Guy_Incognito

Forensic Scientist, DFIR, Your Friendly Neighborhood Red Teamer, Certified Pilot G2 Tester - Lawful Good Human Sorcerer (5th Level) I'm Told

[Guy_Incognito @_guyincognito_]

@Jun34u_sec MS Paint and stick figures are my jam

[MalwareObserver @MalwareObserver]

🐛 VULNERABILITIES Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws — BleepingComputer https://t.co/pByQGb58iR #InfoSec #CyberSecurity

[Guy_Incognito @_guyincognito_]

For an internet-facing NGINX server:
- Keep ASLR enabled
- Use PIE-enabled binaries
- Enable stack canaries
- Keep SELinux/AppArmor active
- Minimize third-party modules
- Patch aggressively
- Use WAF/rate limiting
- Run workers with least privilege

[Guy_Incognito @_guyincognito_]

If ASLR is disabled in production, it usually indicates one of the following:

- Legacy technical debt
- Specialized operational constraints
- Temporary debugging
- Security immaturity
- A forgotten old tuning change from years ago

[Guy_Incognito @_guyincognito_]

@SwiftOnSecurity 5 mins on org policy. 10 is too lenient and allows us to slide into desks on red team engagements. New return to work environments and flex arrangements will only exacerbate this for adversaries.

[Guy_Incognito @_guyincognito_]

@vxunderground Damn interested even if I don’t win a free one

[Guy_Incognito @_guyincognito_]

@jonathandata1

[Guy_Incognito @_guyincognito_]

@SwiftOnSecurity https://t.co/vkTn3wSZG0

[Costin Raiu @craiu]

Here's my top 10 big "unattributed" #APT mysteries:

[wirefall (AKA Pwn Spice) @DHAhole]

The Ugly (2): A member of a startup incubator wanted to talk to me about AI pentesting. I told him if it's ML then it's probably written in R or Python. If it's AI, then it's in PowerPoint. He didn't get it. I explained. He walked away. Good luck with your automated pentesting!

[BSidesDFW @BSidesDFW]

Well this just got interesting!

Consider this our official call for training sessions?
Do you have formal content and hands-on exercises?
Send us an email with your class details.

#BSidesDFW now has opportunities for Friday Training/Classes.

[Guy_Incognito @_guyincognito_]

@WeDemMoez And I survived a hotel door attack and being electrocuted. I’m invincible

[Guy_Incognito @_guyincognito_]

@alt_bier Deep in the heart of Texas

[alt_bier @alt_bier]

Lets get this Texas hacker meetup started right... with a #badgelife badge drop!
First 5 people to find me and finish this phrase get a free badge "The stars at night are big and bright"...
#DEFCON30

[Guy_Incognito @_guyincognito_]

@SwiftOnSecurity All while slope skiing

[John [L0wD0wN] @CyberLowdown]

We are prepping for some @BSidesDFW presentations with our local @redsandbl4ck and @0isac0

[Phillip Wylie @PhillipWylie]

I started a new fundraiser for @InnocentOrg. The item is a @SchoolPwn Breach Mode hoodie. Buy a hoodie and support a great cause! The Breach Mode logo is on the back and #IAm4ILF and the ILF URL on the left chest.
https://t.co/GSksSnhQe9

[Guy_Incognito @_guyincognito_]

@brysonbort Graphics Settings: Low

[Shodan @shodanhq]

10 years ago @achillean launched the Shodan website! To celebrate a decade of discovery and growth we're going to offer the membership for $1 (marked down from $49) for the next 24 hours (0:00 UTC to 24:00 UTC): https://t.co/e6mRc8kQGt