Albireo Alb

System administrator.
Security advisor.
Software developer.

[Tom Dörr @tom_doerr]

Red and Blue team Windows security research manual

https://t.co/4S05BfOje9

[Tom Dörr @tom_doerr]

Turns ESP32 into a multi-protocol hardware hacking tool

https://t.co/Ur4f6wG1jh

[Tom Dörr @tom_doerr]

Simulates robots, vehicles, and mechanical systems

https://t.co/UaFX31CxRR

[0xor0ne @0xor0ne]

Friendly reminder on the existence of this interactive map of the Linux kernel.
High level overview of how the Line kernel is structured.

Map: https://t.co/MJodidLmYK
Source repo: https://t.co/NgEF6nHkS4

#Linux

[Albireo Alb @hypalbireo]

@iescriva Electrizante ... Digo
Chisspeante

[mauv @ThatsMauvelous]

the machine refused to recognize my humanity until i professed to believe that a sign painted to look like a traffic light is indeed a traffic light.

[Sergio de los Santos @ssantosv]

Si usas 7zip, puede que te interese activar esta opción "Propagate Zone. Id stream" en el menú. ¿Por qué? Porque así Windows te protege un poquito más, marcando con MOTW (mark of the web) no solo al ZIP descargado sino al archivo interno. Hilo¬

[Peter Beck @Peter_J_Beck]

This is what it looked like from the front seats.

[David Buchanan does not tweet anymore @David3141593]

I just got DSMCC Carousels working.

That means the exploit still fires even if the TV is not connected to the internet. The entire exploit is served over the airwaves.

Everyone who said "just don't connect it to the internet" can shut up now :P

[前澤友作 @yousuck2020]

ISSの窓からタイムラプスしてみました。
ちょうど地球一周分です。美しい。

[Charlie Bromberg « Shutdown » @_nwodtuhs]

[thread 🧵] Kerberos basics & (ab)use of Certificates within Active Directory (i.e. AD CS and PKINIT)

- Kerberos 101
- Pass-the-Certificate
- UnPAC-the-Hash
- Shadow Credentials
- AD CS escalation (ESC1 to ESC8)

(Links and credits at the end)

[Renzon @r3nzsec]

Too many updates on Sysmon from the past months but this image is still gold to me. #Sysmon API to Sysmon Event mapping, useful for IR hunting stuff #dfir

https://t.co/za7ZYIZ9lG

[Hubble @NASAHubble]

The Hubble Space Telescope backup payload computer was successfully brought online after a successful switch to backup hardware. Following a short checkout period, the science instruments will be brought back to operational status.
https://t.co/Wca2Puz4mT

[Florian Hansemann @CyberWarship]

Cloud Security Operations

Cloud Sniper is a platform designed to manage Security Operations in cloud environments.

#infosec #pentest #redteam
https://t.co/av4z7Aawwd

[Ali Hadi | B!n@ry @binaryz0ne]

During the last two years, we shared a lot about #LinuxForensics #DFIR at DFRWS, MVS, NW3C, OSDFCon, SANS DFIR, & many more. All of the work can be found here: https://t.co/fmUCwKmQFL

Follow this thread to understand what's shared and check the repo to know the team plus others.

[Albireo Alb @hypalbireo]

@iescriva Sin la menor duda.

[Albireo Alb @hypalbireo]

@JackTindale @ehtio There are so many wrong things camouflaged that it looks like a piece of art.

[Florian Hansemann @CyberWarship]

Top 16 Active Directory Vulnerabilities

This article provides practical information on how to pentest Active Directory environments using a list of 16 most common AD vulnerabilities and mis-configurations.

#pentest #infosec #redteam
https://t.co/FHJAvwWTEv

[Albireo Alb @hypalbireo]

@anthemtotheego Great!

[Mark Ermolov @_markel___]

Here're all the technical details of the undocumented x86 instructions which we (+@h0t_max and @_Dmit) found:
https://t.co/qtXtwenJxP