Sergio dMN (aka KMS)

IT security enthusiast with a long way to go. Ocasional CTF player with @ronins_team. All that you can say is true, or even worse.

[Gryphus ☣ Mario @Grifo]

Tired of not understanding s**t about what calls your fav DApp is making? Decoding with cast commands? ABI-hunting on Etherscan?

Some time ago I released Web3 Decoder, a Burp Suite extension to make your life a bit easier.

I just released a big update!

https://t.co/I5gIqGFfPM

[Juan Garrido @tr1ana]

Happy to announce that a new version of Monkey365 is out. This new version adds a bunch of fixes and include a lot of new improvements, such as a new utility to register a Monkey365 application. Check it now!

https://t.co/LpNWW1SfNf

[Juan Garrido @tr1ana]

I'm very happy to announce a new release of #Monkey365! This new release contains a lot of improvements and fixes.
https://t.co/NmbsgNh0Nv

#cloudsecurity #azuresecurity #microsoft365security #office365security #hardening #PenTest #AzureAD #EntraID #CSPM #office365 #microsoft365

[Juan Garrido @tr1ana]

I'm excited to announce the release of a new version of Monkey365. Multiple bug fixes were fixed and feature enhancements were added. Enjoy!
https://t.co/2Nletwkfai

#cloudsecurity #azuresecurity #microsoft365security #office365security #hardening #PenTest #AzureAD #EntraID

[Lobuhi 🍉 @lobuhisec]

Participating as a speaker at #KubeCon #CloudNativeCon #OSSummit China 2023 in Shanghai has been by far the best experience in my IT professional career. I am pleased with the positive feedback from cybersecurity enthusiasts who chose to attend this presentation. Thx! 😘

[Juan Garrido @tr1ana]

New release of Monkey365!! v0.91-beta. New checks, support for CIS v1.5.0 and much more:

https://t.co/uM8Pb4CaZb

#cloudsecurity #azuresecurity #microsoft365security #office365security #hardening #PenTest

[Juan Garrido @tr1ana]

#Monkey365 dev branch has been updated, introducing a batch of fixes & improvements across the various modules. #Security #Microsoft365 #Office365 #Azure #Compliance #CSPM

https://t.co/NmbsgNh0Nv

[Juan Garrido @tr1ana]

Today I'm releasing a new major version of Monkey365. This new version adds a bunch of fixes and include a lot of new improvements to the core module.

https://t.co/NmbsgNh0Nv

#cloud #azure #azuread #microsoft365 #cloudsecurity #compliance

[ATTL4S @DaniLJ94]

After some months of very enjoyable research, I'm happy to release:

"Understanding a Payload's Life (featuring Meterpreter & other guests)"

Only slides are available at this time. You can find them at:

https://t.co/BPel37izzp

[Juan Garrido @tr1ana]

Working on the new version of #Monkey365. There will be a lot of new features like new rules, support for CIS 1.5 benchmarks, bug fixes and much more. Actually using it right now for bug fixes and other improvements.
https://t.co/NmbsgNh0Nv
#Azure #AzureAD #Office365

[Sergio dMN (aka KMS) @dmn_sergio]

Es vergonzoso que sea más fácil conseguir sangre de unicornio que cita en @MADRID para cambiar tu dirección en el padrón (trámite que además sólo se puede hacer de forma presencial). Eso sí, la gente del 010 @Lineamadrid majísima, es problema de recursos y procesos

[Gryphus ☣ Mario @Grifo]

Do you want to understand what your favorite DApp is doing? Which contracts are being called, and how?

I released the Web3 Decoder Burp Extension to make your life a bit easier!

Github:
https://t.co/I5gIqGFNFk

Post:
https://t.co/Z3eDkQ7kby

A little thread! 👇

[Juan Garrido @tr1ana]

Monkey365 is out!
Scan your #Azure and #Office365 environments to discover security misconfigurations.
https://t.co/NmbsgNh0Nv

[Daniel Romero @daniel_rome]

Glad to see our last research published! - Multiple vulnerabilities in Nuki smart locks (CVE-2022-32502-CVE-2022-32510) > https://t.co/ZE1ObBw5Nj /cc @NCCGroupInfosec @NCCGroupplc

[NCC Group Research & Technology @NCCGroupInfosec]

Technical Advisory - Multiple vulnerabilities in Nuki smart locks (CVE-2022-32509, CVE-2022-32504, CVE-2022-32502, CVE-2022-32507, CVE-2022-32503, CVE-2022-32510, CVE-2022-32506, CVE-2022-32508, CVE-2022-32505)

https://t.co/sAJeGJrITh

[Zugasti @irezugasti]

Me llaman “culofino” 🍑👸🏼 por decir que las butacas viejas y las estrechísimas habitaciones de un Hospital Público del sur de Madrid NO son condiciones dignas para una persona enferma y quien le cuida. Acompáñenme (ya que no puedo dormir) en este hilo sobre culosfinos y salud 🧶

[Rey Enigma @rey_enigma]

¡#SORTEO ENIGMÁTICO! 🙌🎉🥳

GANA este espectacular CONJUNTO #GAMBITODEDAMA (tablero + piezas) ♥️♟️

➡️Sigue a las cuentas @rey_enigma y @ChessIsArt
➡️Haz RT

🏅El ganador/a será anunciado el lunes 22 a las 19:00 h CEST

¡¡MUCHA SUERTE A TODOS JAQUETONES!! 🍀🤞

[Sergio dMN (aka KMS) @dmn_sergio]

Hola @pepeenergy llevo desde el dia 2 intentando que me deis de alta la luz y sigo sin noticias, creo que ya ha habido tiempo suficiente, no? Despues de más de 7 años con vuestro primo @pepephone la verdad que muy decepcionado, me planteo cambiarlo todo.

[NCC Group Research & Technology @NCCGroupInfosec]

Technical Advisory: Linksys WRT160NL – Authenticated Command Injection (CVE-2021-25310) by Manuel Ginés Rodríguez && Diego Gómez Marañón - won't ever be patched due to out of support.

https://t.co/G6ecWOuYuW