CG

InfoSec Nerd | Cyber Bogan | Opinions are my own

[CG @int3rrupt]

Is it really necessary to go trawling through old commits of OpenSSH source just to understand what certain sshd messages actually mean in auth.log?

[CG @int3rrupt]

What a week. Who would have thought my Australian Crowdstrike team would have set the Internet on fire by Wednesday. Now it’s time to pass out. #3CXpocalypse

https://t.co/IDv8aQMRGi

[BSidesCanberra @BSidesCbr]

"Advanced Windows Implant Development & Detection" by @int3rrupt runs 2 days before BSides Canberra 2020 at the National Convention Centre. https://t.co/SNfsu5eCVh

[CG @int3rrupt]

@shawski5000 you can have that one dale.

[CG @int3rrupt]

Seeing EDR evasion is so hot right now, I just wanted to add my own. Call the victim and ask them to run the following at an elevated PowerShell prompt. Pow, Windows ATP bypassed -> Set-MpPreference -DisableRealtimeMonitoring $True #Bypass #GetARealJob #CyberDefence

[CG @int3rrupt]

how many more reasons do you need to port to ghidra -> https://t.co/sYGoEmI3As
#reversing @GHIDRA_RE

[CG @int3rrupt]

@e_kaspersky @Int2e_ @Securelist happy to take a look at any samples not as old as my teenage son this long weekend. sharing is cyber caring. #malware

[CG @int3rrupt]

Well there you have it.

[BSidesCanberra @BSidesCbr]

"Sample 78: Deconstruction Of A Linux Adversarial Toolkit" - @int3rrupt https://t.co/0qigiA3Jxn

[CG @int3rrupt]

How annoying is Windows shellcode packed with RTLDecompress buffer? Python to the rescue -> https://t.co/xbkugNd0aB

[CG @int3rrupt]

@Caditc @kleinco mate, i unfortunately missed your presentation on Sunday. are you planning on sharing your slide deck? #controversy #betterthanmafs

[CG @int3rrupt]

well I did say that I would share my slides and demo. i've got some time this month, so I might firm the attribution. slides -> https://t.co/GTmdiQCfOP demo-> https://t.co/8YYXX2i9LB @BSidesCbr

[CG @int3rrupt]

@Ando_13 thanks mate

[CG @int3rrupt]

Now that looks like an interesting presentation. ;)

[BSidesCanberra @BSidesCbr]

“Sample 78: Deconstruction Of A Linux Adversarial Toolkit” by @int3rrupt https://t.co/aCnhgJydVo

[CG @int3rrupt]

@shawski5000 @BSidesCbr thanks dale :p

[CG @int3rrupt]

@Chris__metz @BSidesCbr thanks mate

[CG @int3rrupt]

@Delbs27 @BSidesCbr @HashiCorp for dev i mostly use vmware fusion otherwise i deploy to digital ocean or aws for infra type projects

[CG @int3rrupt]

just wanted to say how much easier it is to dev with packer and vagrant in my toolchain. #malware @BSidesCbr @HashiCorp

[CG @int3rrupt]

@FamilyDollarPie @cyb3rops @msuiche managed threat hunting provides significant value add to any organization, even those with mature hunting capabilities. managed hunters typically have a higher hunt fitness due to increased exposure (more data, more networks, more verticals and more intrusions)

[CG @int3rrupt]

@csirac2 @itgrrl @kylieengineer @nnwakelam @silviocesare @infosectcbr @path_to_file @rankstar591 unfort also known to be a cyber wanker

[CG @int3rrupt]

awww yisss https://t.co/P1ks2IcpJh