Sean Bailey

security/laughs/learning

[Dirk-jan @_dirkjan]

New ROADrecon version is out! It adds many new things to the database and front-end GUI:

- Authorization policies
- Groups page now has dynamic/role assignable groups info
- App roles in serviceprincipals overview
- Owned objects supports groups/apps/sps
https://t.co/j2DUrI7ai3

[LuemmelSec @theluemmel]

Fetch Defender exclusions from Intune managed devices as non-admin user:

Export management log files
Extract cab file
Review MDMDiagHtmlReport.html
Search for "Excluded Processes" and "Excluded Paths"

Cherio
#pentest #redteam #tipswednesday #thankmelater

[Rachel Tobac @RachelTobac]

With this announcement, bot farms everywhere are now preparing to legitimize accounts w/ new & improved pay-to-increase-verified-followers options.
Remember Goodhart's Law: when a metric becomes a goal, it ceases to be a good measure
(any metric based goal can & will be gamed)

[Anthony. @AnthonySecurity]

If you encounter an MFA prompt when authenticating to O365, navigate to https://t.co/Bu5Mw8CCeu as you may still have access to a subset of apps #redteam

[Jason Choi @mrjasonchoi]

The Definitive Thread on FTX

I met SBF before FTX started, and witnessed their rise and fall. I can't stand @nytimes's puff piece.

If anyone wants to know what happened, send them this.

[Tom Kretchmar @tkretchmar]

How do we convince Elon Musk to buy Ticketmaster

[💻 Sherrod @sherrod_im]

Mark my words: the InfoSec community being fractured by the implosion of twitter will absolutely make the global internet less safe.

[Mayfly @M4yFly]

Welcome to the new AD Mindmap upgrade !
v2022_11 will be dark only (this is too painful to maintain two versions).

Thx again to : @Vikingfr and @Sant0rryu for their help 👍

Full quality and zoomable version here :
https://t.co/eIJE0apRzw

Overview :

[EU says Elon should not lie abt my blue check @emptywheel]

Trump APPEARS to claim that he used DOJ resources to help DeSantis win in 2018.

[Gergely Orosz @GergelyOrosz]

Even before layoffs, on the first week - when Tesla/Boring engineers were making the list of who stays, who goes, an engineer with 8+ years of tenure said that Twitter is gone, dead, and Elon is killing it on purpose.

I didn't believe its this dramatic.

Seems like I was wrong.

[nilay patel @reckless]

SCOOP from @alexeheath: Twitter's chief privacy officer, chief compliance officer, and chief information security officer have all quit. Internal note warns that violating FTC privacy settlement could destroy the company but Elon doesn't seem to care. https://t.co/JLhugR9JvN

[Jack Lawrence @JackMLawrence]

It took me less than 25 minutes to set up a fake anonymous Apple ID using a VPN and disposable email, attach a masked debit card to it (with the address being Twitter's HQ), and get a verified account for a prominent figure. Just think what a nation-state or bad actor could do...

[Dirk-jan @_dirkjan]

New blog and tool: Introducing ROADtools Token eXchange (roadtx) - Automating Azure AD authentication, Primary Refresh Token (ab)use and device registration.

Blog: https://t.co/lqQ1FxFG9h
Code: https://t.co/j2DUrIodk3
Some features in screenshot attached.

[The Chaser @chaser]

Elon has blocked verified accounts from changing their names...

[Al Yankovic @alyankovic]

Oh no, they suspended @danielradcliffe's Twitter account! Wasn't it obvious he was doing a PARODY???

[The Chaser @chaser]

Let the countdown begin

[ProjectDiscovery @pdiscoveryio]

[NEW-PROJECT] 🥳🥳

Katana –– A next-generation crawling and spidering framework.

→ Standard / Headless
→ Customizable Config
→ Scope control
→ Output Filters

GitHub Project –– https://t.co/ZPFtqcxpWL

#hackwithautomation #cybersecurity #crawler #opensource #bugbounty

[Ryan Mac 🙃 @RMac18]

Elon once tried to get me to write a story that a Thai-based British man, who had criticized him, was a “child rapist” and took a 12 year old bride based on information someone sent him. That someone ended up being a conman pretending to be a private investigator.

[Molly White @molly0xFFF]

imagine deciding which engineers to keep around based on lines of code and choosing to keep the ones who wrote the MOST

[Brianna Wu @BriannaWu]

1/ Here’s everything we know about the mass Twitter advertising exodus in plain language.

So, Elno acquires Twitter and advertisers are FREAKED. Would be a good time to reassure them, right?

Except Twitter’s Chief Revenue officer @SEP quits on Friday. Literally walks out.