Benjamin Sølberg

Cyber Security Analyst

[Benjamin Sølberg @BenjaminSolberg]

I often get annoyed with rundll32.exe while working with malware, hence I have made a 32/64 bit replacement where running an export is optional and at the same time also has the possibility of run multiple exports in succession.
Feedback is appreciated.
https://t.co/vjtLoWZBF3

[Benjamin Sølberg @BenjaminSolberg]

@DennisNilsson A VGA GEV1000 electric scooter. I managed to dump the flash even so it was read out protected.

[Benjamin Sølberg @BenjaminSolberg]

Let’s test the security on this bad boy

[Benjamin Sølberg @BenjaminSolberg]

@Apple Today my "Phishing Domain Finder" tool found:

id-support-apple[.]com
iclouds-location-apple[.]com
apple-found-alert[.]live
apple.icioudv[.]cn
live-location-apple[.]live
https://t.co/6Rk3c3qJRV.ifindmy-id[.]com

and many many more

Source: https://t.co/T4XDpWhUOp

[Benjamin Sølberg @BenjaminSolberg]

@postnord Today my "Phishing Domain Finder" tool found:

min-postnord[.]se
paket-postnord[.]se
postnordcustomerservice[.]life
postnord-ld[.]se
postnord.njcjw[.]xyz
www.min-postnord[.]se
www.paket-postnord[.]se
www.postnord-ld[.]se

Source: https://t.co/T4XDpWhUOp

#postnord

[Benjamin Sølberg @BenjaminSolberg]

Today my "Phishing Domain Finder" tool found an active @DanskeBankFI @DanskeBank_DK phishing campaign:
danskebank.fi-lukittu[.]net

Source: https://t.co/T4XDpWhUOp

#danskebank

[Benjamin Sølberg @BenjaminSolberg]

Today my new "Phishing Domain Finder" tool found:

www-postnord[.]site
service-postnord.stidner[.]com
paket-leverans.postnord[.]live
paketleverans.postnord[.]live
postnordexport.xpwdv.beeweb[.]se
postnord[.]live
postnord.orderinfo[.]online

https://t.co/T4XDpWhUOp

@postdanmark

[Benjamin Sølberg @BenjaminSolberg]

I’m currently on some Certificate Transparency data and it seems to be spammed with a lot of domains names with say “gitlab.git.git.gitlab.[redacted].com” certificates. Does anyone know why besides that it probably is malicious? See for your self using “certstream --full | jq -C”

[Benjamin Sølberg @BenjaminSolberg]

If you were wondering where the calculator unit is and what it looks like in a CPU…😁 die shot i made while testing my cheap new microscope.

[Benjamin Sølberg @BenjaminSolberg]

@r0ns3n You’ve earned it!

[Benjamin Sølberg @BenjaminSolberg]

I have created a small Java Forensics Toolkit that is able to dump all classes currently loaded in a running JVM. It’s a great little tool when you need verify the byte code of a running system. #cybersecurity #infosec #DFIR #blueteam https://t.co/UzHEHkjlEH

[Benjamin Sølberg @BenjaminSolberg]

My 1978 LED replacement watch module was featured on Hack’a’day. To be honest it was a hard project to make but very rewarding and fun. PCB made in KiCad and firmware in TI Code Composer Studio. Featuring an MSP430 MCU and a 10 year battery life: https://t.co/wzYzR7Ho6X

[Benjamin Sølberg @BenjaminSolberg]

In episode 314 of @thetalkshow @gruber is trolling @caseyliss hard as “the other guy” which made me laugh. @marcoarment laughingly notes that Casey will kill him for that.. Casey we love you. You are the glue that holds ATP together, the balance and the equalizer. #LissIsMore

[Benjamin Sølberg @BenjaminSolberg]

@TheAmpHour Love the show. The sponsor read in #526 was done in an interesting and entertaining way.

[Benjamin Sølberg @BenjaminSolberg]

@johndmcmaster @toolotheday This tool should be called a Magic Smoke Examiner.

[Benjamin Sølberg @BenjaminSolberg]

@zvikam Try IDDQD next time

[Benjamin Sølberg @BenjaminSolberg]

@_hyp3ri0n djokovic808 could be DJ okovic 808 since the tr-808 is a famous drum machine by Roland and exactly what a dj would use or like.

[Benjamin Sølberg @BenjaminSolberg]

@POTUS Welcome, Mr. President.
May you restore my faith in the other half of the American people and may you tweets be the truth, the whole truth, and nothing but the truth, so help me God.

[Benjamin Sølberg @BenjaminSolberg]

@FireEye @Mandiant #flareon7 Thank you, this was my biggest and proudest accomplishment during 2020. I’m looking forward to getting my butt kicked again in 2021.

[Benjamin Sølberg @BenjaminSolberg]

@DNewcomer @anthomsec @ICS_Gabe Check out the Flare Github page. Tons of tools and tons of info.

[Benjamin Sølberg @BenjaminSolberg]

@DNewcomer @anthomsec @ICS_Gabe There are many Flares but I wish this Flare was mine.