Mike Weaver

I'm a Security Incident Responder, loving Husband, horse owner (3.5 🐎!), DEFCON Black Badge, and @801Labs member

[BSidesSLC @BsidesSLC]

Are you joining us for RedRocks?! Buy tickets here: https://t.co/keEUAlxlNz Wanna speak? Call for Content ends this Thursday, 11/9!

[Mike Weaver @_bashNinja]

@dgi_DE @defcon I missed the demo room too. Way more people in line that there were seats. Glad to see such excitement around very cool projects!

[adragos @adragos_]

Finished in 1st place at the Red Team CTF @ #DEFCON 31. @RedTeamVillage_

Started off playing the event solo, but I was joined in the finals by my fellow teammates from Team Europe, @sijsu and @s3np41k1r1t0 to get the win.

Thank you ThreatSims and @hackthebox_eu for the event!

[Ulf Frisk @UlfFrisk]

Snake Yara detections have been added to MemProcFS memory forensics! Detect snake implants and other evil (such as cobalt strike) in notime with MemProcFS FindEvil!

Thank You @msuiche 💙

https://t.co/inOM3l1GIF

[HackerCamp @_HackerCamp]

Can't wait to see everyone on Friday for LinuxCTF at @801labs #linux #ctf #dc801

[HackerCamp @_HackerCamp]

Join me next Friday at @801Labs for LinuxCTF!
https://t.co/hfKSjH1GsM

[Mike Weaver @_bashNinja]

@hashtopolis To learn a bit more about it, take a look at this reddit post:
https://t.co/5q3DV8LApG

[Mike Weaver @_bashNinja]

If you hadn't heard about this:

There is a debug build of some OG Xbox game that was found in an encrypted RAR. This password only took the small community less than a week to crack.

The @hashtopolis server peaked at 7517.92kh/s. That's equivalent to 75 Nvidia 3090 GPUs.

[DiscoStarslayer @DiscoStarslayer]

Cracked the steel battalion code :)

`xboxrecover` 😎 #steelbattalion

[Mike Weaver @_bashNinja]

@BsidesSLC Who is teaching this one?

[HackerCamp @_HackerCamp]

Join us in Moab Jun 23rd! https://t.co/NP5tPGTXip

[Patrick Wardle @patrickwardle]

Today, I went looking for love 💕🥰

I ended up finding (what appears to be) a new macOS backdoor/updater component: 'iWebUpdate' ...which has been around, undetected for 5 years! 🍎👾👀

Read:
"Where there is love, there is ...malware?"
https://t.co/f6ShhiTaMf

[Clint Gibler @clintgibler]

📚 FREE Offensive Security & Reverse Engineering Course

🗒️ Slides
https://t.co/ehiLeBwB44

🧪 Labs
https://t.co/ca3vdo5opV

📺 Videos
https://t.co/gGv8t9CAuR

By @binaryz0ne

#infosec #cybersecurity #pentesting

https://t.co/dbcQico3yI

[Mike Weaver @_bashNinja]

@defcon The end result was this!

We successfully MITM-ed the badge communication and were able to reverse engineer the badge-badge communication. We were then able to emulate the badges with Python.

[HackerCamp @_HackerCamp]

See you in Moab folks. Mark your calendars for June 23rd-25th!🔥

[CircleCI @CircleCI]

CircleCI Security Alert [4 Jan. 2023]

We strongly recommend all CircleCI customers rotate secrets stored on our system. Read more: https://t.co/fiB4PSXbiH

[Mike Weaver @_bashNinja]

@voldemortensen

[Mike Weaver @_bashNinja]

The @lmgtfy site is currenty dead. Their cert expired on Nov 21 and they use HSTS.

An era has ended.... or has it? Let's hope it comes back soon.

[Mike Weaver @_bashNinja]

@Zevlag @bettersafetynet It's Intel based and not a ton of cores.

[Ivan Kwiatkowski @JusticeRage]

I wrote an IDA plugin that queries #ChatGPT and explains decompiled functions. It's still very bleeding edge, but you can find the code here and try it out:
https://t.co/lEelTimzvt

(Yes, the video was performed on a very basic case for simplicity's sake.)

[Mike Weaver @_bashNinja]

I'll be teaching this tonight. Should be fun.

Everyone will be able to walk away able to scan for this exploit in their environment and then show how it can be weaponized to help give you the ability to patch for it.

[801 Labs @801Labs]

Today! We're gonna run thru Text4Shell and see what we can learn about it - Learn More https://t.co/lzhDHpx6Uv