Michael Oglesby

Chief Hacker @large_org | For 100pts: Hack the ____! | Recovering pentester

[Michael Oglesby @darkstructures]

@nickvangilder 😂 So true

[Michael Oglesby @darkstructures]

@HackingLZ I use the Offsec material as the basis for a college course I teach on pentesting. I always liked using the exploit writing as a general knowledge section on how some exploits work but always prefaced it with the fact that you do very little exploit dev during most pentests.

[Michael Oglesby @darkstructures]

@chompie1337 @fede_k @halvarflake Are you sure. Sean's results are scary good. https://t.co/KTT4ANd97e

[Michael Oglesby @darkstructures]

@nickvangilder Totally agree with these points. Technical testing is only one part of penetration testing and the part most likely to get automated away, with or without AI. Automated pentesting solutions have been around for years now. Showing real value is more important than ever.

[Michael Oglesby @darkstructures]

Truth. Having spent years coding apps, tuning FreeBSD server fleets, building AD, and configuring cloud has 100% made it way easier to find vulns.

[nyxgeek @nyxgeek]

If you want to be a better hacker, be a developer. Be an admin. Set up infra. Build coding projects. Make an app that writes to a db. Or stores cookies. Or performs auth. You will find it easier to spot the cracks and failure points in systems once you have set them up yourself.

[Denis Laskov 🇮🇱 @it4sec]

Gone in 61 seconds.

The keys were left near the front door.

[Michael Oglesby @darkstructures]

@sibusisosishi @DebugPrivilege We’ve also done it like this before. Client requested the data not leave their environment. The domain was a legacy environment that had no password complexity requirements. The client wanted to see how much of a risk it was before deciding how to handle the legacy environment.

[Lisa Gilroy @TheLisaGilroy]

To my followers: do better

[Michael Oglesby @darkstructures]

Thanks to @dglover and @ElJefeDSecurIT for the retro #clippybadge hardware ctf. Won a Flipper Zero! Hacking an Altair 8800 via Azure Sphere IoT. #DEFCON #DEFCON30

[Eun @LostThingy]

destiny 2 but bugs
#Destiny2 #Destiny2Art #HollowKnight

[Michael Oglesby @darkstructures]

@aionescu 4th edition still going strong. Never know when I need a refresh on Windows server 2000 internals

[Michael Oglesby @darkstructures]

@stevemk14ebr @malwareunicorn So it’s not just me!

[Michael Oglesby @darkstructures]

#destiny2 commission of my Warlock by @orcatcatz #Destiny2Art @Bungie

[Michael Oglesby @darkstructures]

@sawaba Also requires you to trust that your organization installed, configured, and is managing it securely.

[BSIDESOK @BsidesOK]

BsidesOK 2021
@bsidesok. https://t.co/naCGcNtpnA
April 30 - Conference. April 28-29 training. Registration is OPEN! Note on registration— Pay if you can! If you can chip in 10 bucks to help out, then great. If not we have a discount code on the order page

[nickharbour @nickharbour]

Pre-Registration is Live! https://t.co/Z2kh6nygSS Reserve your username now. #flareon7

[Jack Halon @jack_halon]

Alright everyone, let's have a quick conversation about Red Teaming. Because honestly, some of you (actually a lot of you) who want to be a part of a Red Team and are taking courses or are actually a part of a Red Team actually don't fully understand its main purpose. (1/n)

[Michael Oglesby @darkstructures]

Wrapped up challenge 12 completing #flareon6. Thanks to the FireEye Flare-On team for some great challenges this year.