Apstrusus

Polymath autodidact

[Apstrusus @apstrusus84]

There's a brighter future waiting for you friend. Just keep reaching for it.

Change takes time, and improvement is non linear. You will fuck up. You will fail. You will fall down. This is expected. You are imperfect. You are human. Allow yourself to be both.

None of these setbacks matter. Yes, maybe in the short term, but not for long. Your long term success will always be assured, as long as each time you fall, you get back up and just keep reaching.

There's a brighter future waiting for you friend. It's hand is extended. Grasp it. it's there for you. Waiting.

It always will be.

[Apstrusus @apstrusus84]

@t_f_bow @ThomasNuckles @billybinion Because it doesn't exist.

That's his point.

[Apstrusus @apstrusus84]

@vysecurity Once it works (DNS), test it against a dev Cisco/OpenDNS Umbrella instance.

Once you can consistently beat that, you are golden.

Oh, also complicated DNS tunneling frameworks are very useful (at much higher bandwidth) through DNS over HTTPS providers on more open nets.

[Apstrusus @apstrusus84]

You are not wrong though, the point of a DNS C2 is to get enough access to cross compromise and migrate elsewhere, hopefully with better, higher bandwidth channels. But if you have a single vuln into a DMZ host with hard network restrictions, DNS is a good bridge.

Oh. Forgot to say, bridge DNS traffic across multiple domains to increase throughput and make detection harder, and also try to avoid any keep alive or beacon traffic (I sometimes plan in 5-20 minute blocks and then exfil over blocks of hours). And goes without saying, everything you run has a cost, so keep any output filtered tight, and make sure every command is absolutely necessary.

Oh, and read the RFCS.

Happy hunting.

[Apstrusus @apstrusus84]

As an added fun pinhole com channel, application aware firewalls will generally allow 2-3 packets through while determining the protocol. If you start with a predetermined seed on both client and server, you can 'randomly' port hop, and use this as an underlying abstraction coms layer for more complex network traffic.

I'm fun at parties.

[Apstrusus @apstrusus84]

@i2cjak

[Apstrusus @apstrusus84]

@IAMERICAbooted Same

[Apstrusus @apstrusus84]

@elder_plinius

[Apstrusus @apstrusus84]

@encrypted_past @wesmarpl 🙏

[Apstrusus @apstrusus84]

@JerryByrd2176 @TheBrancaShow The knife would have to be >= 5.5 inches for it to be a felony (called a "location-restricted knife" in Texas law). The knife was reported to be 5 inches.

There are, however, conditions for self defense that may be hard to establish here, for the defense.

[Apstrusus @apstrusus84]

@OmaHawkeye03 My female companion decided to watch it and dragged me along. The only time she laughed was when Hannah said her knees look like Voldemort, and I responded with "yes, that's what happens when you stuff cankles into control leggings".

[Apstrusus @apstrusus84]

@DieselDog82 @ChadBrooker88 @fightformetcalf Neither is required for murder one in Texas, although generally that is what 'murder in the first degree' means.

[Apstrusus @apstrusus84]

@deadvolvo God's work friend.

[Apstrusus @apstrusus84]

@SqSehrish 41

[Apstrusus @apstrusus84]

@thegrugq How hard is it to write your OWN 280 characters?

[Apstrusus @apstrusus84]

@mr_jay_pea @SaveStandard

[Apstrusus @apstrusus84]

@5mukx @vxunderground I'm sorry.

[Apstrusus @apstrusus84]

@HackingDave I want to be thoughtful and precise here.

I can’t help you forcefully have sex with those guys. That’s against my values.

What else can I help you with?

[Apstrusus @apstrusus84]

@esrtweet 'ungrounded abstractions chasing themselves up their own asses.'