. Most importantly I am moving my notes away from Joplin to Obsidian. Here is a sneak peek of what the new template will look like:

7 25 236 21K 131

Download Image

Cube0x0 @cube0x0

a year ago

Over a year ago, I left my position at WithSecure to start a new journey, create something new, and do my own thing. Today, I'm excited to publicly announce what I've been working on all this time. Introducing 0xC2, a cross-platform C2 framework targeting Windows, Linux, and…

60 249 1K 116K 517

Download Image

Josh Stroschein | The Cyber Yeti @jstrosch

a year ago

Great intro to #reverse #engineering blog by @0x6D6172636F along with some amazing #ascii art! x86re.com

15 453 3K 3.8M 3K

Download Image

Ian Ellis @ianellisjones

a year ago

Meet MV Ocean Trader — a one-of-a-kind shadowy Special Operations mothership literally designed to hide in plain sight 👀 Operating AIS dark, under commercial guise & hoisting false flags, it can launch drones, helos, boats, & SEALS. Much is classified, but here’s what we know:

58 493 5K 892K 2K

Download Image

freakyclown @_Freakyclown_

a year ago

TIL: that intel i3,i5, i7 and i9 processors are all the same, all made the same, on the same wafer. But depending on how many defects (therefore how many sections actually work) they just rename them. So your i3 processor is an i9 with many defects less for an i5 and less for i7

207 445 12K 1.1M 2K

Ivan Kwiatkowski @JusticeRage

a year ago

10: Whatever damages incur from your use of the product, they're on you. Even if CrowdStrike could have prevented it. Never use the product in sensitive environments, such as aircraft navigation systems (you can't make this stuff up), nuclear facilities, etc.

10 44 274 27K 24

Download Image

Tim Medin @timmedin.bsky.social 🇺🇦 @TimMedin

a year ago

My team at Red Siege has written, instructed and developed some awesome training over the last year with zero involvement from me. Unfortunately, even though they don't work for SANS and I have had zero input or part in their courses, SANS has told me that unless they stop…

100 111 986 305K 158

Matt Zorich @reprise_99

a year ago

We often argue about which log source is the most important, how about which events? What are your top 5 and why? 4624 - need those logons 4688 - process creation of course 1006 - Defender AV detection 4104 - PowerShell script block logging 4697 - service installation events