Payton Miller

Penetration Tester
I do phishing
Accidentally pushed functional code to production.

[Matthew Toussain @0sm0s1z]

Hey everyone! We're running our first ever @_OpenSecurity_ webcast tomorrow at 1300ET. Hope you'll join! This is a bit of a tech demo for us! Fingers crossed and chickens sacrificed!!!

https://t.co/Oi8FGKPSgr

[wei @XiaoWei___]

MSRC fixed a RCE bug in TCPIP module.
I found the bug several months ago.
Its score is 9.8 and exploitation is more likely. Please apply the patch immediately.

[Payton Miller @aLilSus]

@sans_isc @sloosecannon

[Payton Miller @aLilSus]

Holy Guacamole!
@_geoff_p_ can I borrow that guacamole vm snapshot for research purposes...

[mr.d0x @mrd0x]

Steal Credentials & Bypass 2FA Using noVNC

https://t.co/MUOEtUaKvH

[Justin Elze @HackingLZ]

InfoSec twitter im looking for a 5th step in my "QR code use for average humans"

1. Scan QR with dedicated QR burner phone(extract url)
2. Submit URL into a minimum of 2 website analysis sandboxes
3. Validate SSL cert
4. Check domain against CTI sources
5. ?????

[Tim Medin @TimMedin]

Teach a man to phish...

[Years Progress @YearsProgress]

░░░░░░░░░░░░░░░ 0%

[Payton Miller @aLilSus]

@Bugcrowd Happy Holidays. 👏

[Open Security Inc @_OpenSecurity_]

Missed out on the Holiday CTF or want to see the answer to a challenge that had you stumped? One of our winners @AzuleOnyx has a great write-up of their solutions for each step!

https://t.co/v7LRujZ35D

[Open Security Inc @_OpenSecurity_]

The Open Security Holiday CTF has finished! Thank you to all that came to enjoy the challenge. We've got so much more planned for 2022, so don't miss out! Join our Discord now and be ready for our next CTF.

https://t.co/5rdIc2LBdC

[Payton Miller @aLilSus]

🎄Check out our light-weight CTF, featuring 6 unique Christmas challenges. It's pretty hard to walk away from this one, without learning something new.

Interested in joining? Just join the Open Security Discord, https://t.co/W8HicxMYAO ☃���

[Open Security Inc @_OpenSecurity_]

With one week left, there's still plenty of time to join in the fun of our Holiday CTF! Join our Discord server and come test your skills with all the others going through the challenge!

https://t.co/5rdIc2LBdC

[Payton Miller @aLilSus]

TIL Chrome - Network tab can create properly formatted Web Requests for multiple platforms.

Seems like a great way to download files to Windows Server. Are there any better use cases that I'm overlooking here? @sloosecannon

[Open Security Inc @_OpenSecurity_]

The Holiday CTF is live! Click the link and hop in the Open Security Discord server to join the challenge. Good luck to everyone, we hope you have as much fun with it as we had putting it together!

https://t.co/5rdIc2LBdC

[Open Security Inc @_OpenSecurity_]

Ready for more fun from Open Security? We're excited to announce our Holiday CTF! Hop in our Discord and be ready for the challenge in December!

https://t.co/5rdIc2LBdC

[Payton Miller @aLilSus]

Step 1) 💻Become FBI/DHS
Step 2) ...❓
Step 3) 💰Profit!

[Spamhaus @spamhaus]

These emails look like this:

Sending IP: 153.31.119.142 (https://t.co/En06mMbR88)
From: [email protected]
Subject: Urgent: Threat actor in systems

[SANS Offensive Operations @SANSOffensive]

In this video, @0sm0s1z gives an overview of related content from his 6-day course, #SEC460. He addresses one of the most persistent, yet solvable, vulnerabilities that still poses a threat to enterprises: passwords. https://t.co/taxfL4FSwa

Learn more: https://t.co/kW5MhIt48L

[Payton Miller @aLilSus]

Encoding scheme slightly reminds me of Dots1n from Wild West Hacking Fest OS-CTF. 😉

[SANS.edu Internet Storm Center @sans_isc]

Obfuscated Maldoc: Reversed BASE64 https://t.co/koNdaZfDPV

[Payton Miller @aLilSus]

@0sm0s1z PSA: Don't forget to top off your headlight fluid before Winter.

[Payton Miller @aLilSus]

@chronicinquiry That's really cool! If you wouldn't mind, I'd love to read it, when your done. Always exciting to see other incites on potential resolutions to `unsolvable` issues.

[Payton Miller @aLilSus]

@HeyHelpDeskGuy Thanks, that is awesome to hear! What's your goto suggestion to users for avoiding, "Things that go bump in the night" (future talk idea 👀)...