Christian N. (They/Them)

@GuardianCosmos.bsky.social Pentesting | Forensics | Incident Response | SANS Instructor | Purple Teaming | @[email protected] | Views AMO

[Christian N. (They/Them) @GuardianCosmos]

I've begun my migration over to the mastodon lands, find me as usual https://t.co/ssKKqbqkKE

[Christian N. (They/Them) @GuardianCosmos]

@chriselgee Sorry I missed! I don't twitter anymore, I went to the other place 😅
'Ema' they are small wooden tablets that you put a name and prayer on and hang up at a shrine or temple, typically also has a horse depiction in lieu of an actual horse

[Christian N. (They/Them) @GuardianCosmos]

This is my account on Mastodon - https://t.co/sRCGeL5Sfq - verified by https://t.co/HqJtuXoA3s

[Dave Kennedy @HackingDave]

OpenSSL?

[Christian N. (They/Them) @GuardianCosmos]

Check the repo that's been stood up to help track what you'll be patching today!

[Ismael Valenzuela @aboutsecurity]

🚨 Make sure you're checking @CISAgov GitHub repo to track software affected by the #OpenSSL 3.0.x vuln, as well as any IOCs related to exploitation activity. As you may still remember from 2014's #Heartbleed, timely discovery & remediation are critical

https://t.co/sVuw7lNljh

[inversecos @inversecos]

1\ #DFIR: Chrome Forensics - How to Recover CLEARED History

If a user just cleared their browser history, you can still recover everything they were just looking at from the session files:

%appdata%\Local\Google\Chrome\User Data\Default\Sessions

https://t.co/FaDbeJwhQC

[Christian N. (They/Them) @GuardianCosmos]

A thread worth reading

[hackerxbella | Allie Mellen @hackerxbella]

🧵 the 'Autonomous SOC' is a pipedream. 1/n

https://t.co/5gwY9IC19f

[Christian N. (They/Them) @GuardianCosmos]

BSides is always a good time and a great way to get to your first conference, if this is your local, and even if it's not, this is for you!

[BSidesCharm @BSidesCharm]

We are excited to begin our planning for BSidesCharm 2023! We will be returning next spring for an awesome weekend of talks, villages, and job recruiting!

Set your calendars for the weekend of 29-30 April 2023.

More details to come!

https://t.co/YtWc4ddpk4

[Christian N. (They/Them) @GuardianCosmos]

Take note and mark your calendars folks

To their credit, this is the first Crit in Openssl since 2016, that's a pretty good record given how many places it's used

[Christian N. (They/Them) @GuardianCosmos]

@leanrum Oh good you have secured the potatoes! It was on my @pumpcon Todo list this morning 🤣 see you all soon!

[Christian N. (They/Them) @GuardianCosmos]

Great thread on resources!!

[Daniel Kelley @danielmakelley]

30 cybersecurity search engines for researchers:

1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.

[rootsecdev @rootsecdev]

Anyone else still in this trap? 😂

[Daniel Cuthbert @dcuthbert]

If 41 lines of code can bypass the authentication process on the administrative interface of FortiGate firewalls, FortiProxy web proxies, and FortiSwitch Manager (FSWM) on-premise management instances, then something is very wrong.

This is not acceptable @Fortinet

[Christian N. (They/Them) @GuardianCosmos]

@dakacki Would you go buy the dang hat already and own your amazing look here, cause the hat with with stash and the beard just works

[Greg Linares (Laughing Mantis) @Laughing_Mantis]

This will be a thread discussing a real world breach involving a drone delivered exploit system that occurred this summer

Some details I am not able to discuss, however for the blue teams & red teams out there I hope this provides a good measure of capability.

🧵🚁 🎮🖥️🦠

[Dr. Nestori Syynimaa @DrAzureAD]

To celebrate my new #AADInternals blog, I also published an online OSINT tool at https://t.co/uHQ0tKteuU

It allows to get tenant information using:
* Tenant ID
* Domain name
* Email/UPN

The domain list includes links to ease the gathering of further information. Enjoy!

[Dirk-jan @_dirkjan]

Fox-IT just open sourced their enterprise forensics tooling dissect. This is a big project that some of the smartest people I know have worked on. It supports many filesystems and file formats, all as Python libraries. Docs: https://t.co/M6YAygmW3E / code: https://t.co/HKT4eYIm1a

[Tim McGuffin @NotMedic]

I don't know what to do with this knowledge, but today I learned that curl has a handler for LDAP URIs.

curl --user $CREDS "ldaps://ldap.foo.com/DC=ads,DC=foo,DC=com?memberOf?sub?(&(sAMAccountName=$USER)(memberOf=CN=$GROUP,OU=Distribution,OU=Groups,DC=ads,DC=foo,DC=com))"

[Wendy Nather @wendynather]

Bravo @dotMudge. That's it. That's the tweet. https://t.co/lEQCOZRRJ8