ElColmo @ElColmo1

Motorbikes, quadbikes, chainsaws, airguns, hacking, in no particular order. Pro-pupper. Ambivalent about cats. Dublin Joined May 2012

Tweets

4K
Followers

46
Following

128
Likes

189

Simon Bennetts ⚡🇺🇦 @psiinon

4 months ago

Pro tip - if an article/post mentions "OWASP ZAP" then you know its out of date or badly researched. @zaproxy has not been an @owasp project for nearly 2 years!

4 9 44 5K 3

The Debian Project @debian

4 years ago

Debian 11 uses the new "yescrypt" password hashing format by default. For more information about it see "man 5 crypt" #NewInDebianBullseye #ReleasingDebianBullseye dlvr.it/S5dGzm

2 39 101 0 2

Thomas Graf 🐝 @tgraf__

4 years ago

Learning Go as a C programmer

7 49 319 0 14

Download Video

Sarah McInerney @SarahAMcInerney

4 years ago

"While I am honoured to have been appointed by the Government to be the Special Envoy on Freedom of Opinion and Expression, it is clear that criticism of the appointment process has impacted the legitimacy of the role itself." - Zappone

19 14 92 0 1

Matt Soseman @SosemanMatt

4 years ago

The Incident Response Hierarchy of Needs by @MSwannMSFT github.com/swannman/ircap…

1 167 526 0 93

Download Image

Rémi GASCOU (Podalirius) @podalirius_

4 years ago

[thread] Did you know that ssh tries to authenticate with stored keys BEFORE the key specified with -i in the command line ? I just noticed this, the hard way 😐. Let's imagine you have more than 5 keys loaded in your ssh agent. When authenticating to a remote server, you get:

7 55 171 0 22

Download Image

Ptrace Security GmbH @ptracesecurity

4 years ago

Upload and download small files with CertReq.exe dtm.uk/certreq/ #Pentesting #CyberSecurity #Infosec

0 15 18 0 1

Download Image

Universal Curiosity @UniverCurious

4 years ago

Carl Sagan shows how ancient Greeks knew the earth was round using only sticks, eyes, feet, and brains nearly 2,200 years ago. RT via @saganism_

64 1K 5K 0 281

Download Video

Paul Seekamp @nullenc0de

4 years ago

Gained access to a hash but can't crack the password? Can see they have juicy info in a share? Pass the Hash with smbclient. smbclient '//PC.example.local/C$' -U Administrator --pw-nt-hash blahblahblah -W example.local ls - lists files cd - directories mget - download file(s)

0 37 166 0 46

Ryan @Haus3c

4 years ago

New blog post on Cobalt Strike and some of the events/logs that built-in commands generate. This isn't meant to be a 'tradecraft 101' for CS, it's meant to show (especially new CS users) what some of the built-in commands look like behind the scenes.| hausec.com/2021/07/26/cob…

7 141 307 0 56

Johnny Xmas 🔜 #ManuSec @J0hnnyXm4s

4 years ago

@brysonbort

6 13 100 0 1

Download Image

ElColmo @ElColmo1

4 years ago

A task for Monday!! therecord.media/new-petitpotam…

0 0 0 0 0

Louis Nyffenegger @snyff

4 years ago

Get the latest Windows security enhancements on Linux with this one simple trick: # chmod 755 /etc/shadow

21 245 1K 0 48

John Lambert @JohnLaTwC

4 years ago

#HuntingTipOfTheDay The NTDSUtil command can be used to make a backup copy of the AD database. When looking for attacker usage, be aware of the long and short form of the parameters. 📎adsecurity.org/?p=2398 by @PyroTek3 📎docs.microsoft.com/en-us/previous…

2 74 161 0 39

Download Image

Florian Hansemann @CyberWarship

4 years ago

Apache Tomcat RCE by deserialization (CVE-2020-9484) - write-up and exploit ...tomcat 7, 8, 9 and 10 released before April 2020. This most certainly means you have to update your instance of tomcat in order not to be vulnerable #infosec #redteam #pentest redtimmy.com/apache-tomcat-…

0 117 248 0 31

Download Image

Richard Boyd Barrett @RBoydBarrett

4 years ago

FG/FF/Greens scandalously vote in a tax incentive for cuckoo & vulture funds who buy up whole estates if they lease them back to local authorities. Govt claim we need these funds to deliver social housing is utterly dishonest. The funds are worsening the housing crisis @pb4p