@[email protected] @_Newline_

Tweets

84
Followers

83
Following

573
Likes

277

@[email protected] @_Newline_

3 years ago

Daily reminder, always check for the dumb configuration issues. Had a client that had authenticated SFTP access for their clients but they forgot to disable SSH Shell access... 🤦‍♂️ Sometimes critical risk findings can be so disappointingly simple

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Had a great time at @MCH2022Camp ! Great talks all around, the one that stands out the most is the great talk about MacOs zero days @Turmio_

0 0 1 0 0

@[email protected] @_Newline_

3 years ago

Can we all just agree that Word is the most frustrating piece of desktop software on the planet?

0 0 0 0 0

Madame_https @madame_https

3 years ago

Delighted to announce the launch of my blog dedicated to #OSINT : osintery.com ✨ Many articles will be published there about techniques & investigations. The next article to be published there will focus on the Dark Web. #Darkweb #Investigation #Tor #Blog #Infosec

18 111 408 0 92

Download Image

@[email protected] @_Newline_

3 years ago

Which layer of hell is reserved for the cardinal sin of vendor lock-in?

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Being social is hard

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Just found out about Frida by @oleavr ! What an amazing reversing and debugging tool! I highly recommend anyone unknown with this tool to check it out. It works on binaries for basically all platforms!

0 0 1 0 0

Download Gif

@[email protected] @_Newline_

3 years ago

Always check SSH for weak credentials! Recently found several systems on an assignment with open SSH ports that accepted username 'root' with no password! It's easy to gloss over SSH ports as secure, but misconfigurations such as these can be found anywhere

0 0 0 0 0

[email protected] @0xdea

3 years ago

My unsolicited advice to young hackers: don’t get stuck for too long with CTFs, don’t be afraid to move to real-world stuff. It’s more fulfilling and interesting than you think. Chances are that real-world challenges are even easier than CTFs (for some definitions of “easier”).

12 48 324 0 23

DebugPrivilege @DebugPrivilege

3 years ago

Great thing that I recommend folks in InfoSec doing is to learn from different roles. Whether it's IR, Red Teaming, SOC, Threat Hunting, etc. Being able to learn from different roles will help you gather different perspectives and come up with new ideas.

4 27 141 0 10

@[email protected] @_Newline_

3 years ago

Does anyone recognize that getting complements for your work only makes you more insecure? Like, now I'll surely disappoint once I mess something up 😅

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Note keeping is an undervalued skill. What are your tips and tricks for keeping well organized notes? #infosecurity

0 0 0 0 0

ᴀʙᴅᴇʟʀʜᴍᴀɴ ᴢᴀʏᴇᴅ @aufzayed

3 years ago

Exploiting remote code execution within VirusTotal platform in order to gain access to its various scans capabilities. #infosec #cybersecurity #BugBounty 🔗cysrc.com/blog/virus-tot…

5 54 185 0 34

Download Image

@[email protected] @_Newline_

3 years ago

Making your own #pentesting distro is great fun! I'm currently baking my own based on Endeavour OS using Blackarch repos and PTF for tool management. If this works out, I'm done using Kali!

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Newline now also in #Mastodon flavor at infosec.exchange/@newline ! With a 100% less billionaire platform ownership 😉

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

Nothing as difficult as introducing a new reporting tool in an old #Pentesting company.

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

And just like that a billionaire buys a massive social platform. I see nothing wrong with this.

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

I have a old router lying around, any suggestions for home security projects? 🤔

0 0 0 0 0

@[email protected] @_Newline_

3 years ago

If you ever find yourself being able to leak ntlmv2 hashes through a SSRF like vulnerability, consider relaying it with impackts ntlmrelayx! This set up alone granted me about 15 SYSTEM shells in a recent assignment 😁 github.com/SecureAuthCorp…