Oddvar Moe

Red Teamer @TrustedSec | MS MVP | Speaker | Security Researcher | Blogger | Total n00b & always learning | UNC1194 | Tinkerer | Gamer

I try to inspire!

[Oddvar Moe @Oddvarmoe]

Feels incredible to finally be able to talk about this tool and capability. Thanks to everyone that attended the webinar today, much appreciated.

This is a tool that the entire Targeted Ops and Research team at TS has contributed to. I initially wrote the tool, but @freefirex2 took it to new heights.

Additional resources:
Code: https://t.co/UbT9O9qeGC
Wiki: https://t.co/MMmiAPjlC3
Video tutorials: https://t.co/LF26wYmZVO
Discord Specula channel: https://t.co/EDcGciFnBO
Webinar will also be released on the TS Youtube channel shortly.

[TrustedSec @TrustedSec]

Today, TrustedSec is releasing #Specula (our previously internal framework) into the world, which will transform the Outlook email client into a beaconing C2 agent. @oddvarmoe and @freefirex2 walk through how to use Specula in our latest blog! https://t.co/ZcXeCwsGAT

[Oddvar Moe @Oddvarmoe]

@ustayready Amazing news!! Really happy for you guys ❤️

[Jason Lang @curi0usJack]

This is going to be an absolute blast!

[Dave Kennedy @HackingDave]

Seeing a lot of cybersecurity researchers getting their accounts suspended.

Twitter/X has always been a safe haven for us to share both offense and defense to make the world a safer place.

I hope this is by error and not a trend to silence legitimate people doing great work.

[Oddvar Moe @Oddvarmoe]

@MrUn1k0d3r Digicert is okay

[Mike Felch (Stay Ready) @ustayready]

My wife wanted to say a few things..

On behalf of my family, I wanted to say thank you for supporting us through this dark season. After seeing the support and donations through GiveSendGo, the season just got a little brighter. It has definitely revived something fierce in me for this infosec community. Here's the link in case you are just seeing this for the first time and want to help get us over the finish line. Please RT for visibility. https://t.co/vExpnHh2fU

[Oddvar Moe @Oddvarmoe]

@ustayready Dude! That's the least I could do ❤️

[Mike Felch (Stay Ready) @ustayready]

As yall may have realized, I disappeared from the community for a little while we fight the most difficult fight of our life. My wife Angela was diagnosed with stage 3 cancer. We need all the help we can get, please consider supporting our fight. https://t.co/g8Xy7FwIHe

[INFINITE NIGHTMARE @MSNightmare2000]

https://t.co/ODc3i5haxD

[Adam Chester 🏴‍☠️ @_xpn_]

Trying to use Fable 5 for anything benign...

[Alex Neff @al3x_n3ff]

SMB share enumeration via ACLs with NetExec🔥

NetExec now detects share permissions via ACL enumeration, instead of trying to write a file. In addition, we can now detect if a user has indirect access to the share, e.g. by having ACL write permissions!

Made by @PytelJack🚀

[Vivek | Cybersecurity @VivekIntel]

Anthropic just open-sourced a reference framework for AI-powered vulnerability discovery and remediation 🤖💀

The workflow:

Recon → Find → Verify → Triage → Report → Patch

Features:
• Threat modeling
• Autonomous vulnerability hunting
• Crash verification
• Finding deduplication
• Exploitability analysis
• AI-generated patches with validation

Built around Claude Code and sandboxed agents using gVisor.

🔗 https://t.co/ZFOtXZPEn8

Interesting signal: AI is moving beyond code generation into autonomous security research and vulnerability management.

#CyberSecurity #AppSec #AI #LLM #VulnerabilityManagement #DevSecOps #ClaudeAI

[Oddvar Moe @Oddvarmoe]

@curi0usJack @TrungTPhan haha! so true

[Mr.Un1k0d3r @MrUn1k0d3r]

I decided to publish my internal Azure Entra ID tool. There are a lot of these already available, but I've added some interesting features that have made a difference for me over the years. You can capture token through the browser using playwright

https://t.co/xiZaz0PKsC
#Azure

[Melvin langvik @Flangvik]

Had a blast sitting down with John last year, goofy stuff but hopefully somewhat enjoyable 👌🤪

[Justin Elze @HackingLZ]

The lolbin gods delivered

[Jason Lang @curi0usJack]

Prove it.

Reinstate Nightmare Eclipse on GitHub.

[Oddvar Moe @Oddvarmoe]

@_xpn_ Sounds awful!

[DirectoryRanger @DirectoryRanger]

Red Team Gold: Extracting Credentials from MDT Shares, by @Oddvarmoe
https://t.co/I3OqoU4NF6

[Dave Kennedy @HackingDave]

I'm happy to announce that I have officially been promoted to Founder and Chief Executive Officer (CEO) of Binary Defense. With the changes in the industry happening and the shift to artificial intelligence, I have been immersing myself relentlessly on how we innovate and move fast - a complete shift of our entire company. Over the past 12 months we have completely transformed our company to be the most advanced artificial intelligence cyber security company in the world.

We have taken MTTD and MTTR to times never thought possible before. Reduced false positives, increased true positives, and completely changed how we operationalize our MDR and product services as a company, and most importantly protect our customers. This journey was one of the fondest memories of my life, doing this with my team and one that is just getting started.

With these changes in mind, our board approved me as CEO of the company to drive this company even further during this transformational and historic time in cybersecurity. I want to thank the folks over at Invictus Growth Partners for the trust in me, my partner Mike Valentine, and to all of the amazing folks we have @Binary_Defense .

We truly are ahead in this field, innovating everyday, and protecting our customers 24 hours a day, 7 days a week, and 365 days a year.

#BinaryDefense