Tony Gore

Security Researcher, US Marine Corps Veteran, Microsoft Most Valuable Researcher 2023 & 2024

[Tony Gore @nullg0re]

#NewProfilePic

[Tony Gore @nullg0re]

@DrAzureAD Congrats Nestori!

[Tony Gore @nullg0re]

@NinjaStyle82 @SM_Bradshaw Check out @0xZDH ‘s TokenMan toolkit. https://t.co/m1fpfzwMT5

It uses FOCI abuse. More research can be found here: https://t.co/DDsPyouQBI

[Tony Gore @nullg0re]

This was my last research project while working for Secureworks. I’ve taken a new role at CrowdStrike but I am still proud of the work I did with my Secureworks fam. PTAL:

Cloud to on-prem (and multi-cloud) lateral movement: https://t.co/skPpbkAgqE

[Tony Gore @nullg0re]

@AnupamAS01 @msftsecresponse Thank you!!

[Tony Gore @nullg0re]

I placed 30th in the top 100 Most Valuable Researcher leaderboard!! Special thanks to @msftsecresponse for putting on these events year after year!

[Tony Gore @nullg0re]

@_sigil @msftsecresponse Thanks Katie!!

[Tony Gore @nullg0re]

Permissive Avere Contributor Role Allows for VM Credential Dumping.

Secureworks Threat Analysis:
https://t.co/G3OxOgQ0c8

Nullg0re Blog (More personalized analysis):
https://t.co/wJKoF68yIH

[Tony Gore @nullg0re]

How to combine Responder w/ Evilgnx2 for privilege escalation and lateral movement in Passwordless, MFA and/or Zero Trust Environments:

(Technique discovered by @nevadaromsdahl in 2023))

https://t.co/pmHJxrxn35

[Tony Gore @nullg0re]

@HackingDave I’ll hit up your site for the contact info! Thanks Dave!

[K̵i̵r̵k̵ ̵T̵r̵y̵c̵h̵e̵l̵ @Teach2Breach]

Episode 1 w/ @nullg0re, of my new podcast 'whoami' is now live on spotify and youtube! On whoami, I'm talking with great hackers to find out how they got into hacking and dig into their area of expertise. Check it out:
https://t.co/y9EwoZLOww
https://t.co/Gzj5D2E0Jx

[Tony Gore @nullg0re]

Performed some research with my teammate @SantasaloJoosua regarding Multi-Tenant Application Redirect URIs. Turns out, in some cases, they can be taken over and used to steal Azure Authorization Code's (OAuth2.0 Auth Code Flow):

https://t.co/J4daIpI2hp

[Tony Gore @nullg0re]

Spent some time in Azure Machine Learning Studio and identified some areas to keep in mind when using the environment. Nothing groundbreaking, but definitely a reminder of why security needs to be more involved with the explosion of AI infrastructure / needs:

https://t.co/TyfEi9NLw4

[Tony Gore @nullg0re]

Oh! This is cool! I placed in the top 10 of hackers / researchers world wide in the @msftsecresponse Q4 Leaderboard with 325 points! And top 5 in the Azure specific leaderboard!

Special shoutout to my teammates (past and present) @DrAzureAD @SantasaloJoosua for helping me level up over the past year. Thank you guys!

[Tony Gore @nullg0re]

@DrAzureAD @msftsecresponse Congrats @DrAzureAD !!!

[Tony Gore @nullg0re]

Entra ID Connect Arbitrary Password Overwrite
https://t.co/ZMkFOwvrJm

[Tony Gore @nullg0re]

Vulnerability Hunting with ChatGPT
https://t.co/8tK200x2jg

[Tony Gore @nullg0re]

@HackingDave @MirandaGhrist hahaha spoken like a true Marine. Rah! LOL

[Tony Gore @nullg0re]

@Cyb3rWard0g @msftsecresponse Thank you Roberto!!

[Tony Gore @nullg0re]

Earlier this year I made the Top 100 2023 Microsoft Most Valuable Researcher list! Thanks @msftsecresponse for sending out the swag! Just in time for the holidays!