Strychnin3 @n_llh_man

Hacker | Social Engineer | Technologist | Threat Intelligence | Cyber Security Joined June 2010

Tweets

778
Followers

155
Following

1K
Likes

2K

dbrand @dbrand

5 years ago

how it started: how it's going:

588 2K 34K 0 144

Download Image

RedDrip Team @RedDrip7

5 years ago

#UNC2452 #Dark Halo The most detailed analysis report of the #SolarWinds Supply Chain Attacks so far, produced by Qi AnXin CERT: translate.google.com/translate?hl=&…

3 60 124 0 25

Download Image

Facebook’s @ngleicher was right about linking #APT32 to CyberOne and here is why: As per Group-IB #ThreatIntelligence & #Attribution the domain cbo[.]group had an IP 45[.]61[.]136[.]214 in the A-record. On this IP address, we detected a unique SSH 4b390f0b7125c0d01fe938eb57d24051

2 34 81 0 14

Download Image

Strychnin3 @n_llh_man

5 years ago

#NewProfilePic

0 0 0 0 0

Download Image

Missile Defense Advocacy Alliance @MissileDefAdv

5 years ago

Newly released satellite images show Russia used dolphins of war in Syria. Is the future of arms-control in limiting the number of war dolphins countries can have? Do dolphins even have arms? Read more: ow.ly/fij350AEflM

4 26 49 0 5

Download Image

Beebom @beebomco

5 years ago

There is an imminent threat of a massive phishing attack in India by Lazarus, the North Korean hacking group, starting today. The hackers will claim free COVID-19 testing for all residence of Delhi, Mumbai, Hyderabad, Chennai, and Ahmedabad in return for their personal info.

14 298 1K 0 7

Download Image

Strychnin3 @n_llh_man

5 years ago

Peter McKinnon Lightroom Presets cgispread.com/?p=17560

0 0 0 0 0

Strychnin3 @n_llh_man

5 years ago

Eid Mubarak @All!!

0 0 0 0 0

Download Image

Pedro Ribeiro @pedrib1337

5 years ago

I am disclosing four 0day for IBM Data Risk Manager, an ENTERPRISE SECURITY APPLIANCE @IBMSecurity refused to accept @certcc's disclosure and told them to fleck off! 🤣 Advisory and exploits here, have fun: github.com/pedrib/PoC/blo…

16 385 686 0 56

Saudi Incident Responders @SaudiDFIR

5 years ago

In case you have missed this beautiful sub-technique introduced by @MITREattack attack.mitre.org/beta/

ATT&CK @MITREattack

5 years ago

In case you have missed this beautiful sub-technique introduced by @MITREattack attack.mitre.org/beta/ https://t.co/VuwTjZ60cC

23 310 487 0 35

Download Gif

0 13 31 0 9

Download Image

Chris Hayes @chrislhayes

6 years ago

From an ER doc in New York City on shift today: “Today. Is. F’ing. Nuts. It kinda blew up here. And sending home lots of people undoubtedly positive because we don’t test on discharged patients. This has been spreading a long time.”

453 11K 33K 0 266

Exabeam @exabeam

6 years ago

We recently learned and are saddened to share that two of our employees have tested positive for Coronavirus (COVID-19). Please be vigilant in monitoring yourself for symptoms and following guidelines to prevent possible infection. Our thoughts are with our colleagues.

19 133 183 0 5

Download Image

emma mitchell @EmmaxMitchell

6 years ago

my favorite teacher mr. payne got his shoes stolen, so me and a few classmates put together our money and bought him a brand new pair! #bps #bekind @RippeJeff

355 3K 11K 0 271

Download Video

thaddeus e. grugq @thegrugq

6 years ago

I think I’m gonna add “former 8200” to my resume so I can get a C level job at a cyber security company. What are they going to do, call 8200 and ask for a reference??

27 46 452 0 1

Gulf News @gulf_news

6 years ago

Coronavirus: First case confirmed in UAE gn24.ae/9533884eabe3000

4 72 43 0 1

Sandor Nemes @sandornemes

6 years ago

New Trickbot module 'ADll' dumps Active Directory database files (ntds.dit & ntds.jfm) and registry hives using the 'ntdsutil' and 'reg save' commands: virustotal.com/gui/file/28e2c… #trickbot

0 60 94 0 7

Salvador Mendoza @Netxing

6 years ago

"May you explain how to bypass the payment limit in a NFC transaction using CVM MiTM attack?" Change the verification method 1. Find the terminal CVM in PDOL response & change 1 to 0, byte 2 bit 7. 2. Find card response of previous command(9f6c) & change it to 1, byte 2, bit 8.

2 20 63 0 9

Download Image

Hexadecim8 @hexadecim8

6 years ago

what are your favorite server naming conventions? I use poisons and explosives a *lot*.

201 42 356 0 18

Tyler Fornes @tfornez

6 years ago

#blueteam #SOC find of the day -> domain fronting C2 through paypal[.]com (1/3) @expel_io Analyst methodology (using EDR): 1. vbs script executed via cscript.exe 2. netconns from cscript.exe observed to paypal[.]com (scratches head)