Michael Kruger

Security analyst.
Random code bits at

[Michael Kruger @_cablethief]

@Defte_ @stratosberry @snovvcrash @al3x_n3ff @Disgame_ It would be faster to generate it on the gfx card. As if you were regenerating the table.

[_leon_jacobs(💥) @leonjza]

The fact that @AndresFreundTec didn't just write the whole xz thing off as "It's probably DNS" is honestly amazing.

[_leon_jacobs(💥) @leonjza]

Had a blast climbing Norwegian 🇳🇴mountains with some amazing people, @oleavr and @_cablethief !

[Cory Doctorow NO LONGER ON TWIT TER @doctorow]

My next book is *The Internet Con: How to Seize the Means of Computation.* It's a recipe to disenshittify the web and bring back the old good internet. The book is from @VersoBoooks, but the #audiobook is from me - because Amazon refuses to sell it:

https://t.co/nO3PlhCF6l

1/

[Matt Linton @0xMatt]

Every once in a while I'm reminded that dnsmasq, a lightweight DNS and DHCP server that's bundled into *almost every IOT thing and Linux distro*, is a hobby project maintained by one guy in the UK named Simon.

Nobody pays him and he doesn't get near the thanks he deserves.

[Dominic White 👾 @singe]

A morning @defcon run with @_cablethief and Jaco to The Mill (for those who remember Defcon at the Riv). Even met @elkentaro on the way.

[Michael Kruger @_cablethief]

A quick Docker hostapd-mana RADIUS service for capturing creds using an external device:
https://t.co/wsN7GPEXsM
Bonus: Certificates with Lego and CF DNS are so convenient
https://t.co/c3JfQ4jB0V
Bonus Bonus: join us at BH for further WiFi shenanigans
https://t.co/cvsSO2vTXW

[Michael Kruger @_cablethief]

Excited to teach wireless hacking and try to convince more people that using wpa_sycophant is easier than it seems (most of the time 😝).

[SensePost Training | Orange Cyberdefense @sensepost_train]

The airwaves are constantly abuzz with signals.📶Wondering how to make sense of the 2.4 & 5GHz Wi-Fi frequency ranges?

Come join our esteemed Wi-Fi training at #BlackHatUSA

Visit https://t.co/9NPLNpbmD3 for more info on the course & for bookings
🐦 Early bird tickets end 26 May

[Orange Cyberdefense's SensePost Team @sensepost]

The RID500 Admin account doesn't benefit from Protected User Group restrictions. This is a MS WONTFIX & means you can authenticate as Admin using RC4 KRB or perform any KRB delegation attack if you impersonate the RID500 Admin. The latest find by @Defte_

https://t.co/27D3QWnQBD

[Dominic White 👾 @singe]

Another 0xC0FFEE session tonight with two guest speakers:

Jeandre Mitton talking about using Pre/Post Scripts with Postman for CAPTCHA bypass
and
@leonjza talking about the LightNeuron malicious mail transport agent he built for MITRE ATT&CK purple teaming.

1/2

[Orange Cyberdefense's SensePost Team @sensepost]

Struggling to proxy your offensive tools (*cough, Windows, cough*)? See how @_cablethief uses WireGuard and tun2socks to make remote networks available via a network route (from any device or container), over SOCKS! https://t.co/6nflVJ3poF

[Dominic White 👾 @singe]

Yeah! @defcon wifi fixed this. Plus wpa_supplicant can do leaf cert validation these days too!

[Michael Kruger @_cablethief]

@singe XD

[Michael Kruger @_cablethief]

@singe Specifically PPTP and SSTP

[Michael Kruger @_cablethief]

Finished showing off ppp_sycophant to @athackcon arsenal. Really enjoying the conference and Saudi!
@ToolsWatch
https://t.co/lceTS8NcPf

[Jason Spencer @BreakerOfSigns]

The crew! @athackcon has been amazing. Saudi has been amazing. Training's pretty darn good. Conference has a great line up. Jason is one happy dude. Thanks @sensepost_train @orangecyberdef @sensepost @athackcon @SAFCSP

[Ulrich Swart @x_ulla]

Good luck to all the trainers at @athackcon in #SaudiArabia!

To the @sensepost crew - may it be a great kickstart to getting back to in person training. Smash it!

#atHackcon #BlackHat #orangecyberdefense

[Michael Kruger @_cablethief]

Awesome! My two tools berate_ap and wpa_supplicant have made it into Kali :D!
https://t.co/x7X7Qmt9X2

My writeup from 2019 for some context:
https://t.co/KSCVYH2Tq8

[Dominic White 👾 @singe]

🎉We're super excited to publicly release assless-chaps, our super fast MSCHAPv2 cracking tool https://t.co/R46ZFwhdRI

Our DEF CON @rfhackers Village talk with @_cablethief & me explaining it is out https://t.co/6WVWWQ5wzD

Our new hashcat modes 27000/27100 have been merged too!

[Michael Kruger @_cablethief]

@markgamacheNerd @singe @rfhackers For both MSChap and NTLMv1 they crack exactly the same, so it should work for both I believe