inf0secRabbit @Inf0secRabbit

Threat research @Crowdstrike | Ex-Red Team @Mandiant | Profession is passion :) | Tweets are all mine GitHub.com/inf0secRabbit Ring 0 Joined April 2018

Tweets

1K
Followers

872
Following

296
Likes

6K

Willi Ballenthin @williballenthin

6 days ago

I’ve been discovering Reverse Engineering tools and techniques by following IDA Pro plugin updates, which I publish via RSS. Daily, a script searches GitHub for IDA API names that suggest a project uses IDA. Then it renders recent releases and commits. williballenthin.com/ida/plugins/ac…

2 15 102 7K 54

Download Image

Keanu Nys @RedByte1337

3 weeks ago

Thanks to everyone who joined my DEFCON33 talk!🎉 For those of you who missed it and are interested in seeing how we can extract cleartext credentials and bypass MFA directly from the official Microsoft login page, I just uploaded the recording to YouTube: youtu.be/z6GJqrkL0S0

16 144 537 49K 388

Download Image

Alex Neff @al3x_n3ff

2 months ago

Dumping the NTDS.dit from disk - A new NetExec module💾 Isn't it super annoying when AV blocks your access to the SAM/SYSTEM hives? The new "ntds_dump_raw" module made by @0xcc00 parses the disk image directly, allowing you to extract the NTDS.dit or SAM database🚀

13 169 675 59K 364

Download Image

Makhachev Islam @MAKHACHEVMMA

2 months ago

Congratulations, Dustin. You’re truly one of the greatest to ever step into the cage. It was an honor and a privilege to share it with you

586 9K 193K 7.3M 2K

Download Image

Full Violence ™ @Full_Violence

2 months ago

From the favelas to the world. He was never supposed to make it this far, sick as a kid, counted out always, 10-8 start to his UFC career. Win or lose, his story already inspired millions. We love you, Charles. ❤️

78 1K 14K 385K 293

Download Image

Makhachev Islam @MAKHACHEVMMA

4 months ago

Time to become a double champion #inshaAllah Let’s go

4K 9K 97K 7.0M 1K

ESPN MMA @espnmma

4 months ago

Jose Aldo has announced his retirement from MMA after #UFC315. One of the greatest of all time 👏

289 3K 31K 1.1M 260

Download Image

CrowdStrike @CrowdStrike

6 months ago

x.com/i/article/1898…

1 5 15 3K 1

CrowdStrike @CrowdStrike

8 months ago

📣 Today we are excited to launch #CrowdStrike Insider Risk Services to help organizations anticipate, detect and respond to insider threats. Full details: crwdstr.ke/6014aZPQE

0 3 14 2K 2

Download Video

Makhachev Islam @MAKHACHEVMMA

8 months ago

"What does this title represent? It means you're the best in the world and if you're the best in the world, it doesn't matter who's going to be standing across from you. What do I say? No? NEVER. Let's do this!"

1K 4K 49K 2.8M 870

Download Image

CrowdStrike @CrowdStrike

10 months ago

💡 Today we are unveiling a new China-nexus adversary: LIMINAL PANDA. 👉 Our blog post contains deeper insights into LIMINAL PANDA’s operational profile and key TTPs, as well as guidance for organizations to defend against this sophisticated adversary: crwdstr.ke/6010sUQwM

0 20 59 8K 21

Download Image

Mohit Mishra @chessMan786

10 months ago

x.com/i/article/1858…

1 41 377 39K 573

Alex Ionescu @aionescu

10 months ago

It’s wonderful to see what @XenoKovah and his collaborators have built for the community. I always recommend OST2 for my new hires and other juniors, or just anyone trying to get started on a new topic. The courses are excellent. It’s an honor to sponsor the Windows Security Path

OpenSecurityTraining2 @OpenSecTraining

10 months ago

0 4 27 18K 6

Download Image

0 15 114 16K 35

Download Image

CrowdStrike @CrowdStrike

a year ago

Update: Our preliminary Post Incident Review (PIR) is available at the link below. Details include the incident overview, remediation actions, and preliminary learnings. More to come in our full Root Cause Analysis (RCA). Automated recovery techniques, coupled with strategic…

158 270 674 186K 197

Tavis Ormandy @taviso

a year ago

This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... 🧵1/n

255 3K 16K 3.3M 5K

Download Image

CrowdStrike @CrowdStrike

a year ago

CrowdStrike continues to focus on restoring all systems as soon as possible. Of the approximately 8.5 million Windows devices that were impacted, a significant number are back online and operational. Together with customers, we tested a new technique to accelerate impacted…

261 225 776 217K 107

Sajal Thomas @sajal_thomas

a year ago

Essential reading in light of all the misinformation spreading around here about what went down. Be nice to your sysadmins and IT staff for a while. crowdstrike.com/blog/technical…

1 2 5 527 1

Jonny Johnson @JonnyJohnson_

a year ago

Without further ado - here is EtwInspector! This is a C++ tool to help users interact with ETW providers. This tool supports the enumeration of providers, their events, and capture events. github.com/jsecurity101/E…

Jonny Johnson @JonnyJohnson_

a year ago

9 39 190 73K 71

Download Image

7 126 336 52K 141

Thomas Roccia 🤘 @fr0gger_

a year ago

🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)! I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis…

101 3K 13K 1.1M 7K

Download Image

William R. Messmer @wmessmer

2 years ago

If you've ever wanted to live debug user mode Linux processes (e.g.: in WSL) from WinDbg, with 1.2402.24001.0, you can! Start up a gdbserver in WSL (e.g.: gdbserver localhost:1234 ./vim) and connect to it via WinDbg's "Connect to remote debugger"