David Medina

Hack your life ;)

Infosec n00b, drummer.

[Joseph Menn @josephmenn]

Really happy about the paperback version of Cult of the Dead Cow, which is out June 2, one week from today.

[Daniel Rodriguez @dvirus]

Programa Gratuito de Mentoría en Respuesta a Incidentes y Análisis Forense Digital https://t.co/j20g6lyAjd #DFIR

[luisrodevia 🏄‍♂️ @luisrodevia]

jajaja

[🇨🇴Aquí 🇨🇴Diciendo Cosas🇨🇴 @MemoriaPolitico]

Corte, corte que @ClaudiaLopez se enoja y nos quita mermelada. Mejor que nos dé la $$ a nosotros y no los realmente necesitados. @ZuluagaCamila

[Laura Medina Ruiz @LauraMedinaRuiz]

Yo si le pediría a @ClaudiaLopez que deje el show y nos cuente por qué el Secretario de Movilidad está por fuera del país y además desde Movilidad contratando por 5 meses a ex vice de transporte en época Odebrecht y pagándole 119 millones #ClaudiaSaqueAlSecretario

[David Medina @axqfrk]

@Netxing What a freaking tiny laptop

[David Medina @axqfrk]

Why is this just showing up?

[Internet of Shit @internetofshit]

why do ovens need a touchpad

[Graham Sutherland (Polynomial^DSS) ➡️ chaos.social @gsuberland]

That CSME bug is grim. It's in mask ROM on the PCH. Completely impossible to patch and requires hardware replacement. Yikes.

[Kelly Shortridge @swagitda_]

Quiz: is it an industrial band or an infosec startup?
Cloudkicker
Concentric
Ionic
Socioionic
A.P.T.A.
ACID Tech
Double Secret Octopus
Voxis
Valtix
Reveillon
Snyk
Namogoo
SteamShape
ScanX
Terminal Choice
Atakama
AlphaPoint
Binary Division
BitDam
X-Fusion
CygnosiC
Acunetix

[David Medina @axqfrk]

@philofishal @SentinelOne @patrickwardle This is awesome!!

[Clément Notin @cnotin]

🤔 Windows credential theft without Mimikatz, admin nor touching LSASS?
💡 Discover #Kekeo by @gentilkiwi to abuse CredSSP / TSPKG (RDP SSO)!

➡️ Read the article to learn how to exploit it & how to discover such dangerous configuration in your environment
https://t.co/LDGiOa4vgF

[Kevin Robertson @kevin_robertson]

Introducing InveighZero, a C# LLMNR/NBNS/mDNS/DNS spoofer/man-in-the-middle tool:
https://t.co/xMJ2ofSPFj
Bonus, also just released Inveigh 1.5:
https://t.co/drlzVj4R24
Stop by the @NetSPI #BlackHat2019 booth to learn more and get stickers😃

[DirectoryRanger @DirectoryRanger]

The Easiest Metasploit Guide You’ll Ever Read
https://t.co/SjNTY7zsnJ

[DirectoryRanger @DirectoryRanger]

Certificate Based Authentication In ADFS (Legacy And New) – The Complete Information To Get This Working
https://t.co/D5xMxea8cN

[DirectoryRanger @DirectoryRanger]

The worst of both worlds: Combining NTLM Relaying and Kerberos delegation, by @_dirkjan
https://t.co/pEgFxhRSmo

[The Haag™ @M_haggis]

https://t.co/AOn2oVB1rd: DNS based threat hunting and DoH (DNS over HTTPS) https://t.co/6tEKdE3Zpg

[Florian Roth ⚡️ @cyb3rops]

Note that @SOC_Prime's Threat Detection Marketplace (TDM) can also be very interesting

A) if you haven't any budget > many free / community rules

B) if you are a threat researcher with interest in an additional income > threat bounty hunter program

https://t.co/qU673QN3vl