Chris Hatton

Cyber Security Consultant and Researcher. ex @dmuhackers chairman. OSCP, CSTL INF

[Chris Hatton @hattonsec]

The post also covers what happened once it became public, how quickly things escalated, and why https://t.co/Tb4NHNRqhC didn’t stay up for long after that.

[Chris Hatton @hattonsec]

Remember the https://t.co/Tb4NHNRqhC saga from about a year ago?

I’ve finally written it up. The findings include LinPEAS being run as root, during active pentests, on compromised web servers, and even on live production systems.

https://t.co/srjv1H542E

[Chris Hatton @hattonsec]

@yaelBro56836079 Very true, but those boxes don't have outbound Internet access so I never would have known if the script was ran on those.

[Chris Hatton @hattonsec]

@MaddStep The hundreds of people a week that ran the script I hosted on the domain thinking it was the real script says different.

[Chris Hatton @hattonsec]

@MDGILHESPY @techspence You're late to the party, check the website

[Chris Hatton @hattonsec]

@ippsec @bravesalad1021 Correct, that was everything I was collecting. And you're right, it was a bit of research for a talk at a conference.

[Chris Hatton @hattonsec]

When doing HackTheBox and searching for linpeas I used to type https://t.co/Tb4NHNQSs4 into my browser intending to search google for it, however it would take me to an unregistered domain. I registered the domain in December and I am now getting 1.8k unique hits a month.

[Chris Hatton @hattonsec]

Looking forward to this! #FalCon #Crowdstrike

[CrowdStrike @CrowdStrike]

📣 The Fal.Con 2024 session line-up is here. We have 200+ sessions this year, including:

⚡ How to Win in the Age of AI-Fueled Adversaries

☁️ Strengthening Cloud Security: Beyond Compliance in the Age of Persistent Threats

👉 Full session list: https://t.co/XefCMx66ni

[Chris Hatton @hattonsec]

?????

[LiveOverflow 🔴 @LiveOverflow]

Cleartext passwords in a database is not a security vulnerability

[Chris Hatton @hattonsec]

@maccamudwood @Wrexham_AFC What are you on about, no one says that, he has been League Two player of the season and got the League Two golden boot before 😂

[Chris Hatton @hattonsec]

Passed CSTL INF, happy days! Onwards and upwards 😁

[Chris Hatton @hattonsec]

inb4 it was DNS

[Rocket Fibre @rocketfibreuk]

We are aware of a network issue and working to resolve

[Chris Hatton @hattonsec]

@cyberethical_me @carlospolopm When typing https://t.co/Tb4NHNRqhC into your URL bar with the intent to search it on Google it goes straight to my site, so I believe 99% of them are accidental. That's why I registered the domain, because I used to do the same and get a 404.

[Chris Hatton @hattonsec]

@cyberethical_me @carlospolopm A decent number of people in the last 30 days

[Chris Hatton @hattonsec]

@cyberethical_me @carlospolopm I own the domain. If you try to copy and paste the script it will warn you that it's not the real site and display my twitter handle. Not malicious, more to make people aware that they're copying a random script.

[Chris Hatton @hattonsec]

@cyberethical_me @carlospolopm What do you mean?

[Chris Hatton @hattonsec]

It's been a week now and I can confirm robot vacuum cleaners are 100% worth it. The place has never looked so consistently clean, it's insane. I welcome our cleaning robot overlords.

[Chris Hatton @hattonsec]

There is a conspiracy around dishwasher salt at the moment, 4 shops and all out of stock for weeks?? #SaltGate #BigSalt

[Chris Hatton @hattonsec]

@LunaLovebad12 @moving_target01 @uniquponym @Grettabeans @sunnymatteson Absolutely not how that works. You don't just fire up wireshark and start decrypting network packets.

[Jesse McLaren @McJesse]

WOW. Jaw dropping. FBI says Ned’s School Survival Guide was never formally declassified.