frequent victim of nerd sniping; #PowerShell aficionado; blue teamer; black metal fanatic; (awful) drummer; ADHD galore; he/him; @IISResetMe@infosec.exchange
Amsterdam, Netherlands
Joined October 2010
- Tweets23K
- Following1.7K
- Followers4.1K
- Likes53.4K
Pinned Tweet
Thread: modern black metal to my liking (in no particular order)
1/
Shaarimoth - Elevenfolded Wrath of Sitra Achra
youtube.com/watch?v=RiN3muq-…
Mathias R. Jessen retweeted
Happy 25th birthday to Active Directory, the cause of... and solution to... all of life's problems
Mathias R. Jessen retweeted
🧵
This CIS Benchmark should be a Level 1 and here is why: it is a COMMODITY ATTACK and allows long term persistent access to tenants that bypasses MFA requirements for users. This attack has been being taught on publicly in offsec classes for years.
Mathias R. Jessen retweeted
I remember learning about the razing of Carthage as a kid and being horrified, yet grateful we lived in a world where something that evil was unimaginable. But that's what's been done to Gaza: not just mass murder, but the wiping out of an entire society. And we all watched it.
Mathias R. Jessen retweeted
Gaza is a death camp where Israel is carrying out a holocaust.
Same lesson as every year: I hate spatial puzzles
We're seven days into #AdventOfCode 2024! Have you learned anything new about your programming language / tool / editor of choice?
Mathias R. Jessen retweeted
It's trivial to determine if Okta is being used. Also, IdP's cannot prevent user enumeration, even if their settings in the admin portals suggest they can.
Not sure how easy it is to look up the Okta domain by company FQDN, but @DrAzureAD makes this enumeration very easy for us for Microsoft tenants😈
aadinternals.com/osint/
OBS til Ukrainske energikunder
Alligevel imponerende, at man kan skrive en hel artikel om Jeppe Kofod og hans nye job uden et eneste ord om den egentlige grund til at han er fortid i #dkpol. dr.dk/nyheder/politik/jeppe-…
Mathias R. Jessen retweeted
This is where my office is located
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Jeg er ikke et øjeblik i tvivl om at Mikkel ville stikke en kniv i maven på os alle sammen hvis ikke han fik lov til at lege Herremand
Lad bare de venstreorienterede partier få “en knude” i maven,
DF og @Mikkel_Bjorn sørger for, at danskerne ikke får en kniv i maven.
Mathias R. Jessen retweeted
Technically a JPEG parser vulnerability can result in you being shown an image that spawns a reverse shell granting remote control, yes. This is a major vulnerability however largely to servers tasked to interpret obscure arbitrary uploaded files.
imagetragick.com/
Nothing has made me change my principal stance ("my life is mine, and mine to end") faster than seeing the glee with which British MPs rushed their culling bill through
Never lose sight of the fact that network defense is an economic game. Insulating yourself from the costs of predictable noise is leverage.
only morons say that geo blocking is only used by morons. ...
I can say this 100% I have worked on [redcated] projects where we had a requirement to use geo blocking.
I can say this, if you don't want to spend CPU, LOGS and create noise, geo blocking can be a good tool.
It is not a control, it is a tool as part of a defence in depth approach. if you don't understand this then that's a major red flag.
only the Sith deal in absolutes!
Mathias R. Jessen retweeted
Quote ofbthe day at #PSSatKA
"A test that always returns a green light, is not a test, it is a green flashlight"
#powershell
XD
