Oliver Morton

Offensive Security R&D, Pen Tester.
On my continuing mission to replace myself with a small script. He/Him

[Oliver Morton @grimhacker]

[Blog Post] Using mTLS with Chromium headless mode https://t.co/qDmhuEpWWM

[BSidesLeeds @BSidesLeeds]

You might have seen our very talented photographer Dragan Butkovic taking photos as the official photographer for BSides Leeds.

You can see these here - https://t.co/QAc430oGkz

Dragan isn't on Twitter but is on https://t.co/Y7e6O639aX

[Oliver Morton @grimhacker]

I had a great time at @BSidesLeeds 2024! It was a privilege to deliver a talk, and I hope everyone enjoyed it. As promised my slides are published here: https://t.co/wXQLmiyHCG 😃

[Oliver Morton @grimhacker]

@TimmehWimmy @_dc151 Are you after "the pentest went badly for the pentester" or "the pentester had a great time but the blue team had a little cry"? 😆

[Oliver Morton @grimhacker]

@pentestmatt @InfosecChlobo Her knowledge of autism support services is a bit out of date, she's suggested looking at https://t.co/x41iS7G1NT for available support. Hope that helps

[Oliver Morton @grimhacker]

@TeamYouTube the app crashes on my LG TV every time an Ad plays, it's now been happening for weeks and reinstalling the app had no effect. Is this a known issue? Any fix?

[Oliver Morton @grimhacker]

@roachy I still recon you are mental, but I hope you enjoy it anyway! 😆

[Oliver Morton @grimhacker]

@_SecurityPanda_ @_dc151 @mintynet Shame you broke the car taking that photo! 😉

[Oliver Morton @grimhacker]

Exploiting NGINXDay2022 Blog Post and Slides following my talk at @_dc151 😁
https://t.co/lc8punoHyE

[\newcommand{\femb0t}{ @__femb0t]

lmfao

[DC151 @_dc151]

Thanks for some great and engaging talks tonight from @grimhacker and @danielperezcas8 !!! Lovely to see a good turnout too and see you all next month!

[DC151 @_dc151]

Second up @danielperezcas8 on the topic of 🎣ing!

[Oliver Morton @grimhacker]

@GlennPegden @_darrenmartyn CVE-2022-1388 unauth rce in the management interface from what I've gleaned. 2 different orgs claim to have a poc, no public poc I've seen yet.Expect it will drop sometime this week.

[DC151 @_dc151]

First up is @grimhacker with “NginxDay2022” - covering the recent Nginx auth ldap vulnerability; and discovery & exploitation thereof

We then have @danielperezcas8 with “Internal phishing with Microsoft 365 Defender, and how catch some credentials"

[Oliver Morton @grimhacker]

not that I'm competitive... but I did try and count and use a calculator.... @RefillandG

[DC151 @_dc151]

🚨CALL FOR SPEAKERS!🚨

We have space for 2 speakers/demo’s on Weds 11th May in #Leeds.

All options considered 😊 If you just want a platform to chat #security, present some work, demo some soft/hardware, or something else, we are open for speakers

Get in touch via DM 🙏😊

[AppCheck NG @AppcheckNG]

SECURITY ADVISORY

“NginxDay”: NGINX LDAP Reference Implementation Zero Day Vulnerability

We have detailed the zero-day and relevant mitigation here:
https://t.co/kpyddUvASD

#SecurityAdvisory #ZeroDay #NqinxDay

[Oliver Morton @grimhacker]

@mlgualtieri @TimMedin Interesting. I'll have to check what version I tested against. Thought I pulled the latest image.