Two Seven One Three

Chief Security Officer (CSO) || Security Researcher

[Two Seven One Three @TwoSevenOneT]

@vxunderground 🤣

[Two Seven One Three @TwoSevenOneT]

Joe, IT guy, when scanning the entire internal network to find all running PHP web servers (following the boss’s order to patch the php2shell ):

A server named TEST-WEB-SERVER : no one knows which intern set it up or when

A server named PHP-CRITICAL-TEST: it’s been there since the previous IT guy quit 3 years ago

A server named INTERNAL-BACKUP : He know about it. It doesn’t show up in the scan results because last night he listened to the “security experts” and upgraded PHP from the ancient version to 8 and it refuses to start now

A typical victim of php2shell

[Two Seven One Three @TwoSevenOneT]

Keep your certificates safe, or one day they'll ruin you.

-----BEGIN EC PRIVATE KEY-----
4
-----END EC PRIVATE KEY-----
#eMudhra

[Two Seven One Three @TwoSevenOneT]

@ishola1807 @AJ_Daniel6 @Macfeecn I think it still works with W11

[Two Seven One Three @TwoSevenOneT]

*#Cybersecurity #Interview tip*

A bonus question I often ask candidates during interviews:

If you're in a room with a laptop that has a #Windows locked screen, and you're the only one there, can you unlock it and get to the Desktop? If so, how would you do it?

I've received quite a few very creative answers 😁

[Two Seven One Three @TwoSevenOneT]

@AveGaymers It’s just a ‘suppose’

[Two Seven One Three @TwoSevenOneT]

@CYBERCRIMEUNIT @Macfeecn Yep

[Two Seven One Three @TwoSevenOneT]

@513Cincy_ @Macfeecn You have physical access, Y're the boss

[Two Seven One Three @TwoSevenOneT]

@IntelStream No, just use Recovery Mode

[Two Seven One Three @TwoSevenOneT]

@DanMulvey Social engineering one

[Two Seven One Three @TwoSevenOneT]

@kaisernr1 👍

[Two Seven One Three @TwoSevenOneT]

@th4d1g1m0rtal No, only you. Except you are the ClickFix helpdesk guy

[Two Seven One Three @TwoSevenOneT]

@Natasp1n Yep, simple & easy

[Two Seven One Three @TwoSevenOneT]

@MarkSpars 🤣

[Two Seven One Three @TwoSevenOneT]

@ipurple Wait, elevated privileges? 🤔

[Two Seven One Three @TwoSevenOneT]

Waiting for the forensic guy with the coldboot kit 😂

[Two Seven One Three @TwoSevenOneT]

@AveGaymers This is the Redteam job

[Two Seven One Three @TwoSevenOneT]

@Grogu0x004 Nice approach 👍

[Two Seven One Three @TwoSevenOneT]

@jokes_jnp Just Redteam mind

[Two Seven One Three @TwoSevenOneT]

@dropthemNikes Yep

[Two Seven One Three @TwoSevenOneT]

@mrjoetate Yep, this is someone with experience