Chosen1

InfoSec Admin and Defcon Goon

[Chosen1 @chosen1x]

@lintile @HackerJeopardy Everybody needs Pizza. At this point pizza is practically a basic human right. ;-)

[Rad @rad9800]

I figured out a new way to **completely** disable certain EDR products only with Admin privileges in less than 30 lines of code with native applications.

It works by deleting critical application files before they can do anything 🙃

A link to the GitHub repo with a PoC follows.

[Chosen1 @chosen1x]

@Grifter801 @shmoocon Just wow... another part of the lexicon fades into bit rot.

[NFL @NFL]

On the 21st anniversary of #September11, fans at MetLife honor and remember with a rousing rendition of the National Anthem. 🇺🇸

[Donie O'Sullivan @donie]

Lots of allegations -- here's the full story:
https://t.co/rKDIlQeMXa

[Chosen1 @chosen1x]

This is an amazing example of good communication.

[Chosen1 @chosen1x]

@tsrous @Alra3ees Nmap Scripting Engine
https://t.co/CH0O24F1oz

[Chosen1 @chosen1x]

@hackerbae_ Congratulations!!

[Chosen1 @chosen1x]

@Beaker Congratulations! Wish you the best to help build the structure that defends the privacy of us all.

[Rizin @rizinorg]

We are excited to announce Rizin — a free and open-source Reverse Engineering framework 🎉
Rizin is a fork of radare2 focusing on usability and stability and strives to provide a welcoming environment for developers and users.

Our official announcement >> https://t.co/mZ4OuQbkpj

[Chosen1 @chosen1x]

An American hero and icon has ascended into the great unknown.

[U.S. Air Force @usairforce]

World War II ace. Aviation pioneer. A giant within the Air Force.

Join us in celebrating the extraordinary life and mourning the loss of Brig. Gen. Chuck Yeager. May he rest in peace and his legacy live on forever.

[ROBERT SOFIA @robertsofia]

Many people aren’t the best version of themselves right now.

2020 has been hard (understated).

Let’s cut one another some slack.

It’s a good thing to do.

[Jon Hencinski @jhencinski]

NOT a #twitter hot take but a #mindmap for detection and response in #AWS from the team @expel_io

How to interpret 🤔:
- Based on #CloudTrail logs
- ATT&CK cloud matrix technique
- Mapped to AWS service(s)
- Mapped to common API calls we've seen used by #redteam and attackers

[Dave Kennedy @HackingDave]

I am going to speak in a probably very unpopular consensus here. Please understand that this is me speaking in what I know and the research I’ve done and I am in no way equipped to make decisions. I initially viewed COVID-19 as not that serious which was obviously misinformed.

[Chosen1 @chosen1x]

Have to question the use of digital signage for this very reason.

[Chosen1 @chosen1x]

@IanColdwater I have you in my feed.

[Chosen1 @chosen1x]

@JuniperNetworks Any comment on this CVE?

[Hot Fiendish Dr. Noid Summer @_noid_]

Remember back in 2010 when FB had that issue where anyone could add you to groups without your permission and it didn't get fixed till Zuck got added to a NAMBLA page? Well, Keybase has a similar issue unfolding now in 2019. https://t.co/UYomovCiwz

[Nick Carr @ItsReallyNick]

Attackers can check your security visibility faster than you can configure it.

Here's an UNC group we track 😉 using Outlook home page (CVE-2017-11774) to check the target's attack surface and process creation & PowerShell event visibility - then sending it to domain-fronted C2.