corey

Information Security Professional with 20 years experience in offensive security.

[Phillip Wylie @PhillipWylie]

My role was eliminated, and I'm in search of a new job.

[corey @corey_lebleu]

@statesman “retailers exploited the agriculture law to sell life-threatening, unregulated forms of THC”. I call bullshit and I have zero interest in using THC products. Legalize it.

[corey @corey_lebleu]

@rossin_victor @BriannaWu @RashidaTlaib Yes plz

[OccupytheWeb @three_cube]

Network Basics for Hackers, DNS and BIND: How it Works and How it Breaks #dns #bind #networkbasics #cybersecurity #infosec #CyberWarrior

https://t.co/hAd1DoFNAU

[Rachel Tobac @RachelTobac]

LinkedIn is now using everyone's content to train their AI tool -- they just auto opted everyone in.
I recommend opting out now (AND that orgs put an end to auto opt-in, it's not cool)
Opt out steps: Settings and Privacy > Data Privacy > Data for Generative AI Improvement (OFF)

[corey @corey_lebleu]

@SharkGoddess @PadreHooch I mean on their own time.

[corey @corey_lebleu]

AppSec Tip:

If you’re going to use a one time code for multi-factor authentication (MFA), make sure it’s secure. This can be done by generating the code using a secure random function (Cryptographically Secure Pseudo-Random Number Generator). #AppSec #infosec #pentesting

[corey @corey_lebleu]

AppSec Tip:

Always ensure your application gives a generic error message for failed login attempts. This will help prevent attackers from enumerating usernames that they could use to perform brute-force attacks.

#AppSec #informationsecurity #pentesting #softwaresecurity

[spencer @techspence]

#redteamtips

[corey @corey_lebleu]

I’ll be on it in 2 weeks! Talking social engineering, hacking stories, and more..

[Phillip Wylie @PhillipWylie]

In case you missed it, I launched a new podcast last weekend. I have three episodes available with new ones weekly. It’s available on @YouTube @spotifypodcasts @ApplePodcasts @amazonmusic and other platforms. Please check it out and subscribe! https://t.co/48erAYpWuH

[Jason Ostrom @securitypuck]

Here is a list of free Cloud Security learning labs. They include CTF challenges, guided vulnerability labs, and workshops. If you are new to InfoSec or trying to advance your skills in Cloud Security, check them out. A great way to learn is hands on keyboard skill development. Thanks to many of the authors out there who created these labs. @ryananicholson @sethsec @0xdabbad00 @Cyb3rWard0g @joshva_jebaraj
https://t.co/t4qycIM2bW
#azure #aws #gcp

[Tib3rius @0xTib3rius]

What's the worst tool in Burp Suite and why is it Decoder?

[corey @corey_lebleu]

This will be my first podcast with my good friend @PhillipWylie

[Phillip Wylie @PhillipWylie]

Episode 4 of the Phillip Wylie Show featuring @corey_lebleu drops Friday, May 19, 2023, at 8:00 AM Central.

[Mayfly @M4yFly]

AD Pentest mindmap upgrade :
Full version: https://t.co/hE0VKO5b2I

xmind version (slow, the map is big) :
https://t.co/D3Dck14tiq

Fell free to tell me what is missing !

[corey @corey_lebleu]

@PhillipWylie @WWHackinFest Awesome! Congrats!

[corey @corey_lebleu]

@PhillipWylie @hackinthebox Awesome! 👏

[Justin Elze @HackingLZ]

Two of the most seemingly obvious things have made the biggest improvements on how we red team here. Standardizing sharing of notes/techniques/etc in Obsidian and having consultants debrief the entire red and research teams after every engagement is complete.

[Neil Gaiman @neilhimself]

There's only one kind of people who would vote to ban Maus, whatever they are calling themselves these days.