Roberto Correa ⚡️

👨🏻‍💻IT Security Engineer (always learning) 📷 amateur photographer 🌎 a.k.a “El zamorano errante” Mastodon: @[email protected]

[Roberto Correa ⚡️ @robertux_sec]

@kikemarquez_10 @ZCFoficial GRACIAS POR TODO @kikemarquez_10 . Zamora es tu casa y siempre te recibiremos con los brazos abiertos. Te deseo lo mejor !!! Has dejado una huella muy grande!!!

[Roberto Correa ⚡️ @robertux_sec]

NO a la supresión de trenes en Sanabria - ¡Firma la petición! https://t.co/a2qhlG4ZpJ a través de @change_es

[Ali Alwashali @ali_alwashali]

Has anyone tried using the RE&CT framework to assess their IR capability?

https://t.co/7XnEAB5Ta4

[Roberto Correa ⚡️ @robertux_sec]

GitHub - hysnsec/awesome-threat-modelling: A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review. https://t.co/vYBxGn3oNu

[Roberto Correa ⚡️ @robertux_sec]

GitHub - ine-labs/GCPGoat: GCPGoat : A Damn Vulnerable GCP Infrastructure #cloud #vulnerability https://t.co/7vefDDVKQ7

[Roberto Correa ⚡️ @robertux_sec]

This project uses GPT-3 Codex to convert natural language into commands in #PowerShell , Z shell, and #Bash . This cross-shell project uses natural language processing that expresses intent, into live executed code in your terminal! #ChatGPT https://t.co/FSKOdIUoDI

[Roberto Correa ⚡️ @robertux_sec]

A very good #WebApplication #Pentesting checklist https://t.co/TH3fjOmGyF

[Roberto Correa ⚡️ @robertux_sec]

@4n6lady @GERARDJOHANSEN @PacktPublishing It looks pretty good!!

[Stephan Berger @malmoeb]

1/ We recently had a case where a TA compromised an Azure Global Admin account.

The TA used the compromised account to spun up over 200 VMs to mine cryptos with it. The compromise was only noticed due to skyrocketing Azure costs. 💸

🧵
#CyberSecurity

[Roberto Correa ⚡️ @robertux_sec]

GitHub - Neo23x0/yaraQA: YARA rule analyzer to improve rule quality and performance #yara https://t.co/uYZKp8aEdE

[Anna McAbee @amcabee13]

Check out the new AWS Security Incident Response whitepaper! It has been completely re-written from previous versions. For details on the update and a link to the whitepaper, see this blog: https://t.co/JHqmQvz2Pn

[Gavin K @atomiczsec]

I have been using @shodanhq and @censysio recently, here are some good resources for dorks:
https://t.co/2aYwOl5FLz
https://t.co/L2nh80ZOkf
https://t.co/XdbFKnXkMh
https://t.co/0kKqYwmUtr
#shodan #censys #dorks #shodandork #censysdork

[Roberto Correa ⚡️ @robertux_sec]

GitHub - ine-labs/GCPGoat: GCPGoat : A Damn Vulnerable GCP Infrastructure #pentesting #cloud #GCP https://t.co/7vefDDVKQ7

[hAPI_hacker @hAPI_hacker]

I'm excited to announce the official release of the APIsec University: API Penetration Testing course (https://t.co/BSd7vcq3uo). You can now take the entire hands-on API hacking course and earn a Certificate of Completion for FREE. 🧵
@hashishrajan @davidbombal @colindomoney

[VirusTotal @virustotal]

Many of you asked for this, and today we are happy to announce the release of our VTI Cheat Sheet with hints and examples on the most useful VT Intelligence queries and modifiers. @alexey_firsh provides all details along with several examples here: https://t.co/3xMjCFbZj9

[Roberto Correa ⚡️ @robertux_sec]

This is a #webshell open source project with a lot of examples #dfir https://t.co/ZDTbzs8W2k

[Roberto Correa ⚡️ @robertux_sec]

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. #osv-scanner #cybersecurity #sbom #sourcecode https://t.co/EHfRItZ9MU

[Roberto Correa ⚡️ @robertux_sec]

#kubeshark : The API traffic viewer for Kubernetes providing deep visibility into all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster. Think #tcpdump and #Wireshark re-invented for #kubernetes https://t.co/RldhlIwiJD

[raptor @0xdea]

Sniffing SSH passwords

TL;DR
# pgrep -l sshd
6235 sshd
# strace -f -p 6235 -e trace=write -o capture

https://t.co/FwXEQosjbA

[Thomas Roccia 🤘 @fr0gger_]

📢I recently investigated a campaign targeting the cryptocurrency industry. I wrote a detailed report that includes TTP, IOC and more. Here is a thread about this attack! 🧵👇

@MsftSecIntel @MicrosoftAU #infosec #cryptocurrency #threatintelligence #apt

https://t.co/KNe8gH4cBB