Colton Knight

"Look. Martin, I'm sorry you feel that way, but I'm not going to kill a man just because you're jealous." they/them

[Colton Knight @ColtonKnight16]

@iausheg It’s fine bestie, today is the start of wrath month so it will works <3

[Colton Knight @ColtonKnight16]

@turboghosto Best I can do is a Sophie 💛

[Colton Knight @ColtonKnight16]

@GooseworxMusic @kovox @DiscussingFilm Holy shit is that a mother fucking beginner’s guide reference

[Colton Knight @ColtonKnight16]

@vxunderground @cyberwarfarelab

[Matt Johansen @mattjay]

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media's coverage wasn't detailed enough so I dug into his testimony:

[Colton Knight @ColtonKnight16]

@vxunderground @vxdb May I obtain swag

[Logan Goins @_logangoins]

Just released Cable v1.0! New changes include but aren't limited to: reading/writing DACL entries on objects, a complete reformatting of the output into a tree style, adding computer accounts as apart of an RBCD attack, and writing DONT_REQ_PREAUTH.

https://t.co/GFIZYLZkjM

[🍤天ピザ🍕 @tempizza]

10月！　加筆＆再掲～

[Rachel Eaton @ Realta @rayleearts]

Me 12am October 1st

[Logan Goins @_logangoins]

Created another write-up, this time on NTLM relay attacks to LDAP(S), including details of WebClient coercion, NTLM transport vulnerabilities, and finally device takeover after achieving authentication. You can read about it on my blog :)

https://t.co/iXMAGeEpne

[Colton Knight @ColtonKnight16]

@vxunderground X-Large Hoodie

[Colton Knight @ColtonKnight16]

This was inspired by @x86matthew's now deleted blog post from 2022 on the subject

[Colton Knight @ColtonKnight16]

I spent some time today trying to write a POC for a self unpacking LNK payload.The python code is a bit convoluted, but the payload that it generates is fully functional and able to run without any external file dependencies. https://t.co/uTESiu9635

[🏳️‍⚧️Graph Crimes🏳️‍🌈 @GraphCrimes]

Why do I have a Cask of Amontillado soyjak. In what context would I need a Cask of Amontillado soyjak

[Colton Knight @ColtonKnight16]

@vxunderground Malware gaming

[Colton Knight @ColtonKnight16]

Some really cool analysis of the Palo vuln that dropped this weekend

[watchTowr @watchtowrcyber]

Another week, another SSLVPN RCE - this time, it's CVE-2024-3400 in Palo Alto's GlobalProtect.

But, we've seen no public analysis 🙁 so, allow us..

https://t.co/OBzVNi4XWl

[Colton Knight @ColtonKnight16]

@lauriewired @patrickwardle B o o k

[Colton Knight @ColtonKnight16]

@vxunderground @MalDevAcademy @mrd0x 👉👈

[Colton Knight @ColtonKnight16]

@Malcoreio @vxunderground Gaming