George Noseevich @webpentest

Joined July 2012

Tweets

707
Followers

745
Following

102
Likes

17

George Noseevich @webpentest

11 months ago

Hey @h2hconference, on your CFP page you have 2 deadlines - Oct 1 for proposals and Oct 17 for slides. Does that mean that you expect both proposals and slides before you make the decision about acceptance? Or only those who've received an acceptance note need to submit slides?

2 0 2 232 0

Xappy @theXappy

3 years ago

Thing I learned today: Decrypting arbitrary TLS sessions on Windows (for code utilizing schannel): b.poc.fun/decrypting-sch… Great explanation, and very easy to use code, by @webpentest

0 1 1 181 0

Download Image

Bushwhackers @BushwhackersCTF

4 years ago

Thanks @hackerdom, @HITBSecConf , @disruptad, @crowdfense, and all competitors for another great AD CTF!

1 9 67 0 1

Download Image

Bushwhackers @BushwhackersCTF

4 years ago

Thanks to @hackerdom and all participating teams for #ructf! It has been fun, as always.

0 2 6 0 0

Joel Eriksson @OwariDa

5 years ago

0 2 5 0 0

Download Image

George Noseevich @webpentest

5 years ago

Part 2 of my schannel research is out: b.poc.fun/decrypting-sch…. It is much shorter and focuses mainly on session resumption. As always, feedback is very welcome, especially RE TLS1.3 resumption in schannel.

1 2 5 0 0

George Noseevich @webpentest

5 years ago

After doing various tests I'm now reasonably sure that current experimental TLS1.3 implementation in Schannel lacks support for any kind of session resumption.If TLS1.3 is enabled, the client doesn't even advertise session_ticket support in ClientHello.

0 0 2 0 0

George Noseevich @webpentest

5 years ago

I now officially have a practical case where a DROP firewall rule helped me achieve my goal, and a REJECT rule instead would have prevented the attack from working. Funny )