@OneLogicalMyth

Experienced sysadmin now cyber security consultant, pen tester & ethical hacker. Keen scripter especially in PowerShell and Python. Tweets are my own.

 UK
glanfield.co.uk
Joined October 2011
  • Tweets624
  • Following259
  • Followers422
57Media
Summer holidays? No, design the sponsor packs! Ok!! Drop us a DM, if you want to be on the list to see the packs first! #sponsorrrrrrrrrrrr
3
1
264
Eek, we've sold out of our early bird tickets for this year's conference! 🐤❌ We're running with a reduced upper capacity this year, so make sure you grab yourself a ticket! 🏃‍♀️🏃‍♂️ Speaker pages will start being published this Sunday. conference.techexeter.uk/
picture of a bird with a worm in it's mouth, with a white X overlaid on top with the caption 'early bird tickets sold out'

ALT picture of a bird with a worm in it's mouth, with a white X overlaid on top with the caption 'early bird tickets sold out'

1
6
Software is used in Radar systems open to unauthenticated remote compromise in 2021. Our long tail of technical security debt is very real..
NCC Group Research & Technology@NCCGroupInfosec27 Jul 2021
Technical Advisory: Sunhillo SureLine Unauthenticated OS Command Injection (CVE-2021-36380) - Sunhillo is an industry leader in surveillance data distribution and this can result in remote compromise - by Liam Glanfield - research.nccgroup.com/2021/0…
1
9
1
23
Technical Advisory: Sunhillo SureLine Unauthenticated OS Command Injection (CVE-2021-36380) - Sunhillo is an industry leader in surveillance data distribution and this can result in remote compromise - by Liam Glanfield - research.nccgroup.com/2021/0…
1
13
2
29
Have published RedacTerm in case others find it useful. Allows you to edit terminal output ready for screenshots - highlight key areas and redact sensitive info. github.com/bao7uo/redacterm
2
7
Tomorrow's planned @DC441392 is still going ahead, albeit virtually via Zoom (and yeah, I know not everyone likes zoom). The meet is not being recorded, and has been secured. If anyone in my normal circle would like to hang out with us infosec types from 7pm, HMU for an invite
2
1
6
Something both Andrew & I feel strongly about is paying things forward. So if you are a business who has implemented work from home and a bit concerned about the potential security risks, Fidus will complete a FREE VPN Security review. linkedin.com/posts/kurtisaba…

Something both Andrew & I feel strongly about is paying things forward. So if you are a business...

Something both Andrew & I feel strongly about is paying things forward. So if you are a business who has implemented work from home and a bit concerned about the potential security risks, Fidus will...

linkedin.com
1
1
📚 tl;dr sec #12 * SameSite ☠️ CSRF * @MITREattack Cloud Matrix * @owasp Global AppSec Amsterdam vids posted * HTA shell for breakout assignments by @OneLogicalMyth * r/websecurityresearch from @PortSwigger * @trailofbits Fall Update and more! programanalys.is/blog/tldr-s…
1
4
8
Updating passwords by using a hex editor on NTDS.DIT on the domain controller...
2
15
89
If you like my #GTFOBLookup tool for querying #gtfobins and #LOLBAS offline, please consider giving it a star on GitHub (github.com/nccgroup/GTFOBLoo…) #infosec #pentesting #redteam #privesc #python

GitHub - nccgroup/GTFOBLookup: Offline command line lookup utility for GTFOBins (https://github.c...

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and Hijack...

github.com
2
39
1
101
Thanks for coming everyone. Was a great turnout today with some new faces. The workshop was well-received, was a pleasure to host it. See you in November.
1
4
Should be a great workshop tomorrow at @DC441392 with @OneLogicalMyth 👍
DC441392@DC4413921 Oct 2019
We are holding a small workshop for this Thursday nights meet. Bring a device that has kali.org/ installed. Also bring a wireless adaptor that supports packet injection such as amazon.co.uk/dp/B004Y6MIXS (optional). See you on Thursday the 3rd at the Ship at 7.30pm.
1
1
Added support for SMB2 snapshot listing/browsing/downloading to impacket. Cool feature for dumping NTDS etc. over pure SMB github.com/rxwx/impacket
1
114
2
234
We are holding a small workshop for this Thursday nights meet. Bring a device that has kali.org/ installed. Also bring a wireless adaptor that supports packet injection such as amazon.co.uk/dp/B004Y6MIXS (optional). See you on Thursday the 3rd at the Ship at 7.30pm.
1
2
3
Retweet if you have taken down a network. I’ll go first.
274
600
458
736
Minor version update just landed in Covenant! Includes new Persistence modules and a BypassAmsi module added by @_RastaMouse and a ScreenShot module added by @infosec_n00b 🔥 github.com/cobbr/Covenant
6
78
1
196
Our #techexeter19 event photos are up! flickr.com/photos/152171701@…
2
6
Here's the group shot after the closing ceremony of #TechExeter19 - we're still smiling!
1
7
2
21
On Domain Controllers, LDAP Signing & LDAP Channel Binding become mandatory security settings. portal.msrc.microsoft.com/en… Test & Enable these before Microsoft Enables by Default: support.microsoft.com/en-us/… support.microsoft.com/en-us/… #ActiveDirectorySecurity #activedirectorysecuritytips
Christoph Kuderna@qd28511 Sep 2019
Microsoft strongly advises customers... always a warning, especially if it involves DCs and LDAP and MS announces upcoming changes Https://support.microsoft.co…
4
96
4
191
Our meetup is starting soon at the Ship in Exeter. We have @ScriptPleb hosting a CTF so don't forget your laptop. We look forward to welcoming you. Directions 👉 dc441392.org.uk Who wants to get root first?
1
2
Load more