tprime (@tprime_) header
tprime (@tprime_) profile picture

tprime

@tprime_

Sr. Security Consultant

 サイベリア
zerobin.net/?a6d778d5375ce9e0#yhrmvsjq+/V6IdsT3VzEiVi0HtkeVwUGHpZSCbidabc=
Joined September 2010
  • Tweets622
  • Following773
  • Followers416
58Media
Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)Photo by tprime (@tprime_)
Interesting whitepaper from 2019 by @AndresRiancho about insecure AWS Cognito configurations. I wonder if anyone has done something similar, but for applications which mistakenly expose the SignUp endpoint? andresriancho.com/internet-s…
Internet-Scale analysis of AWS Cognito Security – Andres Riancho

Internet-Scale analysis of AWS Cognito Security – Andres Riancho

Just published the whitepaper for my latest research: InternetScale analysis of AWS Cognito Security. The whitepaper contains the methodology and results of…

andresriancho.com
1
hmmm....
Image from tprime (@tprime_)
3
Zanimiv film o Slovenskih hekerjih: youtu.be/N5Xv94DCzKY
#hackers.si (#hekerji.si) - documentary on 20 years of hacking in Slovenia (with English subtitles)

#hackers.si (#hekerji.si) - documentary on 20 years of hacking in Slovenia (with English subtitles)

Tne documentary film depicts one aspect of the hacking scene and it...

youtube.com
I wrote a guide to securing #salesforce applications and passing the #appexchange security review for the @bishopfox blog: know.bishopfox.com/research/…
7
22
#CactusCon day one
4
the agenda at #CLSI2019 looks awesome... would love to attend one day
Managed to get a nice hike in during a rural onsite
1
5
disappointing to see journalists apologizing for or celebrating government censorship in #srilanka
1
1
This helped me on an assessment the other day... Thanks man!
Matheus Bernardes (@mthbernardes) profile pictureMatheus Bernardes@mthbernardes5 Apr 2018
mthbernardes.github.io/rce/2…
1
3
want to deploy your own #BGP monitoring in minutes to detect internet censorship and more, even on a low-resource machine? check out tprime.dsskcorp.com/deploy-r…
1
2
defcon was fun, next up is @CactusCon
1
6
tfw your mom ruins your cybercrime spree
briankrebs (@briankrebs) profile picturebriankrebs
@briankrebs7 Aug 2018
25 y/o Florida man arrested, accused of conspiring with at least 8 others to hijack mobile phone accounts and steal hundreds of thousands of dollars worth of bitcoin from victims krebsonsecurity.com/2018/08/…
Image from briankrebs (@briankrebs)
1
2
3
lightrail -> #PHX2600
flight + hotel booked for @hopeconf - see everyone there!
1
OONI - Ethiopia: Verifying the unblocking of websites ooni.io/post/ethiopia-unbloc…
Here's the technical write-up based on Jake Miller's @EmpireHacking presentation on server-side spreadsheet injection last night - bit.ly/2LLEX0l #infosec
15
1
10
#phx2600
2
lol: web.archive.org/web/20180508…
The #BGP hijacking explanation by @tprime_ is featured as a resource in this @Newsweek article on how hackers used this technique to steal $150,000 in #cryptocurrency: bit.ly/2w5r2Q2
5
2
Load more