Pieter Donche

Security Engineer By Day;
Hacker/Pentester by night;
Elite Hacker - HTB | CRTP | CRTE;
#cybersecurity #redteam #purpleteam #threathunting

[David das Neves @david_das_neves]

𝗥𝗲𝗽𝗼 📑 - 𝗔𝘄𝗲𝘀𝗼𝗺𝗲 𝗔𝘇𝘂𝗿𝗲 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 🔥🛡️
This is a curated and highly recommendable list of awesome Microsoft Azure Security tools, guides, blogs, and other resources. Make use of these brilliant tools!

https://t.co/2oEzv7Z5Om

#CyberSecurity #Azure

[Pieter Donche @rival236]

@lrdvile LOL 😂
-3, that's still 7 though

[Panos Gkatziroulis 🦄 @ipurple]

An ADCS honeypot to catch attackers in your internal network https://t.co/Toettqzapb

[Evil Rabbit Security Inc. @EvilRabbitSec]

I've published a new story regarding the various ways DrugHub a #DarkWeb Marketplace has failed.

https://t.co/LmtBBAAHft

[Troy Hunt @troyhunt]

I love it when @haveibeenpwned screws over the bad guys 😎

[IAM!ERICA @EricaZelic]

This is your unsolicited reminder that an incident is NOT a breach. Unless you have a law degree or are a CISO, you shouldn't be making that distinction.

[d4rkm4tter (Mike Spicer) @d4rkm4tter]

My favorite sticker of @shmoocon

[The Hacker News @TheHackersNews]

🔴 Critical Alert: Microsoft has just released a massive patch for 161 vulnerabilities across its software, including 3 zero-day flaws that have been actively exploited.

⤷ CVE-2025-21333
⤷ CVE-2025-21334
⤷ CVE-2025-21335

Patch now: https://t.co/0herwJS73C

[IAM!ERICA @EricaZelic]

IT security is not just about testing how it's supposed to work, but trying to identify and test all the ways it's NOT supposed to work.

The latter is the hard part and what consumes most of your time.

[John Hammond @_JohnHammond]

Learn Active Directory! https://t.co/wULE7n5wha

[IAM!ERICA @EricaZelic]

Do you know why attackers can stand up infrastructure so fast?

They don't have to go to meetings, get blocked by "change control", or succeed in politics.

They focus on the goal, take on problems as they occur, and otherwise have lost their fucks.

[Pieter Donche @rival236]

@EricaZelic @NathanMcNulty @RedByte1337 for Azure !!
He is one of the instructors for CARTE from AlteredSecurity

[IAM!ERICA @EricaZelic]

Offsec is a mindset. I really believe that.

The best engineers, in my opinion, are the ones who can compartmentalize and personify a real threat actor as well as an admin and a defender while not pissing off the C-Suite enough to keep their job.

[Ohm-I (Oh My) @mcohmi]

Red team/pentest tools gotta stop using ldap3 and start using msldap from @SkelSec

https://t.co/1M3AYgoAMx

[Orange Tsai 🍊 @orange_8361]

The detailed version of our #WorstFit attack is available now! 🔥
Check it out! 👉 https://t.co/EWlBSgXhpx

cc: @_splitline_

[NetworkChuck @NetworkChuck]

This popped up in my memories. Can anyone guess where this is?

[Dirk-jan @_dirkjan]

Few BloodHound python updates: LDAP channel binding is now supported with Kerberos auth (native) or with NTLM (custom ldap3 version). Furthermore, the BH CE collector now has its own pypi package and command. You can have both on the same system with pipx. https://t.co/PwhsOkZMzW

[The Hacker News @TheHackersNews]

🚨 A critical CVE-2024-52046 vulnerability in Apache MINA, scoring a perfect CVSS 10.0, could enable remote code execution.

The flaw lies in Java’s deserialization protocol, leaving systems wide open to attack if improperly secured.

Read now: https://t.co/CFo6ZC7qnU

[Obsidian @obsdmd]

Obsidian has completed a second independent audit by the security firm @cure53berlin.

The report finds that incremental updates since Obsidian 1.5.3 maintained the highest degree of attention to security, and that no new vulnerabilities were introduced.

https://t.co/Ao2E1Lt8oK

Particular emphasis was placed on hardening the Web viewer plugin during its development process, to ensure it would pass our strict security standards.

We're proud to report that the Cure53 team reviewed the resolutions and concluded that their recommendations have been properly followed.

We make Obsidian so we can capture our own private thoughts and ideas. Independent audits help us ensure that our code and procedures meet the highest security standards. We will continue working with industry-leading security firms to provide comprehensive coverage and transparency towards this commitment.

[Pieter Donche @rival236]

@vxunderground @SEKTOR7net 👀👀