Paul Nevin

I'm essentially a mad inventor of all kinds of things. I love to read, experiment and fail... then repeat until I get it working.

[Paul Nevin @PaulJNevin]

@wan0net I remember watching one hacker group forum discussing using LOIC to DDOS a Government website. One of the group suggested they point it at the IP address 127.0.0.1. It was a quiet weekend for my IR team for once.

[Paul Nevin @PaulJNevin]

@4n6Bexaminer https://t.co/POtyvcnR9X

[Paul Nevin @PaulJNevin]

Three years of training paid off. 225Kg deadlift and PB. I never thought I’d be a gym guy but now I can lift heavy things. So grateful to Megan @ThriveTraining and the crew for support.

[Paul Nevin @PaulJNevin]

@wan0net I wonder if we can count the number of SOC analyst tears as a metric?

[Paul Nevin @PaulJNevin]

@shadowbIood Quick, turn them into NFTs.

[Paul Nevin @PaulJNevin]

Hacking an oil rig control system. This awesome model was online and being attacked by attendees at DEFCON.

[Paul Nevin @PaulJNevin]

Hacking car computers at DEFCON. Find an interface, fuzz it and see what happens. If you try at home make sure you pull over first.

[Paul Nevin @PaulJNevin]

Sadly the DEFCON tin foil hat contest proved tin foil can’t stop the alien implants inside your head from receiving instructions from the lizard people. Still, worth a try.

[Paul Nevin @PaulJNevin]

Hardware hacking village at DEFCON was fun. Making a simple circuit with copper tape that only conducts on one side was surprisingly tricky.

[Paul Nevin @PaulJNevin]

I’ve just discovered I’ll never be a physical security guy.

[Paul Nevin @PaulJNevin]

Hacking the Gibson at Bsides Vegas.

[Paul Nevin @PaulJNevin]

So exiting to be back at BlackHat after three years away. Give me a call if you are in Vegas, want a cold beer and to chat cyberz.

[Paul Nevin @PaulJNevin]

@4n6Bexaminer It could be worse. I’ve seen ransomware samples the play the Russian national anthem at full volume and demand US$20 in hard currency… or else.

[Paul Nevin @PaulJNevin]

@4n6Bexaminer You know the first rule of cyber fight club Bex!

[Paul Nevin @PaulJNevin]

@fumpT AliExpress. For all you insecure OT device needs.

[Paul Nevin @PaulJNevin]

Having fun at the Cyber Skills Challenge. I’ve currently got 25 hackers in my ‘nuclear reactor’ network. This is fine.

[Paul Nevin @PaulJNevin]

@4n6Bexaminer Send it my way if you need GPU cracking Bex. It would be a much better use of my crypto mining rigs. I once waited three months to crack a hash after building a rainbow table only to discover a hybrid dictionary attack would have got it in a few days. Lessons learnt.

[Paul Nevin @PaulJNevin]

@4n6Bexaminer @urlscanio Nice work!

[Paul Nevin @PaulJNevin]

@4n6Bexaminer @urlscanio Start mapping out those Bitcoin wallets Bex. It is amazing how much they reveal. I’ve tied them to multiple campaigns from what I thought were entirely different groups before. Let’s hope these guys don’t learn about Monaro.

[Paul Nevin @PaulJNevin]

@darrenpauli I tacked one group back to a Bitcoin wallet containing US$125m from one Oct ransomware campaign alone. Hope these guys choke on caviar and scratch the rims on their ill-gotten Lamborghinis.