c7c3r0

My opinion is my own || CRTO || BTL2

[c7c3r0 @Generic_Alias90]

@vxunderground Thank you Microsoft for giving us jobs!

[Stephen Sutton @fly_byguy]

This is how drone professionals from industry see (so called) ‘experts’.
It’s a global problem, but in Finland, the situation is getting out of control.

[LocoTacoTx @locotx_ftw_2002]

@zodttd Bug bounties never work. When you submit the company simply has to say "We know about that bug and working on it, but did not disclosed it to the public. Thank you" when in reality they didn't, but now they know, will fix it and don't have to pay.

[c7c3r0 @Generic_Alias90]

@nikhil_mitt What does it mean with OUR Digital Crimes Unit. They have their own army, like Arasaka?

[MagicSword @magicswordio]

Prevention has been a skeleton at the bottom of the pool for years. Nobody's been ready to have that conversation. We are.

Stop detecting the same attacks over and over. Detection is not a strategy. It's a Netflix subscription to watch the same problem on repeat.

[c7c3r0 @Generic_Alias90]

@vxunderground I have seen a large insurance company in my country removing MFA protections because "Production complained a lot". It is a thing

[c7c3r0 @Generic_Alias90]

@vxunderground MS went full Apple

[c7c3r0 @Generic_Alias90]

@shenetworks A non-compete clause means you can't get a job. If you can't get a job for X amount of time your employer should compensate you.. If they agree on the sum should be fine, otherwise you should be free to go wherever you want.

[Johnny Xmas @J0hnnyXm4s]

Keep filling your diapers about Mythos tho

[Mehmet Ergene @Cyb3rMonk]

Historical moment for red and blue teamers 🛡️
Azure Active Directory Graph Activity logs are now available🥳

[Panos Gkatziroulis 🦄 @ipurple]

🛠️ A modern Beacon Object File (BOF) development template designed to simplify the process of writing, compiling, and debugging BOFs.
✅ It provides a toolchain that allows developers to write code using standard C/C++ syntax, supports both GCC (MinGW) and MSVC (Visual Studio) compilers, and enables source-level debugging in Visual Studio. https://t.co/gZG0IbFBjz

[Lennie Budgell ❇️ @Bedrovelsen]

@ZackKorman

[Florian Roth ⚡️ @cyb3rops]

#Shittrix
https://t.co/8Kebq5Bw2M

[SEKTOR7 Institute @SEKTOR7net]

Remote EDR Discovery.

Methods for detecting remote EDR deployments without local agent presence, a post by Jonathan Johnson (@JonnyJohnson_ )

Source: https://t.co/7X3qwmrsEo

#redteam #blueteam #maldev #malwaredevelopment

[Jake Williams @MalwareJake]

Sad to see an org I was so involved with for so many years taking nearly $500k in blood money from ICE. Seriously disappointed with @SANSInstitute today.

I get that the economy is bad and sales are hurting. But taking money from ICE is *a choice*.
https://t.co/6qHotBZWC5

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[c7c3r0 @Generic_Alias90]

@techspence This is due to organizations offering pentests which are a nessus scan with a cracked pro version, a responder and becoming domain admin in 7 days. Then its up to you to remediate what nessus is reporting. SUCCESS! Oh, Throw a web app test to make it apealling. 20K $ :)

[c7c3r0 @Generic_Alias90]

@weezerOSINT @vxunderground Free users do not deserve any confidentiality XD !