Stuart White

I break into things. If I'm on your network I'm Domain Admin. CWSP, OSCP, OSWE, OSEP, CRT, CTM, CRTO

[Stuart White @White_Fi]

@TrooliFibre @nemesis_dazza At least it’s not 72 hours like our area. Extremely poor

[Stuart White @White_Fi]

@mrgretzky Looking forward to this! 👌

[Stuart White @White_Fi]

@root_tanishq Seen it far too often. In fact I once tested an NHS trust. Found /sms. Turns out it was unauth page to sms logs. Typical used for patient booking conf but also OTP sms for staff.

[Stuart White @White_Fi]

@JackRhysider MS Clippy! Where did it go 😢

[Stuart White @White_Fi]

@bug1ess @XssMice @p3n73st3r Enable intercept response in the settings

[Stuart White @White_Fi]

@pry0cc You’re looking for the wrong product.

[Stuart White @White_Fi]

@FlyingPhishy @zyx2k Amen to that!

[Stuart White @White_Fi]

@dcuthbert 😂

[Stuart White @White_Fi]

Eurgh! 😒 it’s been days now!! When is that DB going to be fixed? Also please stop using Server 2008! It isn’t supported by MS. Don’t get breached. I hope you have an extended support contract with Microsoft. ⁦@PlacesLeisure⁩

[Stuart White @White_Fi]

@PlacesLeisure Any ETA on when this might be back up? Also running on a web server no longer supported by Microsoft 😣 I hope it’s in an extended contract and regularly patched

[Kuba Gretzky @mrgretzky]

BREAKING: Evilginx 2.4 "Gone Phishing" update is coming SOON! 🪝🐟

This will be a big one with lots of new features. I'll be posting more info about upcoming goodies in this thread!

Old dog is about to learn some new tricks.

All aboard the hype train! 🚂

[Allison Husain {@[email protected]} @ezhes_]

New vulnerability disclosure on my blog! The Confused Mailman: Sending #SPF and #DMARC passing mail as any #Gmail or #GSuite customer https://t.co/2X9HQkmGpk #infosec

[Stuart White @White_Fi]

@UK_Daniel_Card 😂

[Stuart White @White_Fi]

@GossiTheDog @UK_Daniel_Card He’s a skid that managed to get a PT job, popped a shell via ms17-10. Dumped the DA creds, set off alarms all over the network and everyone is praying he leaves quickly and quietly before more damage is done.

[Stuart White @White_Fi]

@theresecoffey @EastSuffolk Actively encouraging this will only increase R. Shake my head. Unreal!

[Stuart White @White_Fi]

@SkyHelpTeam Haven’t tried. I’m not a key worker. Are you suggesting I can say yes at this point to join the call que?

[Stuart White @White_Fi]

@SkyUK How can i contact you if I'm not a keyworker and your online engineer booking system is down?

[Stuart White @White_Fi]

@SkyHelpTeam Yeah but when I call unless I say yes I am a key worker it puts through a system and says book online

[Stuart White @White_Fi]

@SkyHelpTeam Says online booking is unavailable and to call. But can’t get through to anyone unless I state I’m a key worker. Which I’m not.

[Stuart White @White_Fi]

@UK_Daniel_Card It was terrible.

[Stuart White @White_Fi]

@UK_Daniel_Card Kid you not I was spraying an open NTLM dir the other month with statistically common usernames and hit a success. Checked the creds on an open RDP and the account was DA. 😑🤦. This was LARGE firm