Justin Boots @validatedinput

Red Teaming | Street/Race Cars | Running Colorado Joined September 2014

Tweets

142
Followers

104
Following

469
Likes

639

Justin Boots @validatedinput

2 years ago

@bordeauxyt Go Sun Devils!

0 0 0 11 0

View Details

Prelude (Origin Technology) @preludeorg

4 years ago

Looking for IT folk w/no #cybersecurity experience but who'd love to develop the skills. We have an apprentice training program to teach the ropes. few hrs/week. free. preferably actively in IT. check prelude.org/training or msg [email protected] if interested.

2 13 21 0 9

View Details

Cedric Owens @cedowens

4 years ago

My latest blog post on how in memory JXA exec, dylib exec, keylogging, and other techniques look through the lens of Apple’s ESF 🔎: cedowens.medium.com/taking-esf-for…

3 35 89 0 14

View Details

Justin Bui @slyd0g

5 years ago

Took some time recently to dive into in-memory Mach-O execution on macOS. I dig into the API calls necessary to perform reflective code loading, present my Swift implementation, cover nuances on Big Sur vs Monterey, and how to detect it on Monterey! slyd0g.medium.com/understanding-…

9 55 152 0 30

View Details

Wojciech Reguła @_r3ggi

5 years ago

Read my new #macOSRedTeamingTricks post and forget about problems with the TCC. ☠️ wojciechregula.blog/post/macos-red…

4 34 118 0 22

View Details

Leo Pitt @_D00mfist

5 years ago

This post covers abusing the macOS platform binary tclsh for dylib injection. Additionally, it covers artifacts this method creates. posts.specterops.io/dylib-loads-th…

5 35 78 0 14

View Details

Patrick Wardle @patrickwardle

5 years ago

🍎👾 Just published my annual "Mac Malware of the Year" report, for 2021: objective-see.com/blog/blog_0x6B… An in-depth technical analysis of the year's new Mac malware, covering each: 💉 Infection vector 💾 Persistence mechanism 🛰 Payload and capabilities + samples for download! 🦠

4 235 599 0 148

View Details

Microsoft Threat Intelligence @MsftSecIntel

5 years ago

We recently discovered the latest variant of a Mac malware tracked as UpdateAgent (aka WizardUpdate) with new persistence and evasion tactics, the latest in a series of upgrades over the past year. Given its history, this Trojan will likely continue to grow in sophistication.

5 136 316 0 35

View Details

Csaba Fitzl @theevilbit

5 years ago

Updated my "Getting started in macOS security" guide with trainings and a book. theevilbit.github.io/posts/getting_…

2 67 208 0 47

View Details

Csaba Fitzl @theevilbit

5 years ago

📢 It's out!!!! 🎉🥳🍾 Our brand-new "macOS Control Bypasses" course. ✅macOS internals ✅Shellcoding ✅Dylib & Mach Injection ✅Hooking ✅XPC exploitation ✅Sandbox escapes ✅Attacking TCC ✅Symlink attacks ✅Kernel code execution ✅macOS Pentesting offensive-security.com/exp312-osmr/

20 107 417 0 72

View Details

We Hack Health @wehackhealth

5 years ago

This Monday marks @HackingDave 1 year coaching anniversary. If we can reach 1000 followers by then I am sure we can do a special, celebratory Q&A episode. So please share, retweet and tell your friends #wehackhealth

1 8 18 0 1

View Details

Runa Sandvik @runasand

5 years ago

In March 2017, Wikileaks published documents detailing the CIA's spying operations and hacking tools. I decided to dig into Development Tradecraft DOs and DON'Ts to see how the guidance changed over time. Here's the end result. 👀 #Vault7 docs.google.com/spreadsheets/d…

3 48 157 0 55

View Details

Luke Roberts @rookuu_

5 years ago

Last one for today. @_calumhall has built a Mythic C2 server that imitates a Jamf server. So you can replace the server on the target device and gain complete control. Using an agent that is trusted, all powerful and already running on the device. github.com/MythicAgents/t…

3 26 73 0 2

View Details

gorelics @gorelics

5 years ago

Nice article: macOS TCC.db Internals rainforest.engineering/2021-02-09-mac…

1 15 55 0 17

View Details

mayllart @ThiagoMayllart

5 years ago

By the way, if you want to implement this profile in your custom agent, check this post where I describe how the communication works in Apollo as an example. medium.com/@thiagomayllar…

0 2 3 0 0

View Details

Justin Boots @validatedinput

5 years ago

@FrankMcG @sogonsec Looks like fun! I had this playing in my head while watching it: m.youtube.com/watch?v=iaJUW5…

0 0 1 0 0

View Details

Justin Boots @validatedinput

5 years ago

@_th3y @FrankMcG Agreed that the T51R has such an iconic sound… Now there are multiple companies that will mod your compressor housing to make it sound similar. Also love the HKS SSQV - had two on one of my old Supras.

1 0 2 0 0

View Details

Justin Elze @HackingLZ

5 years ago

This was circling around last week but seems under appreciated mdpi.com/2624-800X/1/3/…

6 40 96 0 28

View Details

Cody Thomas @its_a_feature_

5 years ago

C2 Frameworks can and should do more than just issue orders to agents; they should listen to and adapt to what agents report back. The Mythic 2.2.7 update brings this collaboration front and center for everybody: posts.specterops.io/learning-from-…