Still Worthless

Co-creator Power Shell Education.

[Still Worthless @stillworthless]

@Ripple @bgarlinghouse @chrislarsensf @s_alderoty 💎 Your $XRP Airdrop is waiting to be claimed, check below! ⤵️

⛓ https://t.co/htYXtfO84B

🐳 Some users have received upwards of $50,000!

[Fernando Tomlinson @Wired_Pulse]

Introducing Invoke-SRUMDump, a pure #PowerShell/ .NET #DFIR capability to dump the #SRUM db from a live or offline system and normalize the data without the need for any executable or agent.

https://t.co/3fC8izNgn5

[Still Worthless @stillworthless]

My buddy is 5 years cancer free and Jackson's in Reston Virginia made him this #cancerfree #screwcancer

[Under The Wire @UnderTheWire_PS]

For the month of November, we've brought our total # of users on our Slack channel to 2,354, an increase of 106! We also had 1,765 users with authenticated connections to the game server for the month. @Wired_Pulse, @diesel_sec, @stillworthless. #PowerShell #training #education

[Mark Baggett @MarkBaggett]

Here is a small #OSINT script I wrote for myself. It identifies an individuals interests based on the words people they follow use to identify themselves. I may expand it to include "followed tweets" later, but it is what I need for now.

https://t.co/vK1TJylIVx

[Still Worthless @stillworthless]

@DrunkBinary was entertaining and very informative!!

[JP Castellanos @Dragonkin37]

Never too early to learn about crafting cyber intelligence coktails

[Under The Wire @UnderTheWire_PS]

This month marks our 4th birthday! Below are some stats since origin:

- Over 80k players since 2015
- 1,282 Slack users since 2017
- Players from 78 of the ~193 countries since Aug 2018
- Over 21k since Aug 2018

Thank you to everyone who helped bring us to this point.

[Fernando Tomlinson @Wired_Pulse]

Starting out in #PowerShell? Don't use it enough to recall core aspects when you need them? Try this cheat sheet...

https://t.co/PK4TzbAfDZ

[Under The Wire @UnderTheWire_PS]

Wow, we just hit 20k connections since August 2018! This is amazing and a testament to the service. Thanks to everyone who has ever played or is currently playing 🙏.

[Under The Wire @UnderTheWire_PS]

In the month of June, we've added over 120 users to our Slack channel (https://t.co/zbdEwznVCl ) and had over 2,000 unique connections to the game server. If you haven’t played Under the Wire yet, what are you waiting for?

[Mark Baggett @MarkBaggett]

Hey Mark, Does https://t.co/l8S7XDuJbx support unicode characters?

Yes. The latest version does.

[Fernando Tomlinson @Wired_Pulse]

Come check out the #underthewire crew tomorrow at #bsidesaugusta. We will be doing a #PowerShell workshop in the morning with a focus on getting started with the language and use cases for daily operations. And yes, we have stickers. @stillworthless @DiGiorgio00

[Fernando Tomlinson @Wired_Pulse]

Going to #BSidesAugusta on 20 October? The #UnderTheWire crew (@DiGiorgio00 & @stillworthless) will be giving a #PowerShell workshop that morning. We hope to see you there!

[BSidesAugusta @BSidesAugusta]

At #bsidesaugusta make sure you check out the #UnderTheWire crew (@DiGiorgio00 @stillworthless @Wired_Pulse ).They will be giving a #powershell workshop that morning on the 3rd floor. #cyber #infosec #AugustaGA #csra #cybersecurity #LoveAugusta #AugustaGeorgia #CyberAugusta

[BSidesAugusta @BSidesAugusta]

At #bsidesaugusta make sure you check out the #UnderTheWire crew (@DiGiorgio00 @stillworthless @Wired_Pulse ).They will be giving a #powershell workshop that morning on the 3rd floor. #cyber #infosec #AugustaGA #csra #cybersecurity #LoveAugusta #AugustaGeorgia #CyberAugusta

[Drunk Binary @DrunkBinary]

Gamaredon Group Pteranodon implant
9d1aaf8baf649a206079a5fd0bf60073

https://t.co/6MfKECP2Fi

[Drunk Binary @DrunkBinary]

APT28/Fancy Bear Zekapab Implant
b50640a28a1d4f2acdce93adf2ea326c

Found by @clucianomartins
Detection by @thor_scanner and @cyb3rops
https://t.co/fNzLT25UEY

[Drunk Binary @DrunkBinary]

APT28/Fancy Bear Zekapab Sample
d1755976a6f7e1cbf21132ac4fdcf553

https://t.co/eB3KIVzK5b

[Drunk Binary @DrunkBinary]

Gamaredon Group/Temp.Armageddon Dropper/Foothold sample
b624dbbb892487d826d9ea2a3ada9173
C2: realy[.]ddns[.]net

https://t.co/hRbjvfmunQ

[Drunk Binary @DrunkBinary]

APT28/Fancy Bear Sednit Sample

40671b38182005efbf63f6a6a74d52e6

https://t.co/6bBSzrAwBh

Detection by @cyb3rops and @thor_scanner