Cody Kretsinger

Security Researcher, Recovering Red Teamer, Speaker & Author. Former LULZSEC Member. Cofounder @bsidespeoria & IL Cyber Foundation. Views expressed are my own.

[Cody Kretsinger @CodyKretsinger]

Want to find out how to get ahold of me? Find me on https://t.co/siSL8UG1Vv

[Cody Kretsinger @CodyKretsinger]

I found a couple of vulnerabilities in RapidFire Tools Network Detective. You should probably make sure they're all updated. https://t.co/GhT4YTCAaf

[Cody Kretsinger @CodyKretsinger]

Real American Patriots support Ukraine.

We're with you @ZelenskyyUa

🇺🇦Slava Ukraini🇺🇦

[Cody Kretsinger @CodyKretsinger]

We've made it to Gleba and made some much needed design choices that are familiar, but I just can't quite put my finger on where I know it from...

[Cody Kretsinger @CodyKretsinger]

Does "Lightly Encrypted" mean they held the salt?

https://t.co/gCSCmPfaGZ

[Cody Kretsinger @CodyKretsinger]

@Mandiant Some new refined searches get this total closer to 5,000 Internet exposed #fortimanager devices. The average device count in the hundreds would mean 500,000 or more potentially impacted devices.

[Cody Kretsinger @CodyKretsinger]

Yesterdays headline about the #FortiManager #Vulnerability included a stat: 60,000 vulnerable devices. That may have been a bit misleading. You see, the search done on Shodan identified devices that likely *receive* updates from FortiManager using port 541+some magic.

[Cody Kretsinger @CodyKretsinger]

@Mandiant Also, stop putting shit on the internet on non-standard ports like its going to do something. 4443, 8443, and 10443 isn't going to hide the service from anyone. All you're doing is making it take a little longer to script and make it 1% harder for the bad guys to #badguy.

[Cody Kretsinger @CodyKretsinger]

@UK_Daniel_Card Not to mention how absolutely tragic Fortinet's response was and how they "handled" this patch. I've not talked to one admin who has been happy with the communication around it.

[Cody Kretsinger @CodyKretsinger]

@UK_Daniel_Card

[Cody Kretsinger @CodyKretsinger]

@UK_Daniel_Card You're 100% spot on. And its only going to take a couple of these appliances getting popped to cause an absolute mess.

[Cody Kretsinger @CodyKretsinger]

This FortiManager vulnerability is *wild* folks. Trivial to exploit, impacts are incredibly bad.

If you haven't patched already I'd be doing it ASAP and check the logs for the bad guys.

[Cody Kretsinger @CodyKretsinger]

Todays a 'coffee run start' kind of day

[Cody Kretsinger @CodyKretsinger]

That nationwide outage a week ago seems a little more suspicious all of a sudden. Time to break out the tinfoil hat.

[BleepingComputer @BleepinComputer]

AT&T, Verizon reportedly hacked to target US govt wiretapping platform - @Ionut_Ilascu
https://t.co/PFpdopPwPF

https://t.co/PFpdopPwPF

[Cody Kretsinger @CodyKretsinger]

Man, I cannot believe we're one week away already.

We've got some pre-event announcements coming but only a few tickets left. So get them while you can.

[BSides Peoria @bsidespeoria]

📢 ONLY ONE WEEK AWAY!📢

We are so excited for BSides Peoria 2024! Don't forget: standard registration closes on October 10th. We only have a few tickets left!

https://t.co/YFb4Tnn6zA

#Cybersecurity #BSides #BSidesPeoria #BSidesConference #BSidesPeoria2024

[Cody Kretsinger @CodyKretsinger]

@TomLawrenceTech ok, good. I'm not alone then!

Next question, do you all do it in front of execs as well?

[Cody Kretsinger @CodyKretsinger]

Does anyone else call "incognito" or "private browsing" Porn Mode or is it just me?