olugbenga rojaiye

CyberSecurity Consultant | QSA

[olugbenga rojaiye @rojaiye]

@myaccessbank @access_more pls guys what is happening to your mobile app, I can’t even login. Pls help

[olugbenga rojaiye @rojaiye]

@ishanovic @insideoyo Yes o, a great man @MayorIsaacBrown he is. Thank you sir @seyimakinde

[Csaba Kissi @csaba_kissi]

If I would start a web developer full-stack journey now:

Computer science basics
↓
HTML + CSS + Sass
↓
Git/GitHub
↓
TailwindCSS/Bootstrap
↓
JavaScript & NPM/Yarn + Bundling + Deploying
↓
ReactJs & NextJS||Vue & Nuxt
↓
NodeJS + MongoDB||PHP/Laravel + MySQL
↓
Linux

🏆🏆

[Simon @simonholdorf]

If you're new to cloud tech ☁️, instead of trying to master everything at once, focus on the basics first
👇
🔸Linux basics
🔸Networking basics
🔸Container basics
🔸IaC basics
🔸Serverless basics
🔸Monitoring basics
🔸Security basics

Practice continuously 🔥, profit forever 🚀

[Andy Robbins @_wald0]

From initial access to Global Admin with #BloodHound and BARK.

In this thread let's walk, step by step, through an example attack path based on real configurations we've seen in real environments:

[olugbenga rojaiye @rojaiye]

@eeyitemi Don’t worry, oya report another one on Tesla 😁 make we share am o

[olugbenga rojaiye @rojaiye]

@thecybermentor Finished with aquaculture and fisheries degree, now a senior application security specialist and a QSA for 4yrs.

[OffSec @offsectraining]

Tell us you're a penetration tester without telling us you're a penetration tester.

[Programmer Humor @PR0GRAMMERHUM0R]

I want this guy working on the unit tests https://t.co/0eyRO55Ylp

[olugbenga rojaiye @rojaiye]

@Topzy12 Which matter? M not sure u r watching d same match o

[Dirk-jan @_dirkjan]

There's a lot going around about analyzing Azure AD environments for compromise and risky/rogue permissions lately. Most focus on logs, but if there are no (more) logs or you just want to review AAD as a blue teamer, here is how ROADrecon (https://t.co/j2DUrI6Csv) can help:

[Dirk-jan @_dirkjan]

Too bad for the hours I spent writing this in C, but I did finally figure out how to do the Primary Refresh Token key derivation in Python. This means you can now use the session key from Mimikatz directly in roadlib/roadrecon! Only with version on GitHub https://t.co/j2DUrI6Csv

[Ahsan Khan @hunter0x7]

finding endpoints:

cat js | grep -o -E "(https?://)?/?[{}a-z0-9A-Z_\.-]{2,}/[{}/a-z0-9A-Z_\.-]+"

[Dirk-jan @_dirkjan]

With a few small modifications @MDSecLabs' Office 365 attack toolkit works with ROADtools tokens. This makes it a nice GUI for API tokens obtained with SSO abuse or via other means. cc @0x09AL

[HUSBAND OF LAGOS @iconic_remi]

They said protesters are destroying properties, they didn’t know we have cameras 😂. So it’s the police themselves supervising the destruction of properties. #EndSARS https://t.co/61ApWYJ1H6

[Moyò of Lagos @Moyo_VIP]

This is a public school in Nigeria and Buhari approved N9.25billion for National Assembly complex renovation. Una see why #ENDBADGOVERNANCE #EndSARS no fit end.. SHAME!!!

[olugbenga rojaiye @rojaiye]

@eeyitemi Happy birthday Eyitemi, more blessings

[E K E T I @eketiette]

Their generation: "OFF THE MIC!"
A culture of silence and unaccountability.

Our generation: "SÒRÒ SÓKÈ!"
Building a culture of integrity and transparency.
#EndSars #EndBadGovernance

[Somto Onuchukwu @chosensomto]

James Nwafor, Former OC SARS Awkuzu (in black), killed Chijioke Illoanya, and told his parents to their faces that “Nothing will happen”.
If nothing happens to CSP Nwafor, then we protested for nothing.
I call on all Nigerians to RT and tweet until we get Justice!!! #EndSWAT