ShellStorm

Computer security enthusiast and martial artist. I like to find holes in defenses and exploit them. OSCP, OSCE, CISSP. Adversarial Engineer at @Lares_

[ShellStorm @bhohenadel]

You had one job @Sportsnet ; provide a legal stream for Canadians for the game tonight. And you failed miserably.

[Anton @Antonlovesdnb]

Got a new blog out about detections and hunting in AWS Bedrock - definitely a new area for me to explore - learned a lot writing this one.

Also a tad bittersweet as this will be my final blog at Sumo - a new & exciting journey begins next week!

https://t.co/wg5yhiQmZA

[Lares @Lares_]

𝐇𝐨𝐰 𝐝𝐨𝐞𝐬 𝐬𝐨𝐦𝐞𝐨𝐧𝐞 𝐠𝐨 𝐟𝐫𝐨𝐦 𝐡𝐚𝐜𝐤𝐢𝐧𝐠 𝐗𝐛𝐨𝐱 𝐜𝐨𝐧𝐬𝐨𝐥𝐞𝐬 𝐭𝐨 𝐥𝐞𝐚𝐝𝐢𝐧𝐠 𝐫𝐞𝐝 𝐭𝐞𝐚𝐦 𝐞𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭𝐬?

Check The Security Repo podcast featuring @bhohenadel, a red teaming OG with a wild ride of a career! 📺 https://t.co/UE9tmGvrEi

[ShellStorm @bhohenadel]

@ZephrFish Ne pas de like, as they say in France.

[ShellStorm @bhohenadel]

If you're going to @AtlSecCon this week please find me and say hello. It's been a minute since I've been to a conference and would love to chat with InfoSec people in person.

[ShellStorm @bhohenadel]

@Antonlovesdnb @AtlSecCon Hopefully I can a chance to see you while I'm there 😉

[Wim Remes TR @wimremes]

Just heard an excellent consulting/offsec team lead became available for whoever is first. Feel free to DM for intros. This guy is fucking ace and will take your team to new heights!

[Lares @Lares_]

Lares' Managing Director of Security Services, Mike Guthrie, breaks down Lare's approach to this issue and how our team makes sure each other logs the heck off when they are on PTO…real PTO.

👉 Get the Security Week article here: https://t.co/4OEQiIQeli

[Lares @Lares_]

Look, we know you're not a therapist (unless you are, then that's awesome). But mental wellbeing in your security team? That IS your business. Overworked, stressed-out people make mistakes. And those mistakes can be way more costly than someone not responding to your slack

[Lares @Lares_]

Ready to see how the bad guys get in?

Don't miss Brendan Hohenadel, Adversarial Engineer at Lares, break down his techniques for breaching Fortune 100s at ATLSECCON. His talk, "How I Hack Into Fortune 100s", gives you a front-row seat to the hacker's mindset.

[ShellStorm @bhohenadel]

Great article by @seeonedave (@Lares_ teammate) about #azure hacks. https://t.co/1d1WebzTj5

[ShellStorm @bhohenadel]

@ZephrFish @seeonedave

[ShellStorm @bhohenadel]

@TenableSecurity @ZephrFish typo: should say "MORE critical than MS08-067". But I think my point was made: they are not remotely the same.

[ShellStorm @bhohenadel]

@TenableSecurity @ZephrFish I think alot of us have questions about the severity of the plugins....why not answer here so people here can see the logic of SSL 2 & 3 detection rating less than MS08-067 (9.4 according to https://t.co/5DsAKVvatN)

[ShellStorm @bhohenadel]

That is one fancy cyber security agency building

[ShellStorm @bhohenadel]

@jaysonstreet @ghostie_ There was supposed to be a picture.

[ShellStorm @bhohenadel]

@ghostie_ and I celebrating a good day, @jaysonstreet style.

[ShellStorm @bhohenadel]

@MrToph Work slack. Lots of added pressure on you to deliver, buddy.

[ShellStorm @bhohenadel]

@hacks4pancakes It's about 5 minutes old.

https://t.co/3bbklDof1l

[ShellStorm @bhohenadel]

@C0axx @hackerm00n Personal best was on a job with @ZephrFish. EA in 10 minutes due to it having a blank password....