SuRb0 retweeted
You might remember my post about a system to attack facial recognition. I've been heads-down working furiously ever since.The project has evolved from a research repo into a live, operational platform. I'm excited about the new website, and it's one purpose: to show you the data.
SuRb0 retweeted
SECKC IS TODAY!
We'll be taking over Knuckleheads Garage in KCMO for two amazing speakers!
Schedule:
5:00–6:00 Make excuses / Pre-drinks,
6:00–6:10 Welcome + Announcements – @zuul
(cont.)
SuRb0 retweeted
So excited to be presenting at the last #ShmooCon with @antitree this morning @10am - "A Commencement into Real #Kubernetes Security!"
shmoocon.org/speakers/#kube
SuRb0 retweeted
Great work and research from the @Binary_Defense team and @_Dwyer_
Chinese state-sponsored spies infiltrated a global engineering firm's network via an IBM AIX server's default credentials. #CyberSecurity #ChineseEspionage
ift.tt/xR0YFIS
SuRb0 retweeted
We have a new party page defconparties.com/ that allows you to build your own party agenda by selecting the events you are interested in attending. Our party list is also built into the @defcon hacker tracker. #defcon32 #BHUSA
SuRb0 retweeted
2011: The first DerbyCon security conference was held. The opening keynote was HD Moore's "Acoustic Intrusions". Founded by Martin Bos, Dave Kennedy, Alex Kah and Adrian Crenshaw, the conference took place in Louisville annually through 2019. en.m.wikipedia.org/wiki/Derb…
SuRb0 retweeted
Finally posted TeamsTracker code from my DC31 talk. github.com/nyxgeek/teamstrac…
It proxies through Microsoft Graph Explorer to make unauthenticated Teams Presence/OOO lookups and logs them to a local db. Requires UUID of Azure account. Takes a CSV export from TeamFiltration, or a list of UUIDs as input.
Please don’t use on giant lists like I did with 100k MS employees — there’s a global rate limit to this technique. Let’s share.
If you really wanna do some surveillance I’ll be posting technical blogs in the coming weeks detailing how you can set up your own applications in your tenant(s) to do massive Teams monitoring.
SuRb0 retweeted
I'm sharing a tool to automate AD enumeration using PowerView (by @harmj0y ), link below.
It was written and tested within the CRTO lab (by @zeropointsecltd )
github.com/Leo4j/Invoke-ADEn…
SuRb0 retweeted
Crassus
Crassus Windows privilege escalation discovery tool.
github.com/vu-ls/Crassus
#pentesting #redteam #cybersecurity #infosec t.me/hackgit/7981
Based on feedback with my #chatGPT project: #hackGPT , I added the following features:
- Refactored the repo
- Added ability to either run as a stand alone #python module (pictured) or #Jupyter notebook
- Added new persona and menu system
Get it at hackGPT.com
When I was writing the #HaxHeadroom firmware, working with the UI used to hurt my feelings. This is a huge leap for making the #flipperzero approachable for hacker innovation. Well done.
#selfpromote xitter.cf/search?q=from%3A%40Cor…
Flipper Zero Hacker Tool Gets UI Editor For Custom Apps hackaday.com/2022/12/10/flip…
SuRb0 retweeted
Ho ho hackety ho! 🎅
To celebrate the launch of #AdventOfCyber, we’re giving away a limited edition #TryHackMe Yeti t-shirt. All you have to do is like and retweet!
The winner will be chosen at random on Sunday and announced on Monday 12th December. Good luck! 🤞
SuRb0 retweeted
Gsec
Web Security Scanner & Exploitation.
Passive Scan: ▫️ Find assets with shodan
▫️ RapidDNS to get subdomains
▫️ Certsh to enumerate subdomains
▫️ DNS enumeration
▫️ Waybackurls to fetch old links
▫️ Normal / Agressive Scan
Domain http code: ▫️ W… t.me/HackGit/6693
SuRb0 retweeted
Pay Phones Are Coming Back in Philadelphia Thanks to Linux, No Quarters Required makeuseof.com/payphones-are-…
As promised, my @security_score repo is live with the first tool on the list. Plenty of videos on usage and install.
github.com/securityscorecard…
#cybersecurity #threathunting #threatintelligence
SuRb0 retweeted
Even though my #SecKC talk is only 10mins, it is obviously the best one. Please show up and throw things at me.































