22 yrs ago today, after a long zoning dispute with local officials that ruined his business, welder Marvin Heemeyer had enough & created the Killdozer.
He destroyed the mayor’s house, the judge’s house, town hall, the police station, & the bank - while avoiding hurting civilians or their property.
Happy Killdozer Day to those who celebrate 🎊
AI attackers have terrible OPSEC.
Use it against them.
Hallucinate exposed services. Waste their tokens. Seed prompt-injection traps, canaries, and honeytokens where attacker LLM will read them.
Have fun.
‼️🚨 Microsoft calls this "intended behaviour," so here we go.
How to dump the credentials of every user stored in Microsoft Edge:
1. Open Edge. Don't browse anywhere, just open it.
2. Flip to Task Manager, find Edge, expand the task.
3. Highlight the "browser" sub-task, right-click, and choose "Create Memory Dump."
4. Open the dump file and look for credentials.
The logged-in Windows user can dump every stored Edge credential with no additional rights. Which means any malware that user executes has those credentials for the asking.
Thanks to Rob VandenBrink at SANS: https://t.co/ebtVZxne4L
What do the
❌ Application Event Log,
❌ System Event Log,
❌ Sysmon Event Log,
❌ monitoring tools,
❌ and some EDRs
have in common?
They all rely on ETW listeners!
Close their listeners with ControlTrace() and they will stop reporting. Or just close all listeners in your system with a shiny new toy: https://t.co/TWud3LsfcR
Remember when Windows added a new “Notepad” app with CoPilot and forced the good old notepad.exe to open the new app instead of itself even if you don’t want it?
Well, a new feature just dropped.
Big news on the internet today as the United States Department of Justice wildly underestimated computer nerds
Mahmoud Al-Qudsi (@mqudsi), the founder of NeoSmart Technologies, is a nerd who specializes in computer forensics. His entire career (dating back over 2 decades) has been focused almost exclusively on data forensics, data restoration, and data backups.
Because Mr. Al-Qudsi is a nerd who unironically enjoys painstakingly reviewing computer forensics at the byte level, something almost no one else on the planet enjoys, Mr. Al-Qudsi began exploring the recently released Epstein files.
Today he released a write-up explaining the problems with the Epstein redactions, errors they left in the PDF files, ... and all sorts of other artifacts the Department of Justice accidentally left behind. By leveraging these different digital artifacts, it is possible for experts such as Al-Qudsi to reconstruct the files without their redactions.
See subsequent post for his write-up
tl;dr he's reverse engineering and reconstructing epstein files. but hard and will take lots of work
pic: me trying to understand computer forensics based on fonts used