Check out my 🪵

When are people going to introduce PCIDSS for ID numbers

Re * noting we have yet to solve the redirection challenge which may need to be file handles.

Re @subtee you may get value exploring this as a generic way to hoover canaries.

So the important concept is the second phase. Sniffing condrv on Windows allows us to build Yara rules to detect tool console output even if redirecte...

RT Florian Roth ⚡: Awesome idea and write up 👌

Does anyone have worked examples of where homomorphic encryption has been used in the real-world to hand?

RT Nicolas Krassas: Detecting Mimikatz with Busylight

GitHub - cactuschibre/CVE-2022-35914-poc -

RT Akshat: Prototype Pollution!!!!!, a less talked about bug with a greater impact. Read my new blog "Prototype Pollution 101".

Want to detect Mimikatz? then try this one simple trick..

RT Clint Gibler: 📈 A Guide to Improving Security Through Infrastructure-as-Code Epic post by @nccgroupinfosec's @wucpi with ~90 references * How to...

Re @AstroJordy 🔥🔥

Re @NASASpaceflight 💯

RT Tesla:

Re @FabrePierrejean @rinz0h @C5pider

Manage to Coerce WebDav connection, but why is it not 'relaying', or 'capturing'? What the...?

Re @gynvael It asks me if I'm ready, N just says command not found.

Re @gynvael N doesn't work for no.

Re @_EthicalChaos_ Yeah :/

Re @_EthicalChaos_ :'(

Re @nnwakelam Can you control the host header?

Re @Sh0ckFR :-) In France you have some of the most respectable researchers. But because they're so respectable and important, you'll often find that ...

Re @Sh0ckFR Random blue team guy at AV company goes and thinks he’s next level because he reads Twitter and runs to their boss and “oh shit new TTP,...

Re @Sh0ckFR I kind of grew out of dropping TTPs because blue team and large corporates are just benefiting freely off it.

Re @Sh0ckFR :-) well we aren’t about to drop real legit TTPs on Twitter 😂

Re Anyone got a NTLM -> ADCS RPC Enrollment code?

Relay to ADCS Web Enrollment for ESC8 fails if the CA has expired right?

Re @buffaloverflow So SSRF an internal host because NTLM auth can work in trusted zone or something like that?

Re @Sh0ckFR By the way I'm not French. J'utilise un traducteur.

Re @hackerm00n @pentestmatt I thought I'd be all "consultant" and ask about concerns that time.

Re @hackerm00n @pentestmatt Usually if sat on site, had time where we spent 2 hours talking to client about the concerns, took 5 minutes of sitting do...

Re @smaury92 @frycos yep:-)

Re @frycos Yep, a new attack interface in Java.:-D

Rendering HTML in Java Swing application, Cobalt Strike ,etc., could lead to RCE with some gadgets. It’s absolutely an awesome find.

RT Ollie Whitehouse: Weekly summary is out: -🇷🇺 ops using Office vulns -🇨🇳 ops in the 🇬🇧 -🇰🇵 ops evolve their macOS game -🇰...

RT 5pider: The Havoc Framework

LA School District Ransomware Attackers Now Threaten to Leak Stolen Data

Two new Exchange Server zero-days in the wild

RT b33f | 🇺🇦✊: Really good analysis of Cobalt Strike RCE 🥃🔫

Naturally, there will be a catgirl version of our Optimus robot

The point of AI Day is to show the immense depth & breadth of Tesla in AI, compute hardware & robotics

Re @cb_doge @Tesla 🤣

Re @teslaownersSV Yup

RT Tesla Owners Silicon Valley: Tesla Bot coming out and dancing 🤣 @elonmusk

Re @RyanAFournier Should be according to greatest need, not race or anything else

Re @Sh0ckFR Heya :-) didn’t see your message. Yeah hijack, based on timer.

Re @Sh0ckFR What did you ask? 😅

Re @gentilkiwi @Sh0ckFR I think the main thing being, busy.

Re @suanve 应该是DNS污染，原本我也不能用，本地改hosts指向IP就能用了

Re @comq490 From ALPHV?

Re @malwrhunterteam @angel11VR @VK_Intel @ChristiaanBeek @James_inthe_box @demonslay335 bl00dy ransomware group is a significantly smaller, and relati...

Re @ValaAfshar !!

Webcast link

Tesla AI Day 2022 starts at precisely 6:15pm California time

Re @teslaownersSV @Tesla Tesla team is awesome, such an honor to work with them!

CVE-2022-42002 SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for updating files: fileCreate and fileUpdate...

We have released updated customer guidance for reported zero-day vulnerabilities in Microsoft Exchange Server. Please see the MSRC Blog for details -

Re @MuskUniversity Now

Re @WholeMarsBlog That is not cgi