Orange Cyberdefense's SensePost Team

Work like hell,
Share all you know,
Abide by your handshake,
Have fun. - Dan Geer

[_leon_jacobs(💥) @leonjza]

A clip introducing our new Binary Instrumentation with Frida course, aimed at getting you more comfortable with the @fridadotre ecosystem - coming to a conference near you!

More in 🧵👇

[Dominic White 👾 @singe]

In Portswigger's Burp I needed a way to do Match & Replace globally across all utilities, not just the proxy so I wrote an extension https://t.co/edljbzHYyH

[_leon_jacobs(💥) @leonjza]

Really excited to present this Frida training @1ns0mn1h4ck with @IPmegladon and myself! If you've dabbled with @fridadotre before, but want a practical learning opportunity to improve your usage and understanding, this one is for you!

[Orange Cyberdefense's SensePost Team @sensepost]

A huge post detailing the discovery of 6 CVE's, and another announcing pipetap, a new Windows named pipe proxy/tool!

[_leon_jacobs(💥) @leonjza]

Two blog posts just dropped - one with the details on the bloatware pwning shenanigans I was up to earlier in the year, and another on pipetap, a new Windows named pipe proxy/tool.

https://t.co/bmqZ9x3obQ

https://t.co/QD59sHpTEP

[_leon_jacobs(💥) @leonjza]

It’s almost time for my @BSidesCapeTown talk, and I’ve just open sourced pipetap. My Windows named pipe proxy & multi-tool. Excited to see what you do with it!

https://t.co/CbRiCletuR

[BSides Cape Town @BSidesCapeTown]

When Szymon Ziolkowski (@TH3_GOAT_FARM3R) turned his attention to OpenINTEL, he discovered a dataset with surprising power for recon, OSINT, and vulnerability research.

His talk Making OpenINTEL open up, is recon candy. So bring your notebook and your curiosity..

[Orange Cyberdefense's SensePost Team @sensepost]

https://t.co/Ywxtoqy9Xm

[Orange Cyberdefense's SensePost Team @sensepost]

Need to open doors from the outside without touching anything? Turns out thats possible with no touch sensors as @shifttymike details in his latest blog post. Link in 🧵👇

[_leon_jacobs(💥) @leonjza]

Landed a new gowitness release, this time focussing on performance! 🎉 v3.1.0

https://t.co/I3AWo060hM

[Dominic White 👾 @singe]

Anyone got a vulnerable Fortinet they can test this scanner against? https://t.co/QmZbRhEiyY

[BSides Cape Town @BSidesCapeTown]

A major upgrade for a major year.
@orangecyberdef went Platinum.

That’s right, they’ve upgraded from Gold to Platinum for BSides Cape Town 2025, backing the community harder than ever and helping us raise the bar for this year’s conference.

@sensepost

[BSides Cape Town @BSidesCapeTown]

A browser that reboots your machine? That’s not a feature, that’s Leon Jacobs’ kind of fun. In 7 Vulns in 7 Days, he unpacks a week-long dive through bloatware and bad privilege boundaries. Join him at BSides Cape Town 2025 for bugs, exploits, and a few laughs at vendor expense.

[BSides Cape Town @BSidesCapeTown]

Forget awareness training — Mooncake’s tackling phishing with Whack A Phish! Join Geoffrey Chisnall (@GeoffChisnall) at BSides Cape Town 2025 to learn real-world techniques for dismantling phishing sites.

[BSides Cape Town @BSidesCapeTown]

🧡 We’re proud to welcome @OrangeCyberZA back as a Gold Sponsor for #BSidesCPT 2025!

A long-time supporter of the local infosec community, they’re once again helping us create spaces to learn, connect and grow.

[_leon_jacobs(💥) @leonjza]

I've been hacking on a new Windows Named Pipe tool called PipeTap which helps analyse named pipe communications. Born out of necessity while doing some vulnerability research on a target, its been super useful in reversing it's fairly complex protocol. :)

[Orange Cyberdefense's SensePost Team @sensepost]

https://t.co/6Tj5nWnxE0

[Orange Cyberdefense's SensePost Team @sensepost]

Reverse engineering Microsoft’s SQLCMD.exe to implement Channel Binding support for MSSQL into Impacket’s https://t.co/w12YmS1m89. Storytime from Aurelien (@Defte_), including instructions for reproducing the test environment yourself.

(link below)

[Dominic White 👾 @singe]

@sensepost and https://t.co/r41vuiMbCg

[Orange Cyberdefense's SensePost Team @sensepost]

https://t.co/X1u2fLk9oK 💥

[Orange Cyberdefense's SensePost Team @sensepost]

Adriaan was struggling to get an interactive shell on the *nix application server he had popped, so he wrote a turn-based mini binary to give you a semi-interactive shell in restrictive environments. Writeup & code 👇🧵