Matt Johnson

Senior Training Architect at @SpecterOps

[Matt Johnson @breakfix]

Check out our two part blog series with @unsigned_sh0rt following our BlackHat EU talk

[SpecterOps @SpecterOps]

Wanting more from today's #BHEU talk on SCOM? Check out this two part blog series!

1️⃣ @unsigned_sh0rt maps SCOM’s roles, accounts, & trust boundaries, then shows how attackers can chain insecure defaults into full management group compromise. https://t.co/Ai4TqTtc4O

🧵: 1/2

[Elad Shamir @elad_shamir]

I published a new post about SPN-jacking - an edge case in WriteSPN abuse (pun intended).

Check it out:
https://t.co/TDPQdSdShm

[Matt Johnson @breakfix]

Check out my latest blog post detailing the "Airstrike Attack" allowing for FDE bypass and EoP on domain joined Windows workstations (CVE 2021-28316) https://t.co/NlQYhMtX6p