Bandit Pingu

// Professional Bandit // Hacker, Researcher, Tinkerer @ SilverSky // Personal Views

[Bandit Pingu @FlyingPhishy]

@IAMERICAbooted

[Justin Elze @HackingLZ]

The lolbin gods delivered

[Bandit Pingu @FlyingPhishy]

MS RN

[mRr3b00t @UK_Daniel_Card]

confirmed blocking...

[Bandit Pingu @FlyingPhishy]

@vxunderground “We take security seriously”

[Bandit Pingu @FlyingPhishy]

@IAMERICAbooted 100%, too much time on politics and optics, and not enough true experts in management position.

[Zack Korman @ZackKorman]

When a security researcher harms customers it's a crime, but when Microsoft does it it's called Copilot.

[Bandit Pingu @FlyingPhishy]

@UK_Daniel_Card Industry is full of charlatans who claim to be passionate/champion cyber, and experts is a fucking joke.

I’ve become jaded after the illusion smashing…

[Bandit Pingu @FlyingPhishy]

@cyb3rops We have a RD policy that aligns with CERT/CC and yet people still think you’re nefarious or (no offence) a grifting “bug bounty hunter”

[Bandit Pingu @FlyingPhishy]

@cyb3rops Ive been doing RD for a few years now and I think the ecosystem has gotten worse. I currently have an RD with 3 companies (2 vendors, 1 client) and their legal and vendor advice was to actively ignore and not respond.

RD will be dead soon if things don’t change

[rootsecdev @rootsecdev]

Last time I dealt with MSRC.

Responsibly disclosed an issue with legacy auth that allowed me to spray passwords at <redacted endpoint> and avoid smart lockout.

Receives email.. 5 months after initial case opening.

“Doesn’t meet the bar for servicing”

Microsoft silently fixed. Closed case.

https://t.co/9iFpMJMSXC

[Bandit Pingu @FlyingPhishy]

@ruadams Microsoft has never, ever prioritised security within their cloud platforms.

I’ve done 100s of security reviews over the years and the majority of customers are rocking default configs.

Nice one for the cmdlet

[it’s Russell @ruadams]

Why MS insists on turning everything on by default while they claim to have their customers security as a top priority baffles me. This pshell command will toggle these off as well as any future connectors that drop.

Yes DLP would protect your orgs data exfil - that isn't the point. Not every Org is there yet - so please stop enabling things like this without Admin consent.

M365 Admin portal / Copilot / Connectors

https://t.co/oMXAtXNu1h
@Copilot @NathanMcNulty

[Bandit Pingu @FlyingPhishy]

@sekurlsa_pw Or any auth coercion 😂

[shenetworks @shenetworks]

After not receiving a raise in the four years I’ve worked at BHIS they’ve now decided to reduce my pay by $40k after coming back from maternity leave and moving my role to solely pentesting. So I am looking for a new position effective immediately if anyone has any leads 😇

[Ayaan 🐧 @twtayaan]

i finally understand why it’s called linux porn 😭

[Tom Jøran Sønstebyseter Rønning @L1v1ng0ffTh3L4N]

Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them.

[Bandit Pingu @FlyingPhishy]

@MJHallenbeck @7h3h4ckv157 The IDOR one doesn’t inspire hope; seems more lab oriented rather than IRL situations

[Alex Neff @al3x_n3ff]

New NetExec module: mssql_cbt🔥

Relaying to MSSQL can be a hidden gem when you are out of options. The only protection against relaying to MSSQL is to enforce Channel Binding Tokens (CBT). Thanks to @Defte_, NetExec now has a module that checks whether this CBT is required.

[Matt Zorich @reprise_99]

So applications can be multi tenant or single tenant and have either delegated or administrative permissions and sometimes we call them service principals but there’s actually a difference between an application and a service principal