David Boyd

Christian. Husband/Father. Veteran. Hacker @TrustedSec. Traveling Man. Speaker. Gamer. Geek. Jedi. Chaotic Good.

[Dave Kennedy @HackingDave]

Swing by booth #6017 #BinaryDefense

Welcome to the era of NightBeacon..

[codewhisperer84 @codewhisperer84]

Titanis v0.9.330 => https://t.co/EhB7Qt26ek

Featuring support for Kerberos ticket forging, FAST armoring, and several usability enhancements like a .deb for easy installation, shell completion and manual pages.

[cje @caseyjohnellis]

This is very cool... I remember sitting with Erica Azad on my last day inside the tent at @Bugcrowd as she was just starting to cook up this idea - In the age of "Clank The Planet" it has never been more important to preserve and promote community, the people who comprise it, and the culture that defines it 🧡 🧡 🧡

The Hacker Culture Manual | @Bugcrowd https://t.co/GTtDTW2MwM

[Justin Elze @HackingLZ]

So far, it seems like the biggest hacks this year haven’t come from the “Vulnpocalypse” They’ve come from the ongoing supply chain mess act accordingly.

[David Boyd @BoydHacks]

@HackingDave Hazel with Irish Spring Soap

[David Boyd @BoydHacks]

@Spoonman1091 @bkbartcant @HackingLZ @HackingDave @old_Red_f0x @TrustedSec +4

[David Boyd @BoydHacks]

@NetworkChuck @HackingDave Ha! Same, built up the in home Firedog division for TN. Good times

[Kotaku @Kotaku]

Steam's Cyberpunk Sale Has Genre Classics At Their Lowest Ever Prices https://t.co/YjibEpTJVF

[TrustedSec @TrustedSec]

Transport Layer Security 🔒 the compliance checkbox that's harder to get right than it looks. In our new blog, Chris Camejo covers the most common #TLS misconfigurations and what organizations need to know to meet the standard. Read it now! https://t.co/TJpmaJBUoe

[Kuba Gretzky @mrgretzky]

I've just updated the M365 2.0 phishlet for Evilginx Pro with full Browser-in-the-Browser compatibility. 🪝🐟

To remove frame-busting code from any website (allowing it to be iframed):

- Remove the "Content-Security-Policy" and "X-Frame-Options" HTTP headers.
- Find and remove JavaScript that references "top.location" or "self !== top".
- Remove "target='_top'" from HTML forms.

Let me know if you'd like me to make a hands-on tutorial showing how to identify and remove frame-busting code from the MS sign-in page using Chrome DevTools and Burp Suite.

[Dave Kennedy @HackingDave]

We've been busy. We're happen to announce the launch of NightBeacon Stealth.

A full agentic AIDR down to the endpoints with automatic AI deception capabilities, defensive countermeasures, and autonomous workflow.

NightBeacon Stealth can work as a standalone solution or integrated into our NightBeacon CMD infrastructure.

Taking things that used to take us hours and days and shrinking that down to seconds or minutes.

One of the most powerful components of NightBeacon Stealth is our ability to throw off autonomous models attacking your infrastructure. They will sit there for days/weeks/months just churning with no success.

There's so much packed into one agent, it has everything you need to defend the threats of tomorrow.

Welcome to the era of NightBeacon... #BinaryDefense

[TrustedSec @TrustedSec]

The #cybersecurity industry is navigating two significant developments: #AI's impact on offensive capabilities and suspected Iran-linked attacks on US water utilities. Our Founder and CEO @HackingDave joined @FoxBusiness to weigh in on both conversations. Watch now!

[Aurélien Chalot @Defte_]

NetExec users, you might have found that on newer Windows systems, invalid SMB authentication resulted in a NETBIOS timeout error:

[Justin Bollinger @ DEFCON34 @Bandrel]

Torrent for the first batch of NetNTLMv1 Zstd compressed, perfected tables is up. The other three on their way. https://t.co/thr9cuU8hQ

[Jason Lang @curi0usJack]

Watching @cantcomputer trip the anti-ai lab features in our training has utterly made my day.

[David Boyd @BoydHacks]

@Bandrel It’s looking baller!

[Justin Bollinger @ DEFCON34 @Bandrel]

Thanks @fir3d0g for the great idea! Feature almost ready to ship. Just need to do some more debugging on the hcmask output files.

[David Boyd @BoydHacks]

@HackingLZ Didn’t vendor pitches used to be banned?

[Martin @cantcomputer]

If you are not here… you messed up gang

[TrustedSec @TrustedSec]

Heading to @defcon 34? Senior Security Consultant @two06 is presenting "Social Engineering with Reel" on Friday, August 7 at 2:00 PM—fresh off his Black Hat Arsenal appearances. Add it to your schedule! https://t.co/7yUaDQCYOc