heartburn @_inspir3d

OSCP, OSWE, OSEP, PNPT, CRTO blah BSc/MSc Cardiff University Trance/Techno lover, takeaway enthusiast, sunset chaser and wannabe red teamer. heartburn.dev Joined November 2020

Tweets

117
Followers

241
Following

251
Likes

365

TrustFoundry @Trust_Foundry

4 months ago

🚀 New Research Drop + Free Tool Release! 🚀 Do you use PDQ deploy/inventory? Did you know that misconfigured PDQ environments can often lead to serious data exposure? Our very own @_inspir3d has published research and a tool here: trustfoundry.net/2025/04/30/pen…

1 9 7 1K 4

daniel @hackermondev

11 months ago

1 Bug, $50K+ in bounties: how Zendesk left a backdoor in hundreds of companies #bugbountytips gist.github.com/hackermondev/6…

76 341 1K 2.0M 636

Dirk-jan @_dirkjan

2 years ago

New blog: Phishing for Primary Refresh Tokens and Windows Hello keys. This blog describes how we can use device code phishing to obtain PRTs and in some cases even add backdoor Windows Hello keys 🤯 dirkjanm.io/phishing-for-m…

8 283 596 131K 209

Pen Test Partners @PenTestPartners

2 years ago

Following his #DEFCON31 #DC31 talk forum.defcon.org/node/245708 our @_EthicalChaos_ has written a follow up including further research on abusing mixed vendor Kerberos stacks, so that any user can be spoofed against any service hosted over GSSAPI pentestpartners.com/security-blog/…

1 16 41 20K 13

Download Image

heartburn @_inspir3d

2 years ago

Finally got around to finishing my PoC for exploiting the new DA -> EA primitive via ADCS shared by the good folks at @SpecterOps and built upon by @Crypt32. First time I've written anything other than a ping sweeper in PowerShell! github.com/heartburn-dev/…

0 0 2 195 0

Caitlin Condon @catc0n

2 years ago

Not panicking about the #Fortinet RCE until we know what the vuln looks like. If it's another heap-based bug, it's APT bait but probably won't get exploited at scale. If it's a command injection (the decade's most popular vuln kid) or something, that's another story.

5 5 30 10K 1

heartburn @_inspir3d

3 years ago

starting crto2 from rasta and immediately refactoring all your OSEP code to use d/invoke instead ⏩⏩

0 0 8 452 0

heartburn @_inspir3d

3 years ago

Did a little writeup for Hathor on @hackthebox_eu. Check it out 😃 heartburn.dev/hack-the-box-w…

2 3 10 0 0

SEKTOR7 Institute @SEKTOR7net

3 years ago

SEKTOR7 is glad to support RTV @ D3FC0N this year again. And this brings an extra discount! Use the coupon below to get 25% off on any of the courses. No much time left, it ends on Sunday. Coupon: D3FC0N-RTV-TW25 Have a great con, y'all! #redteam #onlinelearning #RTO

RedTeamVillage @RedTeamVillage_

3 years ago

2 11 61 0 2

Download Image

0 8 24 0 3

heartburn @_inspir3d

3 years ago

Worth a read. Good insight into the less technical aspects of red teaming, but no doubt, the more important aspects! Nice work @joevest and James Tubberville, very engaging and easy to read. Thanks!

2 2 34 0 2

Download Image

heartburn @_inspir3d

3 years ago

Tried to recreate @thecybermentor's home Active Directory Lab setup from the Practical Ethical Hacking course using #Azure, #Terraform, and #Ansible. Got there in the end... Just about!🤪 heartburn.dev/automating-the…

0 0 1 0 0

Chetan Nayak (Brute Ratel C4 Author) @NinjaParanoid

3 years ago

Unable to extract credentials via DPAPI or Mimikatz? Don't worry. Microsoft got your back. Just use 'rundll32 keymgr.dll, KRShowKeyMgr' to extract all the stored passwords on the host, be it a target server, FTP or chrome's HTTP creds, microsoft has you covered. #redteam

48 818 3K 0 745

Download Image

SEKTOR7 Institute @SEKTOR7net

4 years ago

Ukraine needs support! SEKTOR7 has already donated to Polish Red Cross, but there's something we can do more. Thus we give out a 50% discount on all our courses and donate all the income to the Polish Red Cross Please share/retweet #StandWithUkraine 🌻 institute.sektor7.net/?coupon=DONATE…

16 182 296 0 25

Andy Robbins @_wald0

4 years ago

The #BloodHoundEnterprise team presents: #BloodHound 4.1! Highlights for this release in this thread 🧵: With this release, we are selling this limited edition BloodHound shirt. All profits from the sales of this shirt will be donated to the @ASPCA: customink.com/fundraising/bl…

4 74 179 0 12

Rasta Mouse @_RastaMouse

4 years ago

A well written review for Red Team Ops by @_inspir3d. Thanks for writing. heartburn.dev/zeropointsecur…

0 6 17 0 4

heartburn @_inspir3d

4 years ago

I recently had the pleasure of taking @zeropointsecltd's Certified Red Team Operator (#CRTO) course, and it didn't disappoint. Oh yeah, I reviewed it on my blog too, so you can get a feel for if it's right for you! Happy #hacking everyone. heartburn.dev/zeropointsecur…