Tim Nary

Hacker, CTF junkie, proud PSU alum and beer geek. Co-founder / Chief Product Officer @snapattackHQ. Thoughts are my own.

[Tim Nary @timothynary]

Proud of our @snapattackHQ research team and their analysis of a real sample for CVE-2024-30051. This privilege escalation attack is actively exploited by #Qakbot and other malware.

Blog: https://t.co/vhljg0GT1y
Video: https://t.co/CI1nEevy0K
Sample: https://t.co/DAIS0TOr3U

[The Haag™ @M_haggis]

Deliver a Strike by Reversing a Badger: #BruteRatel #BRC4 Detection and Analysis

The #Splunk Threat Research Team 🛡 put some good time into this and we believe it will help you now!

https://t.co/u9U6HIZ2h0

#BlueTeam #ThreatHunting
The Highlights 🧵

[Tim Nary @timothynary]

Likely additional content coming out around #bpfdoor from @snapattackHQ later today or tomorrow. I'd love to do a deep-dive technical blog post and video of some of the features and functions of the implant and controller.

[Tim Nary @timothynary]

I've been spending a lot of time with #bpfdoor the past few days, and am happy to start sharing some of what we've found at @snapattackHQ 🧵

[Tim Nary @timothynary]

Finally, while some researchers are busy scanning the Internet for compromised hosts themselves, we're releasing a tool to help organizations scan their own systems for #bpfdoor. This sends the "magic packet" and looks for the UDP response with "1".

https://t.co/PnoCpOTeWH

[Adam Mashinchi @Adam_Mashinchi]

The project @FryGuy2600 & Jonathan have made, appears to be the “holy grail” project that members of infosec community have been thinking and talking about for years:

Running and comparing #AtomicRedTeam tests to @sigma_hq detections, automatically and in bulk.

🤯🤩👍

[Tim Nary @timothynary]

Got it on my third try!

passWORDLE 3/10
🟩2 🟨48 ⬜️14
🟩6 🟨44 ⬜️14
🟩64 🟨0 ⬜️0

https://t.co/ZOvZEzxWxJ

[Tim Nary @timothynary]

Dusting off my Twitter and excited to be more active in this awesome infosec community on here. Hoping to contribute back some cool things via @snapattackHQ

[Tim Nary @timothynary]

This is a must read for defending AD

[Jared Atkinson @jaredcatkinson]

🧵
A user in the Bloodhound Slack asked a question about how they could start approaching the task of detecting BH (Sharphound) and it inspired me to write my thoughts on the matter. Since it is buried as a random thread in Slack, I figured I'd share it here as a thread.

[Strategic Cyber Ventures @SCV_Cyber]

Excited to be a part of this!

[Tim Nary @timothynary]

@S4CTF we're trying!!!!

[Tim Nary @timothynary]

I won the F5 lottery today. #shmoocon

[Tim Nary @timothynary]

I had to write a basic x86 disassembler for my RE class. Clearly room for improvement but I definitely learned a lot https://t.co/MEYwiFcTnA

[Penn State College of IST @ISTatPENNSTATE]

#tbt IST's @iaclub wins first place in the Hack Fortress competition (and the golden wrench) at #Shmoocon in 2011.

[Bruce Potter @gdead]

Psst. @iaclub... I'll be up at PSU Thurs/Fri doing some recruiting. Be sure to stop by the @pontetec booth at BJC.

[Tim Nary @timothynary]

Heading up to @ISTatPENNSTATE for the Pro Expo. If you're in town and want to grab a drink let me know!

[Tim Nary @timothynary]

@Crypt0s congratz dude! Hoping my team will be back to compete and see you at shmoo!