Matteo Graci

[Nicolò Zuliani @NicoloZuliani]

Ma cos’è successo a #cashortrash ? Sembra abbiano messo la regia e la fotografia in mano a mio cugino

[Matteo Graci @foolteo]

@UK_Daniel_Card So the VM has access to a different network adapter than the host? Help me understand the context: because it seems to me an encapsulation trick, as far as I can tell…

[Matteo Graci @foolteo]

@UK_Daniel_Card While doing tech support I learned A LOT from other people mistakes! Every time I was “hey, you’ve been able to do THAT? HOW?!? Please explain the exact command sequence…” and I received the best hacking lesson from the common user that hadn’t RTFM…

[Matteo Graci @foolteo]

@vxunderground But, why?

[Matteo Graci @foolteo]

@_CRUXNET @IceSolst Mac user since ‘04 here. Their “let’s make unix usable” approach is the best choice. Not always perfect cause every now and then apple needs to be apple - strange commands and workflows far from standard - but in the end, it’s a friendly Unix.

[Matteo Graci @foolteo]

@vxunderground @infrawatch_app There is also the article by Brian Krebs that is worth reading. The investigation was conducted in collaboration:

https://t.co/x3VUAqgA6A

[Matteo Graci @foolteo]

@vxunderground It seems clearer by the post that they have compromised Oracle Middleware, and that thing is widely deployed all around the globe. The screenshot is always the same, a GET request with command injection.

[Matteo Graci @foolteo]

@vxunderground It seems that they have some form of command injection in oracle middleware, via GET Request. In the first screen, you can see a developer tool of a browser reporting a GET on https://t.co/E1WGykLUoM with an executed “id” command in response…

[Matteo Graci @foolteo]

@UK_Daniel_Card I remember the delusion watching it first time. Love the saga, and I thought that 4 was the lowest point, until die hard 5…

[Matteo Graci @foolteo]

@cyb3rops The real question is if this really still works nowadays. A minimal signature evasion is enough to not get flagged by recent EDRs? Need to try!

[Matteo Graci @foolteo]

@RiccardoTrezzi @robpann @DeShindig Ma no, figuriamoci! Mai stato esperto di nulla, ma leggendo come funziona il metodo esposto da istat, il calcolo a prezzi costanti confrontato con quello a prezzi correnti non spiega le differenze, e servirebbe! Il limite di caratteri non aiuta, per voi massimo rispetto!

[Matteo Graci @foolteo]

@robpann @DeShindig @RiccardoTrezzi È il calcolo fatto a prezzi costanti, e usa come base arbitraria il 2018. Il calcolo a prezzi costanti non tiene conto dell’avanzamento tecnologico e della variazione della qualità dei beni, e andrebbe discusso.

[Florian Roth ⚡️ @cyb3rops]

This is a serious problem

I processed this report with IOCs today: https://t.co/1D91IrpCJc

[Matteo Graci @foolteo]

@malwrhunterteam The best thing is the sticker saying “apparato protetto”, that means “hardened device”.

[Matteo Graci @foolteo]

@lastknight Qui effettivamente un thread interessante, che tocca anche l’aspetto delle Internet personalities:

https://t.co/pN4XV76Apt

[Paul Anleitner @PaulAnleitner]

I don't study politics, but I do study culture, and here are some of the signs that a cultural shift has been brewing for years in America that most of the professional political analysts just completely missed.

Some of these may seem absurd, but hear me out. 🧵
We'll start with this one:

[Matteo Graci @foolteo]

@HackingLZ If some kind of policy review is in scope, I usually prepare a set of credentials retrieved that prove compliance/non compliance. Suggest force reset, and encrypted report. But I get the dissemination issue. Defaults are reported non redacted.

[Matteo Graci @foolteo]

One of the clearest analysis on the recent job market I’ve read.

[ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ @DanielMiessler]

💡We've Been Lied to About Work
My big, depressing, and optimistic theory for why it's so hard to find and keep a job that makes you happy

"If you’re like me, you’ve had this strange, uneasy feeling about the job market for a few years now…"

https://t.co/10RCNpfCpH

[Matteo Graci @foolteo]

@evilsocket Even better! Now I have to try the tool, I feel like it’s a moral obligation.