James Hall

Threat Hunter, general beer and boardgame geek. Creator of the DuckToolkit

[Adam Langley @BuildHackSecure]

We’re launching our first @BSidesExeter in July 24 and currently looking for sponsorship, if any of my followers work in cybersecurity companies and are interested please reach out. Also if any learning platforms would like to be involved with vouchers that would be awesome!

[James Hall @411Hall]

@Biddibops Thank you just managed to get two this way!!

[James Hall @411Hall]

@WiperAndTrue @Schillers rude not too

[James Hall @411Hall]

@Tu5k4rr Joplin. Switched from CherryTree earlier in the year and use it for all my notes now.

[James Hall @411Hall]

Learnt a lot during RTO. Really well put together labs, course and a fun exam, thanks @_RastaMouse #HackThePlanet

[Alex @cryptogramfan]

Here's my write-up on how to use perceptual hash algorithms to track malware campaigns that use visually similar maldocs (e.g. #Emotet, #QakBot, #Ursnif). Also released graph_similar_document_images.py that will graph out visually similar maldocs.

https://t.co/0HIuIbQSaO

[Tony @TJ_Null]

Yesterday at the meetup I also showed a new pentesting template I have been working on that includes my tools and tricks I have used for OSCP and in actual assessments.

This template is an update to what @411Hall created in cherry tree but instead the tool I used is Joplin.

[James Hall @411Hall]

@TJ_Null Nice one, looks awesome! Hadn't heard of Joplin before. Can you share the template?

[James Hall @411Hall]

@Alpha_Age I wish I could but I killed the VM and forgot to back my conf up 😭 Have never managed to get my builds since to look as good.

[James Hall @411Hall]

@vesselbeerfest @VesselPlymouth That's amazing thanks, really looking forward to it!

[James Hall @411Hall]

@vesselbeerfest will I be able to pick up cans/bottles from the festival on Saturday?

[James Hall @411Hall]

@vesselbeerfest @VesselPlymouth Awesome will I be okay to bring a few unopened cans to the evening session then? Won't have chance to pop home after coming to the shop!

[James Hall @411Hall]

@AidanPreston Can you screenshot? I will add a ErrorAction to make it fail quietly. Need to update anyway!

[James Hall @411Hall]

@DRX_Sicher Hi mate, unfortunately you can't simply copy the entire tree but what I did was save a fresh copy of my file and import it in for each host. You can setup hot keys for the import function to make it quicker. Make sense?

[James Hall @411Hall]

@Tu5k4rr

[Daniel Bohannon @danielhbohannon]

After 9 months Invoke-DOSfuscation is finally released!! There is a lot of information for detection in the white paper, and the Invoke-DosTestHarness function is exactly what I used for detection dev & tuning.

Code: https://t.co/ARK97aDnHg
White paper: https://t.co/i3qz7jn2rs

[James Hall @411Hall]

@may_y0 Still need one? Got one going free

[James Hall @411Hall]

@Tu5k4rr How's the healthy diet going?

[James Hall @411Hall]

@AdliceSoftware Looking for beta testers? Me and @Tu5k4rr have currently got several sensors feeding into an MRF setup.

[James Hall @411Hall]

Any reason you just sent me 100 emails with alot of members email addresses?! @hackthebox_eu