Anthony Rhodes @fork_while_fork

Researcher, Red Teamer, Developer. Opinions are my own Joined December 2018

Tweets

96
Followers

219
Following

174
Likes

251

OWASP Amass @owaspamass

6 years ago

Version v3.3.0 of #OWASP Amass has been released! The first version of the new data model has been implemented. Future releases will support saving findings into Gremlin (@apachetinkerpop) and @neo4j #GraphDatabase systems #osint #recon #opensource #assetdiscovery #bugbounty

3 58 132 0 11

OWASP Amass @owaspamass

6 years ago

Version v3.2.0 of #OWASP Amass has been released! The tool has been refactored quite a bit and the default settings run the enumerations much faster. Use the '-max-dns-queries' flag if you wish to slow things down #osint #recon #infosec #opensource #assetdiscovery #bugbounty

3 73 163 0 13

No Starch Press @nostarch

6 years ago

Please share this as widely as possible. Why should we have to police Amazon? This problem is ongoing since 2017. These counterfeits are shipped and sold by AMAZON, NOT A THIRD PARTY. This is not Marketplace.

Bill Pollock -- [email protected] @billpollock

6 years ago

39 506 734 0 14

Download Image

47 1K 2K 0 44

Go @golang

6 years ago

🎉 Go 1.13 RC1 is released! 🏃‍♀️ Run it in dev. Run it in prod. File bugs. 🗒️ Release notes: tip.golang.org/doc/go1.13 ⬇️ Download: golang.org/dl/#go1.13rc1 #golang

10 243 547 0 6

Download Image

Kody @KodyKinzie

6 years ago

One time some tech bros called security on me at a coworking space for having too many network adapters.

28 41 405 0 8

Download Image

Karl (RIP ) @supersat

6 years ago

Next year's floorplan

15 38 152 0 10

Download Image

scriptjunkie (Matt) @scriptjunkie1

6 years ago

Pre-auth RCE on Fortinet and Pulse Secure (prior: Juniper) SSL VPN's by @orange_8361 and @mehqq_ - over 500k such VPN's on the internet. Heap overflow, arbitrary file read, plaintext passwords, magic backdoor, command injection... Defcon slides: media.defcon.org/DEF%20CON%2027…

0 102 219 0 18

Download Image

Nmap Project @nmap

6 years ago

Nmap Defcon release! Enjoy version 7.80: seclists.org/nmap-announce/…

7 247 529 0 19

Petros @pkb1s

6 years ago

As promised during our talk, we have released the user exploitation features for SharpGPOAbuse! @den_n1s @VillageRedTeam #DEFCON27 github.com/mwrlabs/SharpG…

0 137 294 0 33

Dirk-jan @_dirkjan

6 years ago

Thanks all for attending my #DEFCON talk! Humbling to see such a full room even on Sunday. Slides and demo videos are online at the media server. Slides: media.defcon.org/DEF%20CON%2027… Demo vids: media.defcon.org/DEF%20CON%2027…

10 126 338 0 38

Nicolas Grégoire @Agarri_FR

6 years ago

I’m suprised that CVE-2018-13382 (a trivial « backdoor » in Fortigate SSL VPN) didn’t get much attention, even after @orange_8361´s talks in Vegas... blog.orange.tw/2019/08/attack…

5 66 204 0 18

GitHub @github

6 years ago

Ready to start automating your own custom workflows? Sign up for the beta of GitHub Actions with built-in CI/CD today 👇 github.com/features/actio…

40 571 1K 0 35

Download Video

Jake Williams @MalwareJake

6 years ago

Garfield may know lasagna, but does he know the required height of a fence or the appropriate type of fire extinguisher to use for an electrical fire?

7 7 30 0 0

OWASP Amass @owaspamass

6 years ago

The #OWASP #Amass Project shows up on #DarkReading: darkreading.com/application-se…

0 8 7 0 0

Andy Robbins @_wald0

6 years ago

Question: How do I abuse a relationship that #BloodHound is showing me? Answer: Right click the edge and click "Help" for lots of useful info including abuse instructions, opsec considerations, and references.

12 193 554 0 59

Download Video

Jeff Foley @jeff_foley

56 years ago

0 0 0 0 0

OWASP Amass @owaspamass

6 years ago

OWASP Amass v3.0.22 has been released! Amass now supports "hashcat-style" wordlist masks within the #DNS name alteration and brute forcing engines. Use this to perform mask attacks against your target! #osint #recon #redteam #bugbounty #AssetDiscovery github.com/OWASP/Amass

3 52 92 0 6

Jeff Foley @jeff_foley

6 years ago

@owaspamass The implementation of the "hashcat-style" wordlist masks for the Amass name alteration and brute forcing engines was provided by another project contributor. Thank you for this feature @fork_while_fork!