Liam

Experienced sysadmin now cyber security consultant, pen tester & ethical hacker. Keen scripter especially in PowerShell and Python. Tweets are my own.

[Liam @OneLogicalMyth]

Get your early bird tickets now. BSides comes to Exeter!

[BSides Exeter @BSidesExeter]

Summer holidays? No, design the sponsor packs! Ok!! Drop us a DM, if you want to be on the list to see the packs first! #sponsorrrrrrrrrrrr

[TechExeter @TechExeter]

Eek, we've sold out of our early bird tickets for this year's conference! 🐤❌
We're running with a reduced upper capacity this year, so make sure you grab yourself a ticket! 🏃‍♀️🏃‍♂️

Speaker pages will start being published this Sunday.

https://t.co/jBkQWMhlAK

[Liam @OneLogicalMyth]

@RichBartlett @NCCGroupInfosec Glad you enjoyed it. Thanks for attending.

[Liam @OneLogicalMyth]

Don't forget badly configured permissions can sometimes allow read access to LAPS passwords. Updated my HTA shell to enumerate this for you.

https://t.co/UsZAffwfks

[Liam @OneLogicalMyth]

@PyroTek3 Compounded by software vendors assigning 'Domain Admins' as the administrators of the application. Ideally a new group should be created instead, so many applications just add in domain admins as the administrative group. They're for the domain not applications...

[Ollie Whitehouse @ollieatnowhere]

Software is used in Radar systems open to unauthenticated remote compromise in 2021. Our long tail of technical security debt is very real..

[NCC Group Research & Technology @NCCGroupInfosec]

Technical Advisory: Sunhillo SureLine Unauthenticated OS Command Injection (CVE-2021-36380) - Sunhillo is an industry leader in surveillance data distribution and this can result in remote compromise - by Liam Glanfield - https://t.co/CnubgCAAAR

[Liam @OneLogicalMyth]

@Greg_Dickinson @easyJet do you have any comment on this? Due to fly tomorrow. What have you been told?

[Liam @OneLogicalMyth]

@Greg_Dickinson Is this from the government? I see no official advice and due to fly tomorrow. Flights not cancelled either.

[Liam @OneLogicalMyth]

. @forwardmx_io is this actually you?!?!

I'm amazed at your email that I woke up to this morning. Furthermore the reset password link is actually an analytics link.

[Liam @OneLogicalMyth]

@ZephrFish The video demo of it too...

https://t.co/vgb6vbSZ9l

[Liam @OneLogicalMyth]

@ZephrFish It's a bit old but still functional with some tweaks if you want a local lab. Edit the XML files to how you want it structured etc. It was built for 2012 R2 at the time but in theory should work for 2016 I think...

https://t.co/8unFCMmjSU

[Paul Taylor @bao7uo]

Have published RedacTerm in case others find it useful. Allows you to edit terminal output ready for screenshots - highlight key areas and redact sensitive info.
https://t.co/Dt9RW3BpBh

[Liam @OneLogicalMyth]

Found some old code. During lockdown you might be wanting to dust off some old hard disks and sort those photos. Thought I would share my script. Uses a checksum to validate the copy or if it's a duplicate.

https://t.co/Z1vrqNCMQk

[James B @Unstable_Alpha]

Tomorrow's planned @DC441392 is still going ahead, albeit virtually via Zoom (and yeah, I know not everyone likes zoom). The meet is not being recorded, and has been secured. If anyone in my normal circle would like to hang out with us infosec types from 7pm, HMU for an invite

[Kurtis Baron @kurtisebearUK]

Something both Andrew & I feel strongly about is paying things forward. So if you are a business who has implemented work from home and a bit concerned about the potential security risks, Fidus will complete a FREE VPN Security review. https://t.co/Md3QegGeZ5

[Liam @OneLogicalMyth]

@switchsystems @rc55 Kris beat me to it. Thanks. 😎

[Liam @OneLogicalMyth]

Updated my HTA shell to support displaying file permissions. Hyperlink added to schedule tasks and file browsing to make it easy.

Also uploading and downloading files via HTTP. Saves having to use other tools that might be blocked.

@NCCGroupInfosec

https://t.co/UsZAffwfks

[Clint Gibler @clintgibler]

📚 tl;dr sec #12
* SameSite ☠️ CSRF
* @MITREattack Cloud Matrix
* @owasp Global AppSec Amsterdam vids posted
* HTA shell for breakout assignments by @OneLogicalMyth
* r/websecurityresearch from @PortSwigger
* @trailofbits Fall Update
and more!
https://t.co/cdMCtHfXXr