tv

dad • social engineer • director • hacker • R&D

[tv @TimVivian]

Happy Fathers Day to all the dads
Been (still) waiting for over an hour and 20 minutes for my @bostonpizza take out in London. Another chain down.

[ic0n @hackByNumbers]

As relevant as it’s ever been.

#log4j #Log4Shell

[tv @TimVivian]

Great analysis and mitigation strategies👌

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

Just got off phone with a client. Log4j is in their network. Vendor claims patch will be available next release... which is multiple months from now.

Here's what you do if you're in this situation.

1. Keep calm. There's no need to panic.
2. Carefully read this thread.

1/?

[Picard Tips @PicardTips]

Picard management tip: Give the most interesting assignments to other crew members, not yourself. That's how people stay engaged.

[Lillie E. Franks, on her bad content arc @onyxaminedlife]

I apologize for not responding to your e-mail sooner. One day all of us will have to convince ourselves we spent the gift of time on earth well.

[tv @TimVivian]

@indi303 SpecOps, nFront and Anixis have solid products 👌👍

[Justin Elze @HackingLZ]

That 1% seems to be popping up a lot lately

[Justin Elze @HackingLZ]

The strangest thing about InfoSec is companies being obsessed with SSL/TLS issues often times worrying about impractical theoretic attacks on websites that host static content with no logins/sensitive data vs doing something like disabling macros.

[Florian Roth ⚡️ @cyb3rops]

#ZeroTrust

[Picard Tips @PicardTips]

Picard management tip: It's rarely about you.

[Kostas @Kostastsale]

Detecting CVE-2021-40444:(invocation via control.exe)

➡️Parent Process: “*\control.exe”
⏩Parent command line: “*.inf *”
➡️➡️New Process name: “*\rundll32.exe”
⏩⏩Command line: “*.inf *”

[Ben Goerz @bengoerz]

I don't think InfoSec Managers or HR realize how rapidly salaries are changing right now.

A friend of mine took a new job <1 year ago for 25% more pay, and just got a new offer for >75% more pay than that. Same specialty. No relocation.

[Jason Lang @curi0usJack]

Initial recon steps from Conti CS manual. Literally the first commands in the manual. This should bring comfort to any org that has prioritized pentesting/detection engineering to any degree.

[Charlie Bromberg « Shutdown » @_nwodtuhs]

Here is a first draft on an NTLM relay mindmap 🙂 from authentication coercion to post-relay exploitation. I'll gladly update/correct it if you think there are things wrong or missing.

➡️Featured on The Hacker Recipes https://t.co/0y4cOkMcTb

[Matt Soseman @SosemanMatt]

The Incident Response Hierarchy of Needs by
@MSwannMSFT https://t.co/c5WYrVloMG

[Charlie Bromberg « Shutdown » @_nwodtuhs]

Active Directory ACEs abuse mindmap

[dylan @_batsec_]

I'm releasing my tool to exploit AD CS relaying. It will automate most the steps required for both local and domain privilege escalation. The images below show how it can be used to get a beacon as system on a domain controller.

[Chris Herd @chris_herd]

I've spoken to 2,000+ companies over the last 12 months about their plans for remote work going forward

Here are a few things I've learned

[ a thread ] 💻🏠🌍

[Picard Tips @PicardTips]

Picard management tip: Don't assume anything is possible or impossible until you've asked the people who will be doing the work.

[Bryce @bryceabdo]

classic