Marcus @MarcusDevPlus

Security, Coding, Debugging and what's in between 🎩 #SecDevOps #AppSec #InfoSec Sydney, New South Wales Joined March 2018

Tweets

140
Followers

38
Following

355
Likes

135

Jerry Gamblin @JGamblin

4 years ago

Current CVE-2021-1675 remediation advice:

12 185 889 0 12

Download Image

Stan Hegt @StanHacked

4 years ago

Making sense of #PrintNightmare. A flowchart to help understand exploitation of CVE-2021-34527. Special thanks to @tiraniddo, @dez_, @gentilkiwi and @_f0rgetting_ for their test input and insights.

16 516 1K 0 144

Download Image

Marcus @MarcusDevPlus

5 years ago

Javascript programmers should not call themselves Software Engineers... they only write scripts 🪠🌽

0 0 0 0 0

Samir @SBousseaden

5 years ago

nice trick to avoid suspicious powershell command line

5 147 599 0 102

Download Image

Applying Code @applyingcode

5 years ago

Due to issues with @gumroad and their slow support, I will push the updates manually to all clients

1 1 1 0 0

marc hoffman de garcía @dwarfland

5 years ago

@MarcusDevPlus Best place is to start at docs.elementscompiler.com. And also remobjects.com/tv. Happy to help here or in talk.remobjects.com if you have more questions!

0 2 2 0 0

gabsmashh @gabsmashh

6 years ago

I can't stop laughing at this.

9 4 68 0 0

Download Image

Jason Lang @curi0usJack

6 years ago

Time breakdown of a modern red team engagement. 😁

38 206 609 0 43

Download Image

Niah Text Filter is an extension for #VisualStudio that filters and organizes your debug trace output, build output, and find-in-files results. Maintain organized histories of debug sessions, builds, and search results. Find out more at niahtextfilter.com. #coding

0 4 10 0 1

Download Gif

Leon Bambrick @secretGeek

6 years ago

Argh, CSS.... Just use a table!

23 374 2K 0 17

Download Image

Malware Unicorn @malwareunicorn

6 years ago

Here is an accurate depiction of red teaming. Happy Friday.

38 110 911 0 5

Download Gif

Roberto Rodriguez 🇵🇪 @Cyb3rWard0g

6 years ago

Huge revamp of the @HunterPlaybook project w/ @ProjectJupyter Notebooks, Mordor 👿datasets for analytics validation, interactive queries & output made available to the whole 🌎 through @mybinderteam #ThreatHunting @ApacheSpark @Cyb3rPandaH @MITREattack github.com/Cyb3rWard0g/Th…

2 105 247 0 31

Download Image

Marcus @MarcusDevPlus

6 years ago

I do set traps for recruiters to see if they actually hit on any (LinkedIn, website and GitHub)...they hit on nothing, yet they respond back with "we fully assessed your profile" 🙄

0 0 0 0 0

Marina Simakov @simakov_marina

6 years ago

We discovered an issue with ADFS which allows brute-forcing all domain accounts from the external network, while bypassing the extranet lockout policy. This can easily lead to account compromise / massive accounts lockout. @YaronZi @eyal_karni blog.preempt.com/security-advis…

6 272 433 0 56

scriptjunkie (Matt) @scriptjunkie1

6 years ago

Trying to get Chrome users to run executable files? Send them benign phishing links to the domain a few days ahead of time. Then send them to a landing page on the same domain where they click to start the download. No more angry red "harm your computer" warnings.

11 201 482 0 42

Download Image

Florian Roth ⚡️ @cyb3rops

6 years ago

Tools I recommend to Windows users - reply with your secret tip / tool Setup: Ninite ninite.com Personal FW: GlassWire @GlassWire glasswire.com Anti-Spy: ShutUp 10 @OOSoftware oo-software.com/en/shutup10

57 595 2K 0 536

Download Image

Philip Martin @SecurityGuyPhil

6 years ago

1/ A little more context on the Firefox 0-day reports. On Monday, Coinbase detected & blocked an attempt by an attacker to leverage the reported 0-day, along with a separate 0-day firefox sandbox escape, to target Coinbase employees.

15 354 846 0 45

Daniel Miller ✝ @bonsaiviking

6 years ago

Npcap 0.996 released. Fixes the "crash when upgrading" issue that some users were experiencing. github.com/nmap/npcap/rel…

1 8 14 0 0

Samir @SBousseaden

6 years ago

@nader_shalabi Awsome work as usual! I like the "light blue color"squares, it's P in TTP (I guess), lot of people misunderstand coverage of a MITRE Technique (i.e. simply by having schtask /create under the loop they think it's over, no that's just 1 of many Technique's Procedures), well done!

0 2 3 0 0

Ariel Herbert-Voss @adversariel

6 years ago

Some news: I’m writing a book for @nostarch titled “The Machine Learning Red Team Manual”. My aim is to provide a practical guide for anyone interested in adversarial ML and red teaming as it relates to in-production ML systems. A short thread on why this project matters: